
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-mPYqRxNxZDJGJMtjnT70hACFo.roa
File: e-mPYqRxNxZDJGJMtjnT70hACFo.roa (raw, json)
Hash identifier: M77jtzRTm3Ybv7k2MFoMLWUxIx6OXP5kU40H8t53sug=
Subject key identifier: 7B:E9:8F:62:A4:71:37:16:43:24:62:4C:B6:39:D3:EF:48:40:08:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3ABA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-mPYqRxNxZDJGJMtjnT70hACFo.roa
Signing time: Fri 22 Aug 2025 08:47:42 +0000
ROA not before: Fri 22 Aug 2025 08:47:42 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 118.232.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15034 (0x3aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:47:42 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7BE98F62A47137164324624CB639D3EF4840085A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:1b:d8:08:72:1f:ef:e5:64:e4:54:de:2f:
c4:02:0e:e0:06:84:30:a2:c2:91:98:16:83:0e:7e:
db:63:6e:49:78:b6:82:51:3c:9e:63:a4:bf:c7:a7:
6b:af:51:ac:6a:3f:bd:42:bf:bd:40:1f:9f:03:60:
62:82:0a:6c:1a:d7:5c:d2:84:22:a1:77:0c:62:e0:
dd:08:d9:4c:03:7d:5f:07:55:c6:1d:38:ca:f3:09:
4d:65:54:4e:95:f9:bf:fa:ec:c1:65:bc:6e:80:36:
b4:c5:ea:3d:d0:c3:43:58:06:61:25:3f:fc:b1:81:
d1:87:a9:1b:b0:37:d3:f4:47:85:07:49:90:50:43:
95:a1:07:80:eb:c1:8d:05:a3:cf:db:71:da:1d:81:
c6:48:0a:ca:2b:fb:55:eb:bf:77:31:e8:c7:b6:89:
ef:f1:de:ef:77:8b:d7:c9:46:5b:19:82:6a:50:8c:
36:29:c7:d1:2f:a6:fc:57:03:58:a8:ff:92:59:54:
9e:94:35:53:1f:23:94:29:49:20:aa:bb:59:9e:d3:
5b:c8:23:f6:ca:70:92:d0:08:0c:83:7b:f1:28:b9:
25:e5:ea:d7:02:0e:36:71:99:78:15:2f:22:7d:88:
df:94:e6:7f:56:8d:7d:48:67:e2:7b:b3:7e:5d:ab:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E9:8F:62:A4:71:37:16:43:24:62:4C:B6:39:D3:EF:48:40:08:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-mPYqRxNxZDJGJMtjnT70hACFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.16.0/22
Signature Algorithm: sha256WithRSAEncryption
25:60:d6:e9:91:8c:5e:f6:d9:8e:0c:46:f4:47:7e:35:33:67:
30:c7:44:f0:d7:2a:9d:65:31:07:f5:4d:d5:eb:33:4d:d6:2f:
6f:15:f2:bf:4f:6e:61:c4:9d:8f:d2:57:2b:80:83:29:35:41:
12:31:73:11:45:8b:72:a5:80:aa:45:13:c9:35:93:06:25:86:
cd:63:41:01:d9:d0:09:a6:22:54:26:7e:25:83:9a:ef:74:d9:
43:18:83:42:41:64:23:5d:fa:dd:91:fa:b2:d6:ac:f7:dd:47:
87:2a:59:30:f7:c3:13:be:3b:34:bd:94:7b:4e:d8:e9:5c:3b:
1c:9a:41:1d:fa:dc:4e:60:25:98:eb:eb:fa:3a:f2:bc:09:ec:
a4:46:73:61:4e:da:19:ee:7c:a9:c1:16:d7:ef:86:a5:5a:d3:
af:59:bf:59:d0:e6:ee:59:2c:9d:bc:c6:a2:6b:95:66:75:d8:
57:68:ff:9d:87:2d:ca:bb:37:c2:09:d1:80:25:ce:22:52:bd:
8e:b9:36:cf:33:c1:65:4f:1d:cf:e0:1c:38:3b:47:95:28:8e:
9e:57:1d:03:fd:54:39:5c:06:d8:fb:f7:ac:4e:d1:9e:37:9a:
dc:59:de:7f:f9:09:77:71:bf:00:fd:2e:f9:7a:e5:72:12:e2:
d1:1f:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:23 2025 by rpki-client