
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-vIgsLWC1twUGp7DwdflR9JwQc.roa
File: f-vIgsLWC1twUGp7DwdflR9JwQc.roa (raw, json)
Hash identifier: rQ/JMPwGFztiQnvlPKGDZCwGj7wbW6NPZQ1L8LHdqWk=
Subject key identifier: 7F:EB:C8:82:C2:D6:0B:5B:70:50:6A:7B:0F:07:5F:95:1F:49:C1:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 388E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-vIgsLWC1twUGp7DwdflR9JwQc.roa
Signing time: Fri 22 Aug 2025 08:45:25 +0000
ROA not before: Fri 22 Aug 2025 08:45:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 106.1.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14478 (0x388e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:25 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7FEBC882C2D60B5B70506A7B0F075F951F49C107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:ec:c1:50:a1:eb:0a:46:29:78:ac:e4:96:
ea:78:aa:f5:76:f8:82:9b:3d:18:34:9e:40:0e:18:
74:08:5e:c0:19:9c:33:13:df:09:08:b8:64:9b:ad:
ec:17:f2:55:60:ce:f6:43:ba:c5:f4:b1:7c:f9:37:
83:c4:56:ad:fd:6e:e9:8f:1a:c7:e7:85:a9:5e:30:
b8:7d:70:01:b2:ab:75:2d:9d:7e:d6:b4:8b:f9:fa:
b1:e8:cc:57:5f:72:5d:66:28:f2:07:aa:f9:db:61:
07:fc:58:ec:3a:8e:73:65:83:31:56:51:b6:f7:e6:
43:e6:72:5c:4c:c2:7f:8c:c2:98:7e:ea:f3:2b:5a:
cb:1c:3c:d0:56:d9:d6:ec:c7:44:ca:4b:2f:79:0d:
ce:56:75:35:19:d3:87:c0:a7:48:67:ff:37:b3:08:
d4:00:ed:59:ad:40:c8:13:bb:2d:9f:39:c5:90:ba:
a1:9e:03:73:61:4f:0c:68:98:05:1e:5d:6d:a6:ac:
d6:c9:71:09:ad:1a:12:7a:6f:7b:ff:3c:5f:29:ef:
dd:64:f7:7f:a3:1e:db:d9:0d:45:fe:9f:9f:bf:d4:
52:06:27:8d:3e:69:00:2d:80:05:45:98:47:88:3a:
3d:da:d9:44:ed:6b:dc:b1:d1:cd:d9:79:0e:7d:f6:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EB:C8:82:C2:D6:0B:5B:70:50:6A:7B:0F:07:5F:95:1F:49:C1:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-vIgsLWC1twUGp7DwdflR9JwQc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.69.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fa:ca:d0:c6:f2:3f:13:03:1a:2b:ed:96:87:a8:0c:55:c1:
ab:f9:07:28:ac:10:ca:bd:e2:d9:9d:70:e4:3c:b6:64:9e:c9:
6e:b3:99:80:12:60:be:7a:94:d9:a5:ea:53:88:d6:e8:52:de:
ad:c0:45:b2:2d:e3:2f:9e:08:da:74:15:15:69:be:2c:90:7f:
ae:14:18:5a:1f:3c:f5:2c:41:b1:33:35:37:9b:d7:d9:fa:35:
dc:bf:4b:03:dd:fc:97:ee:a5:f9:2e:4b:61:61:64:ab:d2:f9:
a1:d3:2f:82:cd:85:05:a2:d8:ed:65:21:82:69:b3:55:34:9c:
2c:bf:be:05:ae:db:39:e6:70:e2:c6:8b:96:df:c4:4a:b9:23:
f2:1a:1b:c0:53:4b:c2:4b:55:76:ec:f7:7f:a1:a9:eb:39:d0:
2f:4c:49:59:16:dc:3a:1f:a5:54:b7:e2:45:72:36:82:fc:97:
41:6b:25:bb:8d:e1:9f:ae:cc:b6:ce:b9:6a:18:b6:11:99:5b:
cd:86:31:43:ac:12:bc:01:74:d0:35:c2:34:2f:28:f2:9e:e9:
a3:0b:2e:56:88:b5:e4:63:85:6b:3f:2b:3f:e9:66:47:c8:c3:
e4:39:9c:e6:4e:0c:01:03:6b:c9:83:87:d3:5a:07:53:03:0f:
0b:f0:9d:35
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdGRUJDODgyQzJENjBC
NUI3MDUwNkE3QjBGMDc1Rjk1MUY0OUMxMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQT+zBUKHrCkYpeKzklup4qvV2+IKbPRg0nkAOGHQIXsAZnDMT
3wkIuGSbrewX8lVgzvZDusX0sXz5N4PEVq39bumPGsfnhaleMLh9cAGyq3UtnX7W
tIv5+rHozFdfcl1mKPIHqvnbYQf8WOw6jnNlgzFWUbb35kPmclxMwn+Mwph+6vMr
WsscPNBW2dbsx0TKSy95Dc5WdTUZ04fAp0hn/zezCNQA7VmtQMgTuy2fOcWQuqGe
A3NhTwxomAUeXW2mrNbJcQmtGhJ6b3v/PF8p791k93+jHtvZDUX+n5+/1FIGJ40+
aQAtgAVFmEeIOj3a2UTta9yx0c3ZeQ599rC5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUf+vIgsLWC1twUGp7DwdflR9JwQcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Ytdklnc0xXQzF0d1VHcDdE
d2RmbFI5SndRYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AUUwDQYJKoZIhvcNAQELBQADggEBABT6ytDG8j8TAxor7ZaHqAxVwav5ByisEMq9
4tmdcOQ8tmSeyW6zmYASYL56lNml6lOI1uhS3q3ARbIt4y+eCNp0FRVpviyQf64U
GFofPPUsQbEzNTeb19n6Ndy/SwPd/JfupfkuS2FhZKvS+aHTL4LNhQWi2O1lIYJp
s1U0nCy/vgWu2znmcOLGi5bfxEq5I/IaG8BTS8JLVXbs93+hqes50C9MSVkW3Dof
pVS34kVyNoL8l0FrJbuN4Z+uzLbOuWoYthGZW82GMUOsErwBdNA1wjQvKPKe6aML
LlaIteRjhWs/Kz/pZkfIw+Q5nOZODAEDa8mDh9NaB1MDDwvwnTU=
-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:24 2025 by rpki-client