
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBxtAj6pHePd6bVkZSMLzjYimcw.roa
File: fBxtAj6pHePd6bVkZSMLzjYimcw.roa (raw, json)
Hash identifier: qI4Z4PB/OSIlszuVFTf1c6FXVpk/QtpxQRf1mNxbeqs=
Subject key identifier: 7C:1C:6D:02:3E:A9:1D:E3:DD:E9:B5:64:65:23:0B:CE:36:22:99:CC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3B06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBxtAj6pHePd6bVkZSMLzjYimcw.roa
Signing time: Fri 22 Aug 2025 08:48:00 +0000
ROA not before: Fri 22 Aug 2025 08:48:00 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 2407:4d00:ff09::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15110 (0x3b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:48:00 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7C1C6D023EA91DE3DDE9B56465230BCE362299CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:ca:28:f3:11:db:d2:4b:fa:e6:e5:9d:ac:
73:a2:5c:4a:00:e1:0b:8a:21:07:bc:0e:15:fa:bd:
90:8d:c2:cb:0a:82:11:2b:be:37:cc:4a:1e:64:42:
0a:50:f6:aa:33:3f:2e:e3:bd:b7:2b:1e:48:4b:8b:
c2:2a:45:c1:72:be:0c:dd:5b:2a:35:80:d2:4a:a0:
9b:64:71:d0:a6:13:b4:fb:79:ac:1f:68:e5:73:1e:
6f:a6:55:ce:f1:b7:15:6f:76:4b:5d:ec:0f:59:19:
13:2a:86:6f:36:1b:a3:7c:aa:e0:7f:f8:57:fe:0b:
c5:48:14:38:95:6b:2d:63:10:4f:ff:c5:0d:5d:3c:
a8:25:8c:66:8d:c6:39:99:7f:d0:1f:03:1b:b6:7f:
15:c2:40:1f:b7:90:98:dc:42:e4:18:81:ef:58:ab:
9f:79:43:cb:03:7c:84:09:e4:57:d0:17:f2:66:56:
bf:73:d8:11:c7:83:75:73:54:69:19:b8:cc:9b:22:
f3:54:71:20:ff:aa:9b:1e:88:e2:48:93:08:07:97:
25:ee:40:66:96:29:a8:c2:f4:05:28:2c:af:95:f1:
6e:c8:fd:38:15:f9:93:65:4b:43:f4:56:4a:9e:30:
1a:81:3c:ed:36:5e:c0:49:d1:7e:bc:45:66:27:ff:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:6D:02:3E:A9:1D:E3:DD:E9:B5:64:65:23:0B:CE:36:22:99:CC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBxtAj6pHePd6bVkZSMLzjYimcw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff09::/48
Signature Algorithm: sha256WithRSAEncryption
8c:b6:f1:ac:60:71:de:22:a8:48:48:aa:16:27:90:23:47:4f:
25:fc:88:0c:7a:4a:07:50:0c:ad:40:c0:c2:bd:39:8d:7d:24:
73:95:a2:77:63:43:0c:aa:5d:15:35:cc:fb:90:16:1d:60:92:
4b:ff:29:3a:24:12:72:e0:66:06:f0:04:d2:14:f4:cc:fe:fe:
e3:b6:05:db:37:52:16:95:c3:86:8c:2a:6b:41:cb:33:39:14:
85:34:77:12:ef:a8:76:53:f2:21:42:03:65:ee:f3:24:c2:3f:
53:67:3b:2e:06:88:02:88:70:d6:7d:40:06:59:98:18:55:78:
d1:1e:9f:ec:06:a5:23:bf:4a:48:7a:77:0c:93:08:40:52:67:
9c:75:89:9b:99:8c:d6:25:69:05:02:39:5f:c4:17:50:d1:9e:
83:ea:33:c4:14:af:c6:4f:36:c1:22:34:3b:aa:9a:06:58:9f:
0d:96:18:bc:e5:9e:58:99:45:11:64:47:b2:80:17:ca:92:d6:
e6:99:7b:66:bc:b3:a7:f8:8e:3e:e7:28:d4:48:ea:0c:57:0a:
20:48:06:de:a6:4b:91:41:60:c6:65:7a:02:65:e2:2d:55:d2:
48:3f:d0:78:77:51:6e:e1:e9:ee:0a:ac:48:a4:c4:3f:86:d2:
47:19:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:48 2025 by rpki-client