
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fOrn_qlY86Q1vjkPPtCjHjPDc08.roa
File: fOrn_qlY86Q1vjkPPtCjHjPDc08.roa (raw, json)
Hash identifier: Vvx7chtGRWIMoG2JzwkDBfUfuWS/OE5d+lOo6hJSPdU=
Subject key identifier: 7C:EA:E7:FE:A9:58:F3:A4:35:BE:39:0F:3E:D0:A3:1E:33:C3:73:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 396D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fOrn_qlY86Q1vjkPPtCjHjPDc08.roa
Signing time: Fri 22 Aug 2025 08:46:17 +0000
ROA not before: Fri 22 Aug 2025 08:46:17 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.177.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14701 (0x396d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:46:17 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7CEAE7FEA958F3A435BE390F3ED0A31E33C3734F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:50:39:dd:78:f7:63:b4:27:17:c3:af:d7:
a0:c7:ad:a9:5b:c6:9d:ba:e1:a8:ee:1e:7a:f0:78:
ab:d6:05:00:82:b7:b4:a3:f9:a0:4f:49:65:f4:d1:
69:b5:26:3b:ea:db:e9:6b:91:d1:af:b7:d9:67:2b:
c5:ea:f5:47:88:6c:bd:c2:05:b4:1a:14:20:d5:22:
80:fb:c4:cf:4c:5f:60:73:06:f7:13:20:8f:05:81:
65:38:04:34:aa:28:25:79:11:fa:8b:8d:3b:c3:57:
02:86:d6:7e:b9:3d:90:b3:67:1d:c2:d3:7c:08:f3:
5f:2e:eb:1e:50:ad:56:ec:c0:61:e4:26:63:45:12:
b6:5a:da:59:dd:f2:84:9d:1a:a0:2c:1c:9f:ca:08:
4d:13:53:41:17:5e:c0:1f:c0:00:d7:a6:85:5c:4a:
f0:57:0b:68:47:df:5a:6f:03:af:01:d4:01:3d:7b:
1d:b1:c3:17:7d:07:82:ed:75:52:33:39:7c:67:87:
74:82:ad:60:15:17:80:09:8f:67:fd:09:0f:bb:47:
8a:92:48:c1:7e:b1:fc:a5:88:2b:6c:f2:a1:b4:06:
f0:85:d4:d5:9f:40:e9:63:e6:94:fd:f6:db:fd:2c:
25:e7:17:ca:25:4b:3d:ea:4f:0d:c6:74:e1:7b:ca:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EA:E7:FE:A9:58:F3:A4:35:BE:39:0F:3E:D0:A3:1E:33:C3:73:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fOrn_qlY86Q1vjkPPtCjHjPDc08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.80.0/21
Signature Algorithm: sha256WithRSAEncryption
54:29:69:5d:44:bd:3b:3e:84:f8:76:65:e7:f3:74:84:47:f1:
b4:d0:85:46:57:58:71:2f:2b:8c:9e:4c:66:bc:b8:6b:50:20:
64:f1:e3:71:d7:fe:5e:8d:60:e0:86:91:43:94:7d:f6:c4:09:
1f:dd:81:60:92:06:9d:a9:ea:ef:68:78:29:03:2e:e2:ed:e3:
0e:32:7b:08:74:bf:bf:46:66:f8:18:d4:47:ae:96:7b:13:0e:
28:9f:37:54:46:a7:2d:83:b8:60:b5:dc:08:44:03:c0:de:2d:
4c:74:00:23:ac:d4:51:45:61:14:8e:3c:a7:ad:1d:8f:bc:98:
40:de:5a:bc:e9:a6:33:d4:28:2c:43:09:d8:b7:59:13:bf:75:
0c:51:ec:dd:3a:78:37:cd:73:20:99:f1:1c:14:16:65:e6:e4:
05:f5:11:41:1d:8d:7c:6b:17:b9:57:a6:62:f3:a6:67:fd:55:
f5:45:31:36:31:2a:19:19:e0:3b:b9:62:cc:82:a4:65:63:ec:
75:18:05:8c:e8:e6:53:ef:9c:84:f1:92:72:1b:dd:8b:68:2d:
60:ea:78:1a:be:38:f7:4b:dc:51:b6:11:d5:ab:32:07:d9:9e:
5c:41:28:5c:00:46:49:5d:6d:39:33:b2:34:56:93:12:1a:1f:
31:ef:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:18:39 2025 by rpki-client