
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/flFDJKw3jHvRECsLNO_QPbEvu2s.roa
File: flFDJKw3jHvRECsLNO_QPbEvu2s.roa (raw, json)
Hash identifier: +uZsCp7psCBqWn5bNH39xt4zlbIM/mOa+g096AWFukA=
Subject key identifier: 7E:51:43:24:AC:37:8C:7B:D1:10:2B:0B:34:EF:D0:3D:B1:2F:BB:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 38A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/flFDJKw3jHvRECsLNO_QPbEvu2s.roa
Signing time: Fri 22 Aug 2025 08:45:29 +0000
ROA not before: Fri 22 Aug 2025 08:45:29 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 123.195.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14500 (0x38a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7E514324AC378C7BD1102B0B34EFD03DB12FBB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:13:24:dd:35:1f:bd:00:eb:e9:74:5b:0e:
af:57:93:94:90:4e:d9:70:47:9f:71:51:ed:e8:09:
8a:00:7f:3b:08:9a:de:4b:9a:30:c2:95:21:d9:6b:
42:7b:7f:d5:db:78:f7:7e:bb:1b:e8:38:19:52:ab:
ff:3c:8e:7a:77:7a:0f:48:4b:93:0e:57:7c:7c:a5:
fa:f0:f6:9e:02:aa:83:cc:d4:ff:d9:9c:58:be:0c:
01:a7:e8:44:e2:84:5e:3f:ec:c6:5b:df:3f:1c:bd:
0b:49:02:71:9d:40:89:a4:ff:5f:07:38:24:9a:e1:
96:01:47:4c:27:b8:9c:fd:df:58:5b:fe:ed:b9:cf:
9c:e7:5c:a7:de:c5:6f:af:a0:08:3a:85:c9:8a:b4:
33:fd:64:b0:9b:0e:d5:64:03:f4:1b:0f:fa:6e:31:
1c:e1:a2:ea:42:4e:f1:99:05:e5:a3:04:94:1f:b8:
28:5a:b2:bc:8a:24:10:a1:37:62:aa:7e:d2:37:1d:
f3:e9:34:9b:4f:62:df:82:d7:c9:78:65:94:88:05:
e6:88:30:f1:21:41:ea:f8:f5:fe:32:a3:e5:05:10:
a7:c3:47:9d:fa:53:d0:8f:23:7d:55:b3:46:7e:c1:
67:fe:dd:bc:cd:74:23:62:32:ca:bf:15:9d:7e:44:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:43:24:AC:37:8C:7B:D1:10:2B:0B:34:EF:D0:3D:B1:2F:BB:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/flFDJKw3jHvRECsLNO_QPbEvu2s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:6c:67:e9:53:60:fb:43:01:96:fe:7d:57:63:06:94:96:7c:
dd:30:e6:67:90:e5:ce:da:94:e7:27:06:06:6c:35:41:e4:6f:
ae:89:26:a5:e2:20:53:82:59:1d:6a:39:70:af:5a:d6:36:d8:
ba:8b:8b:b3:35:c3:27:94:10:da:d6:01:95:de:46:d6:06:df:
e7:61:3e:11:53:a0:5f:05:5b:ed:3e:22:76:df:af:92:46:8e:
08:28:16:6d:46:d1:34:ed:a5:a9:1f:6e:eb:0c:f8:50:33:53:
5e:a5:1b:d6:ad:04:dd:f9:1e:4f:b1:96:c4:c1:19:12:23:63:
9c:ba:0d:98:32:d0:1d:c5:89:f9:9e:65:37:f2:3c:a6:53:4b:
6b:1d:6e:d6:71:05:54:4c:07:08:69:6e:7a:05:92:d0:89:34:
90:76:75:de:25:8d:49:0b:fb:75:98:ea:fc:33:bd:35:f2:1e:
58:32:02:98:87:c1:d1:ae:78:5c:27:38:88:9a:0b:73:d7:ce:
56:42:4c:87:9a:6a:26:cc:5a:0e:00:cd:ad:43:59:02:90:cd:
09:8c:86:94:92:6c:dc:86:0e:51:0d:c7:df:cf:70:d4:22:a7:
2a:4b:3e:f0:d6:32:f0:c8:47:93:00:63:72:42:ec:1a:e3:af:
96:5d:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:18:38 2025 by rpki-client