
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g5e4TEboee3dmVEPfjAJ0-PRmaM.roa
File: g5e4TEboee3dmVEPfjAJ0-PRmaM.roa (raw, json)
Hash identifier: nS8K6N0gAcVXmlV9nWZ4eJTLieQtyKF7iCoXTzxcQts=
Subject key identifier: 83:97:B8:4C:46:E8:79:ED:DD:99:51:0F:7E:30:09:D3:E3:D1:99:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 39A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g5e4TEboee3dmVEPfjAJ0-PRmaM.roa
Signing time: Fri 22 Aug 2025 08:46:29 +0000
ROA not before: Fri 22 Aug 2025 08:46:29 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.176.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14755 (0x39a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:46:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8397B84C46E879EDDD99510F7E3009D3E3D199A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:c5:28:df:e5:42:cc:c2:c3:f2:46:0a:ea:
ce:e0:a4:05:5c:17:a1:43:7d:0e:d0:eb:b0:3b:01:
52:eb:01:bb:d6:6c:ac:68:6a:d3:65:e2:bf:8e:21:
a7:df:05:86:da:30:08:16:23:50:56:fe:69:9d:63:
fa:4b:cf:8e:16:d2:b7:7f:1b:8a:09:39:55:a9:04:
a5:f5:80:79:f7:b5:77:0f:d2:52:87:97:ae:b6:82:
36:fa:a6:7c:3e:c8:78:07:12:03:32:c8:5a:b6:cf:
65:a0:6e:97:c0:d7:0c:ce:04:ae:1f:12:09:4e:36:
de:bc:f1:6a:62:f6:1c:05:72:78:e5:6d:17:14:51:
e4:c7:9a:5b:43:88:42:36:6f:56:d6:33:39:ca:3b:
b3:16:23:c6:35:35:0c:9d:13:33:c1:bd:e5:6b:05:
d6:42:1b:34:76:fb:78:9b:01:af:b1:8c:2a:74:27:
68:1f:87:fc:01:ec:21:b7:82:65:2c:49:53:2d:d2:
63:17:3d:49:38:0e:5e:7c:25:a7:10:d1:dc:49:8b:
46:a3:70:25:a4:9c:80:04:c4:3a:a4:75:15:5d:39:
ff:ab:ab:fd:62:8c:d5:4d:f9:b0:4f:8f:27:6c:3a:
ea:70:48:81:0e:ff:42:93:56:c7:92:87:2c:3f:b8:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:B8:4C:46:E8:79:ED:DD:99:51:0F:7E:30:09:D3:E3:D1:99:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g5e4TEboee3dmVEPfjAJ0-PRmaM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:28:fd:3f:21:eb:dc:27:74:26:6d:fc:11:78:8a:4b:2e:00:
b2:74:d6:ad:3e:da:1d:6b:af:5c:da:59:fb:a4:6d:e8:cc:ed:
cc:d0:43:ab:79:34:24:27:f4:e1:17:15:77:b8:59:a6:76:40:
3d:9c:8e:98:77:0c:d2:ce:8c:03:a9:bc:59:e6:1c:e3:3d:e3:
6d:44:ed:31:c9:fc:34:4f:7c:ec:0b:de:99:8f:c5:10:61:47:
60:3c:02:b2:76:9f:85:75:3b:47:96:f3:f2:1e:95:c3:cb:73:
a7:ec:92:25:95:1a:d8:3a:56:72:b5:a2:7b:e3:db:44:e2:62:
f6:f5:a5:67:ad:89:66:37:23:df:bf:d9:88:0f:e9:d5:cd:49:
3f:cc:cd:5b:7b:6f:51:dd:42:a3:84:32:bd:76:6c:56:c9:23:
5b:13:d7:2f:d3:1f:b9:46:de:ff:1d:ee:6a:a6:e8:ac:10:9f:
d7:2d:fe:83:2b:f8:df:0e:a8:13:85:10:53:b1:ab:37:81:97:
45:bf:43:0f:f2:da:73:ca:27:bf:5d:f4:bf:a2:67:7e:a2:37:
4d:f7:95:94:c7:83:a4:1e:3e:8c:31:c5:1e:d5:c8:43:bc:ce:
ef:2e:c7:88:b7:ff:55:fa:eb:a8:b8:f0:cf:18:bc:56:d1:a1:
eb:ae:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:21:21 2025 by rpki-client