
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa
File: gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa (raw, json)
Hash identifier: HI34GF5oa3WDcij8X4ulQnMRiRY26XrZTIZECoBSuJ4=
Subject key identifier: 80:B1:8E:02:05:03:67:3D:58:EB:91:ED:44:F6:92:DA:58:2D:73:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 38C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa
Signing time: Fri 22 Aug 2025 08:45:35 +0000
ROA not before: Fri 22 Aug 2025 08:45:35 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9924
IP address blocks: 106.1.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 07:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14528 (0x38c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:35 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=80B18E020503673D58EB91ED44F692DA582D7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:46:45:ef:32:03:3f:e5:9c:4c:99:37:d1:
77:4d:ca:ed:87:1b:87:f8:64:52:ac:42:0d:03:d2:
d6:07:1c:6b:6b:d1:07:d6:e7:2a:4b:6f:93:15:21:
b1:58:30:4a:68:52:09:7a:35:08:90:16:68:57:cb:
92:88:49:c8:48:e4:1a:8f:32:42:02:4d:9b:54:73:
31:1b:16:87:62:cc:2d:04:43:ca:e6:b3:24:f2:ea:
5b:bd:8b:0b:b8:ba:1e:e4:1c:80:0b:98:fe:aa:bd:
eb:6a:1a:a4:03:fd:24:32:c0:c7:e5:a9:f6:b1:bb:
dc:36:b9:a3:ac:4b:8a:c3:50:25:5e:1d:28:f2:63:
3c:fa:cd:e4:21:a6:0e:56:68:bd:00:b7:46:5b:36:
19:62:23:80:2a:bc:cd:c1:bc:3b:0c:d2:c4:cd:d3:
14:91:28:fc:b5:45:63:a5:8f:4b:00:a7:42:ee:07:
83:9e:40:dc:29:21:7f:25:9a:19:ea:d5:86:45:87:
eb:73:8e:9b:67:c4:f6:03:ac:10:72:50:b1:23:a8:
b7:b1:1a:46:2a:dd:ef:57:43:e5:cf:fc:f9:88:53:
d0:ec:81:08:81:18:7c:19:02:13:63:5d:f4:ca:29:
09:d9:a8:e2:d3:5c:ca:b1:09:bb:23:a1:d6:6f:a9:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B1:8E:02:05:03:67:3D:58:EB:91:ED:44:F6:92:DA:58:2D:73:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:e6:51:2a:36:b7:33:b8:61:e6:ef:98:ca:37:18:7c:0e:b8:
f2:45:f6:69:99:24:ab:7b:95:76:1d:cc:be:d3:bd:a0:2e:c2:
10:32:6a:f5:8b:c0:7b:df:4e:12:e6:8a:9f:50:e2:d3:23:37:
b4:c8:c1:3b:40:49:83:f9:d8:08:fa:ed:e6:e4:40:20:6e:04:
e8:aa:a3:f2:64:90:3f:4e:f4:3a:5d:42:b8:7f:1a:01:38:19:
77:63:84:cc:8c:69:92:ae:83:e9:25:01:51:09:b1:4b:b0:4f:
3d:32:ac:36:71:d4:0b:56:1e:09:de:0f:74:8e:65:a0:71:c2:
d6:3c:7c:e8:8d:9d:db:1f:55:10:01:df:44:d1:70:c2:6d:a0:
ed:84:9f:95:4a:bf:aa:b1:9e:18:17:1c:60:b5:a4:9b:cf:f4:
c3:e7:6e:89:12:70:ad:98:33:68:f9:c6:cf:c8:30:e3:75:59:
92:90:41:9e:9e:d7:73:f3:4b:4b:c1:08:ed:19:2e:3f:c1:df:
24:90:ce:61:b1:8f:bd:a9:0a:3d:b4:c1:95:d5:7d:e2:76:a3:
2e:c9:3a:2f:81:39:87:0c:fe:49:84:d1:35:21:0c:b6:dc:49:
d2:1a:dd:e3:94:df:5d:7d:15:09:7c:3b:ff:42:a0:56:c8:00:
65:73:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 04:55:40 2025 by rpki-client