
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_0mz1UmGq76EQpfVa_hebtcyd0.roa
File: l_0mz1UmGq76EQpfVa_hebtcyd0.roa (raw, json)
Hash identifier: 1aoXOHAO7yj34H8pVK6Xs7eWqhe4g30nCrgVD4HvZlE=
Subject key identifier: 97:FD:26:CF:55:26:1A:AE:FA:11:0A:5F:55:AF:E1:79:BB:5C:C9:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 390B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_0mz1UmGq76EQpfVa_hebtcyd0.roa
Signing time: Fri 22 Aug 2025 08:45:53 +0000
ROA not before: Fri 22 Aug 2025 08:45:53 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 118.232.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14603 (0x390b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:53 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=97FD26CF55261AAEFA110A5F55AFE179BB5CC9DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:4a:50:d2:d4:3f:6c:28:dd:cc:c9:ed:f0:
ce:44:c2:0f:e2:6c:20:b3:cd:cf:0f:1f:f8:ff:7e:
d7:67:3e:94:52:2d:a5:ec:da:a8:87:c3:7b:bb:54:
05:24:36:b7:2c:b3:31:ff:76:44:ed:07:e3:23:a2:
8c:40:9f:cb:19:6c:81:39:d0:5e:97:5d:d0:30:74:
4f:21:26:34:6c:db:ac:5b:5b:43:77:e4:78:32:ff:
33:ad:8f:ad:fd:8a:e4:64:d3:59:63:9b:28:4d:f3:
46:82:1d:fb:f2:07:b2:ed:01:b6:d7:db:61:22:b2:
f4:6b:d6:a0:e3:51:3c:f0:08:5b:41:84:84:58:d2:
aa:96:df:7f:c2:8c:f9:f4:70:6e:2d:2d:9a:1f:45:
d8:e7:28:91:75:d8:65:b7:4d:4f:6f:8e:36:e6:96:
60:65:05:aa:76:60:fb:3c:90:e9:76:92:88:22:a6:
84:a3:11:e2:bd:52:52:e1:7b:60:c1:f5:25:03:d5:
f3:78:33:f8:90:10:4a:a5:1f:05:3e:d0:13:93:12:
90:9e:81:26:29:fb:cb:7c:e1:66:a9:9f:42:8a:cb:
7f:b7:9f:d6:2e:0f:c7:9b:86:02:f3:53:c1:40:5d:
98:80:6e:89:50:7b:e4:ac:ed:80:ac:0c:67:a6:c8:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FD:26:CF:55:26:1A:AE:FA:11:0A:5F:55:AF:E1:79:BB:5C:C9:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_0mz1UmGq76EQpfVa_hebtcyd0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.78.0/24
Signature Algorithm: sha256WithRSAEncryption
34:bd:2d:00:23:51:2f:af:c1:98:4f:59:57:33:7d:d1:57:ee:
bc:a1:8a:6f:8e:7c:03:c1:99:96:2f:02:6e:52:ee:cc:b6:4f:
a0:42:55:9b:44:ef:b5:be:c8:40:b2:b6:f5:85:2d:99:e1:24:
87:a8:27:ac:bf:a8:f9:58:3b:eb:b1:a8:5b:62:3a:72:81:ae:
b7:8e:fb:39:e0:df:32:5e:68:57:3d:96:56:f1:99:5e:a2:c2:
9a:4d:4c:34:10:b5:95:f8:6b:52:21:54:ce:1b:01:55:c8:4c:
4d:58:d6:1e:c6:36:42:6a:33:d3:15:41:88:86:20:a9:66:45:
c7:bb:78:5f:50:a6:e4:03:23:15:29:cb:2b:cb:4d:52:fe:b4:
ed:a1:ea:10:00:47:35:ab:40:57:44:c6:55:8a:e7:d9:53:a3:
83:4c:7e:46:88:65:91:98:38:7b:04:44:ce:a6:07:c8:b1:26:
d8:a2:d4:70:7d:bb:66:f4:78:75:08:65:2a:b1:de:19:94:5a:
1b:d3:82:d1:66:c5:be:52:f6:51:7e:9d:ed:3d:86:c7:9d:f8:
29:61:7c:51:94:c2:de:b8:44:af:12:d2:da:c1:58:d1:a6:db:
08:d2:55:c1:da:9f:77:ae:92:70:9d:14:b3:b9:2a:31:22:fa:
0d:47:0d:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ1NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3RkQyNkNGNTUyNjFB
QUVGQTExMEE1RjU1QUZFMTc5QkI1Q0M5REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwmkpQ0tQ/bCjdzMnt8M5Ewg/ibCCzzc8PH/j/ftdnPpRSLaXs
2qiHw3u7VAUkNrcsszH/dkTtB+MjooxAn8sZbIE50F6XXdAwdE8hJjRs26xbW0N3
5Hgy/zOtj639iuRk01ljmyhN80aCHfvyB7LtAbbX22EisvRr1qDjUTzwCFtBhIRY
0qqW33/CjPn0cG4tLZofRdjnKJF12GW3TU9vjjbmlmBlBap2YPs8kOl2kogipoSj
EeK9UlLhe2DB9SUD1fN4M/iQEEqlHwU+0BOTEpCegSYp+8t84Wapn0KKy3+3n9Yu
D8ebhgLzU8FAXZiAbolQe+Ss7YCsDGemyL7tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUl/0mz1UmGq76EQpfVa/hebtcyd0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xfMG16MVVtR3E3NkVRcGZW
YV9oZWJ0Y3lkMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6E4wDQYJKoZIhvcNAQELBQADggEBADS9LQAjUS+vwZhPWVczfdFX7ryhim+OfAPB
mZYvAm5S7sy2T6BCVZtE77W+yECytvWFLZnhJIeoJ6y/qPlYO+uxqFtiOnKBrreO
+zng3zJeaFc9llbxmV6iwppNTDQQtZX4a1IhVM4bAVXITE1Y1h7GNkJqM9MVQYiG
IKlmRce7eF9QpuQDIxUpyyvLTVL+tO2h6hAARzWrQFdExlWK59lTo4NMfkaIZZGY
OHsERM6mB8ixJtii1HB9u2b0eHUIZSqx3hmUWhvTgtFmxb5S9lF+ne09hsed+Clh
fFGUwt64RK8S0trBWNGm2wjSVcHan3euknCdFLO5KjEi+g1HDcs=
-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:42 2025 by rpki-client