
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa
File: pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa (raw, json)
Hash identifier: iwBQ0YGKLypqrip8CsoTFPGMVbFY42z51jBmerFpGgE=
Subject key identifier: A5:25:13:C5:A2:4C:76:12:F6:C6:C0:16:85:18:FD:46:64:93:5A:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 38FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa
Signing time: Fri 22 Aug 2025 08:45:51 +0000
ROA not before: Fri 22 Aug 2025 08:45:51 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 123.195.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14591 (0x38ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:51 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A52513C5A24C7612F6C6C0168518FD4664935AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:80:5d:45:56:f9:da:01:f6:d4:c6:78:7e:
b5:96:80:28:bf:94:c8:7c:fd:b9:0a:5f:e7:b1:c0:
da:eb:81:c3:39:06:60:b2:68:f4:0a:9b:e6:b0:4e:
07:c8:d8:c4:75:0d:c0:fd:5e:3b:15:2b:1f:3f:66:
41:d0:55:67:b2:de:bc:fb:88:a0:a8:67:bd:15:8e:
ec:c5:9e:3e:03:4b:17:15:94:0c:3f:9f:eb:9f:a2:
9b:d9:f5:08:a6:1d:79:a7:13:cf:f5:5e:80:ca:8c:
01:5b:e2:c2:2d:ff:c1:a7:bd:47:ab:60:4d:dc:56:
f5:cc:13:7e:2b:84:10:5b:62:54:b3:1f:6f:7e:de:
28:00:68:fe:24:71:99:22:6e:d5:45:9c:b1:98:39:
52:6c:f2:7a:ed:2d:8a:41:52:54:f6:47:82:5d:92:
60:f0:4d:d5:0e:67:af:3c:f3:d5:17:af:c9:48:ec:
86:3b:f6:b0:ca:8f:c5:3e:bf:40:ed:6d:b5:45:35:
93:40:26:44:14:43:da:22:72:b7:93:41:a6:b5:f8:
ed:02:80:17:5b:60:84:a9:47:4a:91:16:9b:08:34:
e5:9e:fb:79:e3:e2:95:f4:d3:da:a7:b0:77:53:8a:
70:d8:d5:9b:7b:f4:89:1a:a4:62:71:c7:95:b2:2d:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:13:C5:A2:4C:76:12:F6:C6:C0:16:85:18:FD:46:64:93:5A:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.183.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d8:0c:77:ba:79:d9:01:43:ea:e7:7b:0a:7e:26:52:74:ca:
68:b0:65:64:5e:9a:68:9a:0b:ce:c3:e9:82:cc:88:38:72:94:
74:34:da:66:56:a6:fa:41:e6:35:69:1a:40:e2:10:47:07:7e:
f0:62:ba:25:6d:2f:7e:a7:89:cb:7c:af:a7:40:35:23:98:ff:
90:e2:ed:bb:65:c7:66:ba:e5:18:17:88:71:0a:34:5e:98:e3:
4f:09:6f:c0:b6:ef:be:97:3a:95:d7:2d:3c:9e:1b:c7:e0:a4:
c1:71:ea:ba:88:54:8a:a4:4c:97:da:3c:76:f0:fb:b2:09:38:
31:85:9a:83:12:96:49:92:dc:e7:a6:53:13:5e:11:be:b5:6a:
40:9b:dc:f8:a5:61:1a:a3:a0:f2:60:1a:85:e3:20:c4:d6:28:
37:81:ba:88:c7:33:4e:37:aa:20:af:65:01:00:f4:d2:91:80:
f3:9d:83:28:f6:51:40:c8:58:03:66:56:f2:0d:80:47:57:7e:
0c:bf:73:5a:dc:93:98:0b:6f:62:4f:de:6b:d3:22:1d:fc:4d:
3e:2b:a3:00:2a:3c:81:8a:d9:c4:b3:a3:9b:49:17:e2:0b:b3:
80:36:2b:60:5d:9b:dc:ce:3c:68:5f:dd:bf:fb:37:93:7c:de:
33:70:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:23 2025 by rpki-client