
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qV_aTiDw4i5I4vuqYSv05p-qS5w.roa
File: qV_aTiDw4i5I4vuqYSv05p-qS5w.roa (raw, json)
Hash identifier: j6frEYrQeuD3Q3Rab02IC3g7hVR1RtJirEPYBY8lunk=
Subject key identifier: A9:5F:DA:4E:20:F0:E2:2E:48:E2:FB:AA:61:2B:F4:E6:9F:AA:4B:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3862
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qV_aTiDw4i5I4vuqYSv05p-qS5w.roa
Signing time: Fri 22 Aug 2025 08:45:14 +0000
ROA not before: Fri 22 Aug 2025 08:45:14 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.177.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14434 (0x3862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:14 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A95FDA4E20F0E22E48E2FBAA612BF4E69FAA4B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e8:ce:53:1a:2f:2f:eb:8d:9a:bd:af:b5:7d:
6c:e9:1c:7f:99:08:e0:9e:80:78:ff:51:0c:fb:dc:
f6:4e:89:40:cb:d5:6f:c7:41:e2:38:e9:da:50:a9:
37:16:92:b6:72:bb:aa:4e:4f:a6:39:01:69:d7:90:
8d:0e:a8:29:1d:1c:6f:57:7e:d6:e3:62:06:00:3a:
6d:d6:be:2e:a3:2e:94:ee:11:66:ab:d2:9a:c4:22:
46:21:02:49:1d:09:bb:05:20:5a:74:bd:ce:76:6a:
be:d3:56:bd:8c:c8:bd:f6:35:fe:9d:5c:ba:97:6d:
b9:ee:88:be:13:28:65:d3:c1:98:ff:6c:5e:df:83:
3f:a2:e4:24:a6:6c:5c:2e:27:75:47:12:be:9e:3e:
4f:82:92:c3:4f:92:54:ee:44:27:41:80:27:c7:e3:
91:54:59:de:be:57:a6:fb:a5:dd:e8:26:68:28:12:
e9:b5:a0:29:2e:11:38:4f:9f:77:2f:26:d8:15:75:
cd:5c:b8:69:df:e6:88:8c:4b:2b:6a:08:57:bf:9f:
a6:05:fe:78:54:f0:29:24:ba:21:8e:e4:95:0d:b9:
00:c5:47:5e:b3:8f:f1:a0:5e:2f:a9:eb:c7:cc:c4:
de:1b:f6:ac:d5:80:3d:ca:b2:2a:1f:de:b7:a3:a1:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:DA:4E:20:F0:E2:2E:48:E2:FB:AA:61:2B:F4:E6:9F:AA:4B:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qV_aTiDw4i5I4vuqYSv05p-qS5w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.16.0/22
Signature Algorithm: sha256WithRSAEncryption
61:62:b9:06:90:c2:ef:5d:79:b6:a4:f6:ca:7e:7a:82:52:1c:
16:f4:58:c2:a5:62:25:49:e0:11:ba:ab:33:cc:48:d7:6b:6b:
9b:81:2a:e5:f1:65:3d:7d:af:65:a0:7b:eb:f2:51:9d:07:c7:
93:df:11:a3:73:f5:be:52:c0:33:91:09:29:bb:a2:5d:3e:c5:
33:9d:9e:86:df:47:cc:db:b7:a9:99:47:95:14:ba:2e:d5:1a:
0a:f8:7c:a2:67:6b:c2:5c:3e:db:4a:8c:fa:b5:7d:d1:a8:18:
cb:75:96:ce:ea:c8:c0:8b:8e:45:30:c5:75:11:38:d1:9c:9b:
15:15:7b:7e:8f:48:20:1a:17:b2:90:74:61:2e:bd:35:a2:5f:
46:3c:b1:35:3a:8b:4b:33:9f:b9:8c:11:2e:78:fe:5a:dd:7e:
83:98:97:13:d1:fb:8a:f2:ea:c0:b8:99:ce:df:9d:82:48:a6:
eb:54:88:bf:21:a1:1d:45:61:e5:2e:ab:e8:0a:2c:7e:6b:ea:
45:55:b8:53:42:f0:71:06:25:c7:7a:75:b1:8f:78:a0:dd:6a:
1f:29:ae:a5:1a:e8:c9:86:dc:d5:61:02:27:d4:d5:7d:38:f1:
5f:dd:5f:c9:ae:1c:13:43:37:54:83:97:4d:99:58:d2:62:6d:
05:e7:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:44 2025 by rpki-client