
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxU-G50TeuLrqc2HgdtwFxB8V3o.roa
File: uxU-G50TeuLrqc2HgdtwFxB8V3o.roa (raw, json)
Hash identifier: msIbD5CaL0qv22d0VkbfhupJRLClSYF3z9Ps9beJDcw=
Subject key identifier: BB:15:3E:1B:9D:13:7A:E2:EB:A9:CD:87:81:DB:70:17:10:7C:57:7A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3ABC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxU-G50TeuLrqc2HgdtwFxB8V3o.roa
Signing time: Fri 22 Aug 2025 08:47:42 +0000
ROA not before: Fri 22 Aug 2025 08:47:42 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9924
IP address blocks: 123.193.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 07:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15036 (0x3abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:47:42 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BB153E1B9D137AE2EBA9CD8781DB7017107C577A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:56:e1:eb:4b:f7:25:a8:ad:a1:a4:ca:87:
1a:22:78:86:aa:bd:20:a8:66:57:95:5d:62:ba:b8:
56:c0:b4:e0:0d:c9:2e:fa:6d:8b:16:48:7e:f3:d5:
1c:04:7d:5e:f6:13:17:c2:0e:c0:b9:61:5a:24:7f:
70:e6:b3:8e:56:da:e9:69:71:e4:47:ab:60:da:92:
89:25:aa:88:85:99:fd:07:8c:87:f1:4c:54:0c:8d:
a5:b9:22:d9:a4:64:11:67:f8:27:b4:35:5d:80:ea:
bc:ac:f7:4d:a2:69:0b:de:0f:a8:09:e4:aa:15:d9:
81:09:32:4a:b7:c5:0e:12:45:2c:30:19:48:b1:00:
c9:5c:fb:51:32:1c:2e:c1:37:58:13:a0:1a:b6:c1:
28:05:14:48:c0:1d:c8:97:75:ee:18:f5:85:df:15:
ac:4a:fd:f5:05:be:e9:dd:cf:1c:67:2d:19:82:88:
69:f5:b0:c7:74:24:a5:51:cf:0f:11:8e:e2:e8:03:
85:05:95:fb:32:7c:13:27:3e:87:44:be:5e:49:5b:
ea:1a:20:ae:ab:92:7a:0a:45:1e:c3:cd:4c:d9:89:
24:00:49:cf:52:65:c4:04:b2:69:db:6e:8d:79:fe:
15:d8:0e:f4:d8:49:fc:31:25:1c:be:1f:3a:72:4c:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:3E:1B:9D:13:7A:E2:EB:A9:CD:87:81:DB:70:17:10:7C:57:7A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxU-G50TeuLrqc2HgdtwFxB8V3o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/18
Signature Algorithm: sha256WithRSAEncryption
91:33:59:ea:ef:3e:05:d9:36:68:ee:0b:e7:83:a4:fe:1a:59:
e0:06:a9:fb:16:00:27:06:0c:83:78:02:aa:27:dc:fb:93:1c:
15:64:8d:44:94:4e:06:9b:72:83:fb:b9:07:ee:b8:52:18:02:
fc:a4:a8:9f:9e:92:4d:e8:81:36:d6:42:df:5c:93:95:f5:8f:
2c:07:13:d8:dc:91:bc:66:f0:e4:ff:80:35:97:2a:27:cf:90:
06:d7:1c:a2:e8:2d:06:eb:43:78:2a:ce:8b:35:ed:74:ea:6b:
74:c9:23:4e:19:03:c5:47:93:0e:23:df:c8:74:26:77:ce:dd:
e4:df:60:4b:e7:52:03:66:a2:5d:98:23:2b:b0:ca:ef:cd:07:
ff:cf:f5:f8:c8:f8:c7:7b:19:24:a2:7a:73:a8:45:03:bd:92:
03:bc:c5:69:bc:35:b0:a9:78:e9:b4:3a:ab:ab:24:0e:ef:46:
df:a7:62:56:77:ef:59:0a:8d:54:f1:f9:65:bb:bb:5b:7d:f7:
31:da:87:f9:2e:4c:46:a9:1d:44:9a:c7:ce:a2:39:55:ee:db:
73:40:37:37:17:8f:e2:54:69:ac:b5:f1:6c:23:f1:f7:ea:d5:
82:bc:ab:94:5a:1f:95:08:b8:cd:4b:aa:6e:b2:be:97:35:c5:
86:58:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 04:55:08 2025 by rpki-client