
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v0gn4bTB_LQJClZ5SC1jlQoopOI.roa
File: v0gn4bTB_LQJClZ5SC1jlQoopOI.roa (raw, json)
Hash identifier: MNP0gnBL6uvmLA7ioavb4T50B9sOZ7b4XqUS6fPyR3w=
Subject key identifier: BF:48:27:E1:B4:C1:FC:B4:09:0A:56:79:48:2D:63:95:0A:28:A4:E2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3AFA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v0gn4bTB_LQJClZ5SC1jlQoopOI.roa
Signing time: Fri 22 Aug 2025 08:47:57 +0000
ROA not before: Fri 22 Aug 2025 08:47:57 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.177.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15098 (0x3afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:47:57 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BF4827E1B4C1FCB4090A5679482D63950A28A4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:88:2b:a9:6e:6b:ba:7b:0d:18:63:49:57:
66:a8:bb:ef:da:5d:fd:f2:2a:dd:0a:0e:50:69:69:
37:2c:90:0e:52:05:19:e1:2e:02:cc:4c:14:8b:16:
72:3a:9e:67:b6:58:73:fa:e3:30:46:8e:50:5d:37:
3f:ba:ff:b8:ff:cb:9c:16:20:79:ff:75:e4:85:f5:
00:e7:65:b7:a4:27:21:06:e5:97:b0:e5:4e:3b:8f:
6c:3c:f1:5e:53:a6:5c:8c:4b:9a:2d:97:2e:43:a7:
e9:ab:02:40:47:77:d7:52:b9:8b:8c:a7:99:cc:8b:
db:c9:64:46:f9:c2:7b:de:14:63:e9:01:ec:ab:05:
83:e0:8c:69:cf:48:56:1b:fd:48:41:94:f9:25:2d:
b0:21:88:4d:7d:9e:5b:02:95:98:88:b5:5d:a8:2b:
ca:c3:ad:fc:2f:d0:72:9a:bd:2d:ba:a2:5a:2f:fd:
3b:a4:ca:cd:7a:5a:f7:1a:63:1e:b1:63:08:55:e3:
d9:bd:4f:4a:2b:83:2e:34:47:5b:c1:61:df:81:9f:
ec:f6:a2:b1:2a:4d:a2:27:56:a2:7b:82:ac:a4:65:
3d:2c:0e:63:b3:20:36:d4:ad:6a:f5:31:d7:c3:5b:
5e:e7:d5:17:88:35:49:dd:bf:bf:62:ab:26:9b:37:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:27:E1:B4:C1:FC:B4:09:0A:56:79:48:2D:63:95:0A:28:A4:E2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v0gn4bTB_LQJClZ5SC1jlQoopOI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.231.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c6:22:06:13:1c:e6:bb:17:3d:80:c9:c3:9c:cc:05:a6:c8:
c8:9e:3b:c4:a9:97:e9:d4:1a:61:2d:69:79:06:26:db:36:72:
6f:45:f5:36:38:18:8d:81:e3:58:f2:9f:fc:9f:3c:e5:a5:e9:
57:18:4c:91:b4:28:ec:0a:6d:ef:12:f0:ce:a8:c9:a1:6f:c3:
94:30:f6:a2:b7:a4:d4:e1:b7:fe:c1:21:98:ac:5a:b9:37:6c:
d9:bd:2a:6e:7d:04:12:d8:de:c5:c0:fe:8a:06:c7:a0:5c:62:
04:5b:1e:fe:9a:03:55:26:42:ec:3c:d8:14:08:15:a7:a1:90:
ed:f6:66:0b:97:9b:b0:ba:0b:a5:bc:ed:d8:21:77:51:e3:e7:
a7:50:d6:60:e6:49:f1:5d:17:d0:10:61:ec:3b:d2:ac:50:64:
bf:4c:43:cf:c0:2b:cb:19:6b:56:47:00:9e:f2:51:ab:b1:77:
bb:af:6b:04:3d:30:48:59:27:77:ad:07:a3:d7:51:74:d0:e3:
8f:a9:a0:38:14:7e:70:b3:78:c0:7a:96:60:8a:72:f2:37:c3:
47:20:80:21:9f:ce:ad:5d:72:38:55:5e:79:60:c5:e4:cd:c7:
b5:d1:19:31:b4:7d:c5:ea:48:82:7d:dc:57:c8:f8:ef:16:a1:
79:87:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:18:36 2025 by rpki-client