
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vHqfuhp9XfMu3ExeAngRGRbyWmA.roa
File: vHqfuhp9XfMu3ExeAngRGRbyWmA.roa (raw, json)
Hash identifier: hI0wWBJgVzVqfhaXBLSghr1o8JffFFMmEJ+j/Qm0OAs=
Subject key identifier: BC:7A:9F:BA:1A:7D:5D:F3:2E:DC:4C:5E:02:78:11:19:16:F2:5A:60
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3906
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vHqfuhp9XfMu3ExeAngRGRbyWmA.roa
Signing time: Fri 22 Aug 2025 08:45:52 +0000
ROA not before: Fri 22 Aug 2025 08:45:52 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.176.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14598 (0x3906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:52 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BC7A9FBA1A7D5DF32EDC4C5E0278111916F25A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:de:ed:0f:66:89:7a:95:c3:75:a9:ca:b6:
ae:ab:b1:a6:d0:7a:6a:d3:74:39:04:a3:d8:10:ea:
35:1d:9e:fc:c4:00:d3:70:17:da:5f:8c:01:0c:a7:
7e:d4:92:46:e5:33:be:77:f8:bb:00:95:54:a1:e9:
0c:f5:ea:29:44:71:e4:8d:31:81:8e:6b:95:75:99:
c3:ef:71:37:17:77:96:e0:80:e5:7a:3f:b1:57:d6:
4f:6c:32:64:1b:05:7e:26:1c:da:2f:ed:17:a9:6e:
63:62:f6:2e:fc:ab:98:dc:69:a8:e7:69:d0:e3:6b:
fc:5e:0e:e4:0f:95:32:0f:d0:7a:e1:32:cc:34:ec:
12:3b:46:f0:8c:43:c2:f1:86:41:d0:0e:51:cf:7f:
e5:88:08:22:2c:81:a4:db:34:93:58:3a:d4:1f:27:
3b:35:44:0b:ff:0d:c7:07:06:3a:c3:04:f6:67:b3:
55:56:67:8e:17:82:66:61:f4:28:64:1d:05:f4:c3:
89:c8:e9:fd:dd:fe:4c:a1:0b:f7:c5:9d:be:51:1a:
bd:0e:be:87:5e:0b:dd:b2:01:26:c4:9d:8a:f3:43:
51:c4:49:bc:22:4f:d9:2d:63:63:1b:9c:72:a1:48:
b5:fd:35:b8:87:98:cd:9b:ca:5c:9c:98:9b:7c:8e:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:9F:BA:1A:7D:5D:F3:2E:DC:4C:5E:02:78:11:19:16:F2:5A:60
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vHqfuhp9XfMu3ExeAngRGRbyWmA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:6d:9f:18:18:7a:30:29:ee:c3:43:b3:96:bb:b3:89:fc:58:
a7:57:82:fa:46:a2:07:c2:2d:ae:47:82:c4:bd:c4:e0:76:fc:
b4:d6:fa:ba:38:18:4d:73:56:a4:1e:67:ea:19:58:28:ed:01:
b1:68:eb:b1:23:39:c6:cb:8c:70:21:73:6b:b8:85:e1:47:0d:
c7:82:0a:bb:55:c7:49:05:99:9a:e3:ab:60:b1:5a:10:5a:13:
1e:a9:8c:ae:3a:4f:23:b3:91:51:aa:26:38:c0:f6:b7:2d:01:
5b:a9:09:9c:aa:44:3a:16:2c:e1:fe:24:fd:7b:95:2c:fa:90:
ec:68:1f:d0:d4:cd:f6:3c:95:e8:da:68:06:52:bd:52:36:33:
ce:21:b9:e9:24:2c:33:18:71:f9:c0:9a:c6:56:ef:64:1f:a7:
d1:3a:a1:38:f9:61:17:f1:7b:53:3d:f4:f7:16:44:ab:e5:f1:
9f:3b:76:e5:70:67:0e:05:20:e3:26:42:f3:d4:a6:76:cb:c2:
6e:a8:a6:8d:41:34:0a:54:91:de:75:58:92:13:9b:a3:28:f5:
fd:e4:08:32:0f:82:9a:fd:16:03:34:83:7c:75:6b:69:ff:43:
10:50:4a:08:1a:d3:c0:2e:30:ee:00:72:60:5f:28:33:61:9e:
e9:df:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:42 2025 by rpki-client