
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIgv_YioCo-RetCtwN_xKN-lJuo.roa
File: wIgv_YioCo-RetCtwN_xKN-lJuo.roa (raw, json)
Hash identifier: 5Yshk9q5E8elqPEolXNg67LqIESYG2SwUFxijb9ffbs=
Subject key identifier: C0:88:2F:FD:88:A8:0A:8F:91:7A:D0:AD:C0:DF:F1:28:DF:A5:26:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3828
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIgv_YioCo-RetCtwN_xKN-lJuo.roa
Signing time: Fri 22 Aug 2025 08:45:00 +0000
ROA not before: Fri 22 Aug 2025 08:45:00 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 123.192.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14376 (0x3828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:00 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C0882FFD88A80A8F917AD0ADC0DFF128DFA526EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:f3:d8:c5:ca:ed:af:96:72:0f:d8:b6:f6:
be:28:b0:45:a0:87:14:eb:d1:5c:85:f8:06:79:92:
cf:05:5b:b6:56:50:57:7a:64:08:01:fd:44:df:ca:
ab:31:a1:db:1b:b6:05:fd:8c:4e:71:c3:d3:d9:5b:
63:07:f7:58:68:b9:fb:ca:ae:f7:ca:19:88:f9:bf:
7a:df:07:67:c9:8c:b0:19:cd:37:d1:b8:5e:4d:2d:
ec:34:5d:6f:2e:3e:a3:ee:43:f1:93:e0:08:40:42:
7d:87:1f:88:32:1b:09:ab:25:e2:0b:04:7c:eb:8e:
a4:37:e4:6e:9c:fd:2f:ea:b4:86:e8:35:33:8a:a1:
d5:ed:9f:a4:0c:bd:1d:63:93:ac:a6:84:9b:ae:10:
0d:ba:d3:c6:4d:f1:a8:e7:38:33:7d:0b:8f:a2:76:
3f:40:c2:61:75:4e:a0:20:55:cd:29:2e:6d:40:10:
2b:05:84:86:27:ed:61:2d:ee:23:00:32:20:67:dd:
e8:2a:a5:94:fb:02:29:c6:53:7b:b0:51:b1:9b:5c:
1f:8c:9e:b0:15:eb:fd:71:3f:3c:55:9e:48:46:61:
ea:7a:e1:9c:3e:12:cb:93:4e:9d:66:81:97:91:6b:
8c:58:54:9f:6b:d9:d9:97:63:c1:4e:c7:73:ef:45:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:2F:FD:88:A8:0A:8F:91:7A:D0:AD:C0:DF:F1:28:DF:A5:26:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIgv_YioCo-RetCtwN_xKN-lJuo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/20
Signature Algorithm: sha256WithRSAEncryption
38:63:b9:12:8b:8e:51:c5:24:30:f2:97:c3:20:57:91:0e:55:
5c:58:43:a0:ab:13:44:54:1a:06:b0:57:e0:0b:8d:d9:3b:63:
71:d2:70:c6:ed:3b:b9:a8:d0:6a:ff:a6:56:e9:3e:b7:98:c8:
2b:f3:af:17:53:53:f3:8e:0a:61:79:6b:27:53:82:43:67:74:
b7:10:ea:7f:91:18:b5:51:5b:61:d0:9f:24:bd:11:5e:bf:e4:
b8:40:c9:95:bd:e5:af:c1:ff:02:04:da:7d:6d:39:6a:f5:a8:
15:b8:07:54:30:44:8b:d9:3a:c0:b6:09:e3:78:8a:94:9f:79:
a1:e7:68:83:93:b0:b5:2f:3e:eb:55:f6:8d:2e:bd:09:81:6c:
b2:96:80:cd:5d:9f:a6:c3:92:ba:13:95:e6:bc:93:1f:eb:96:
48:98:9e:4a:99:50:ce:f2:22:be:9c:ce:e4:a3:89:81:4d:53:
75:79:c5:5f:a9:c6:0d:33:95:5f:5f:c1:c3:39:6b:66:0c:c5:
36:82:43:02:3b:51:70:b6:5d:2d:ef:cf:ee:3b:92:7f:60:93:
26:fe:a5:0e:3f:24:26:4b:54:8e:0a:3c:56:c1:fc:be:8d:39:
bf:66:1a:3e:74:ed:3a:e0:a1:28:fc:ef:b9:bb:d4:38:4f:67:
eb:78:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:17 2025 by rpki-client