
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa
File: wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa (raw, json)
Hash identifier: wXwdrYOxRyAx5TwE4H80xycIS1qwMHQtT9HaHehh020=
Subject key identifier: C2:E3:69:F7:9D:56:8C:36:DD:AD:FE:4E:B0:9D:4B:BB:D8:CA:D9:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3971
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa
Signing time: Fri 22 Aug 2025 08:46:18 +0000
ROA not before: Fri 22 Aug 2025 08:46:18 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.176.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14705 (0x3971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:46:18 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C2E369F79D568C36DDADFE4EB09D4BBBD8CAD9F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:3a:06:d4:24:fc:4c:75:1b:68:90:2f:ce:
dc:f7:85:77:34:ab:a1:5b:b4:29:ff:3b:3e:ac:c7:
a6:85:8a:7b:eb:82:b5:6f:3e:89:50:bc:b8:e1:3f:
87:33:a3:9a:af:73:15:af:7c:1c:e2:e3:87:fc:cb:
fc:b3:91:4d:97:19:46:44:64:ad:90:74:5e:67:2a:
22:11:ea:fd:94:63:f5:86:d3:6d:48:66:54:2e:ae:
be:59:c2:f5:19:02:65:c0:f4:21:63:d7:5d:07:ab:
ea:a5:cd:f9:34:f9:31:38:1e:95:60:0a:a1:91:c4:
3a:54:03:b3:75:13:cd:ef:14:b2:1d:f3:68:24:b7:
f1:e1:0f:9f:0e:5e:b6:00:ff:0e:b3:43:b4:35:e3:
a1:72:7c:28:81:83:9a:0c:29:af:80:54:82:04:e4:
e0:20:a4:5e:62:bc:75:3e:2a:18:be:34:9a:69:34:
44:09:a9:34:5e:bf:97:86:a5:af:53:b9:46:99:62:
eb:23:36:16:90:95:c6:da:d8:8d:ca:ce:f2:41:c7:
2b:6e:72:24:77:33:0d:cd:18:99:6f:6e:11:38:90:
2d:26:f1:e5:42:a8:b6:d3:21:ad:94:eb:f3:81:b6:
23:c7:a3:2b:f2:34:50:a1:ce:05:9e:fb:43:c4:fa:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:69:F7:9D:56:8C:36:DD:AD:FE:4E:B0:9D:4B:BB:D8:CA:D9:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.232.0/21
Signature Algorithm: sha256WithRSAEncryption
07:ec:cc:d2:76:61:60:2f:e2:5d:63:70:02:d4:d2:e2:7b:6c:
27:90:b6:be:ed:0d:5f:b8:21:69:e9:a7:59:fe:31:d9:b3:23:
6b:9f:3d:57:3e:23:98:d1:02:a4:8d:47:f0:1d:e2:cc:7d:85:
e4:55:27:c2:c1:1a:fb:c5:a3:42:56:5f:be:a6:ac:20:41:7e:
aa:07:c0:c9:f2:93:1b:00:64:60:81:2b:08:66:1b:34:93:26:
3e:08:67:d1:04:d6:c5:b0:c0:37:0c:32:9c:bb:b5:97:19:c2:
9f:c8:2e:cc:59:66:37:3c:58:1f:3d:68:32:9c:35:94:61:35:
55:4c:4d:a2:7f:4d:c2:52:64:5b:ed:61:3e:b0:90:87:ab:68:
ab:1a:e0:cb:49:b5:d9:cd:26:a5:4a:d2:a7:bb:bc:43:6d:4c:
1f:63:0d:e6:fa:e0:52:da:a4:70:a4:f1:95:b5:9b:12:17:db:
dc:fa:46:3a:34:33:cd:64:f1:b5:25:09:3c:0a:e1:cc:e2:23:
8e:f2:03:ee:dc:73:7a:fb:90:90:b5:e7:97:47:1f:f4:b9:8f:
21:fe:36:37:7e:8c:df:22:44:0c:60:17:25:eb:52:a7:98:4e:
53:ac:a5:7e:a5:ed:b2:58:2c:75:81:59:6e:69:05:16:9c:5e:
73:52:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:18 2025 by rpki-client