
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXiIyqXhC1S1NLzHXTiNor--L8A.roa
File: yXiIyqXhC1S1NLzHXTiNor--L8A.roa (raw, json)
Hash identifier: uRBqHuaP6Y8iQ2HxdasZVGV6gpVOD3JDg//yM6UWMUo=
Subject key identifier: C9:78:88:CA:A5:E1:0B:54:B5:34:BC:C7:5D:38:8D:A2:BF:BE:2F:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3884
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXiIyqXhC1S1NLzHXTiNor--L8A.roa
Signing time: Fri 22 Aug 2025 08:45:22 +0000
ROA not before: Fri 22 Aug 2025 08:45:22 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9924
IP address blocks: 118.232.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 07:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14468 (0x3884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:22 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C97888CAA5E10B54B534BCC75D388DA2BFBE2FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:e0:ff:11:4f:44:28:9b:30:b9:ff:56:d4:
fb:5f:2a:61:c1:e3:80:10:48:17:93:74:c9:c5:cb:
ec:60:19:c1:28:7e:b4:21:0a:3f:3e:6d:cd:4a:b0:
82:b1:f1:5b:84:65:21:e1:c0:3e:24:68:d7:89:cb:
2a:06:ee:05:22:01:b6:bf:be:43:16:64:c5:f5:e4:
cb:83:58:3a:ea:1e:80:25:dc:8a:d2:21:b0:f4:14:
3e:f6:29:91:ad:1b:c7:6b:77:06:89:07:f7:db:2e:
e9:95:df:65:ca:61:bb:f0:e0:90:30:dd:37:28:40:
ca:20:2b:93:f6:4c:ba:a1:c9:59:d8:93:45:0f:f7:
17:2e:2f:03:b4:00:fa:eb:a8:38:19:7e:78:6d:4d:
a4:f6:5a:2c:5e:b1:07:3a:bc:e8:2e:83:f8:af:9c:
db:bb:08:c0:ba:54:28:7d:bc:79:a7:ea:d7:cc:d7:
45:a6:ae:30:6e:2d:f9:ad:a7:e1:35:ba:c8:04:1f:
a5:55:91:f2:bc:8d:a7:c7:0e:6d:b0:9c:09:69:f9:
4b:ef:c0:f6:4b:d4:96:4e:08:30:f8:34:12:83:8f:
55:52:1b:ce:d5:fc:e1:a0:bd:3f:fd:fa:40:78:99:
c0:cd:b6:5e:13:92:6d:b8:20:19:ce:b2:e7:e7:f7:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:78:88:CA:A5:E1:0B:54:B5:34:BC:C7:5D:38:8D:A2:BF:BE:2F:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXiIyqXhC1S1NLzHXTiNor--L8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/19
Signature Algorithm: sha256WithRSAEncryption
34:ad:bd:25:d1:f3:8f:1f:a2:de:d9:f4:73:41:1d:cf:32:11:
e0:fe:51:52:b0:a4:87:e6:51:0b:93:a8:98:ea:97:9c:53:00:
25:f1:76:f6:2b:8f:54:7d:38:9a:ac:00:2e:60:20:e0:0b:87:
ca:12:13:98:cb:03:5d:f7:86:ea:29:60:f2:c4:7d:73:70:42:
fd:04:37:cb:9e:7f:1f:b3:97:1a:38:44:29:59:05:07:54:9c:
19:91:58:dd:71:0a:75:e7:2d:35:66:3e:a9:2d:c7:39:fc:be:
c0:d7:5d:a0:04:25:c1:3c:42:cd:f4:40:66:12:1e:7b:77:31:
20:e9:de:2a:64:85:2a:4c:11:ba:2e:cc:83:b4:b9:89:72:ac:
5c:5e:cd:c4:a9:ce:da:a4:f8:56:5d:58:03:3c:33:c1:34:c3:
98:49:11:8f:b6:f4:cf:a2:48:db:12:04:f5:fb:1a:85:7c:f1:
61:41:4f:e5:11:8a:a1:66:d4:2e:35:14:4c:68:ba:1c:22:77:
84:b5:ca:b0:80:44:62:61:94:bf:78:7a:54:25:c8:00:9f:6f:
4e:c4:a1:c6:53:5b:ee:bd:d6:67:f7:18:aa:de:5d:44:b1:0f:
b1:a3:ab:34:96:8b:d4:5b:e9:f9:9d:e4:2f:81:e8:70:42:32:
6f:2d:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 04:55:07 2025 by rpki-client