
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zRuHXu2IKn-WkI6xF7NUrDSAJks.roa
File: zRuHXu2IKn-WkI6xF7NUrDSAJks.roa (raw, json)
Hash identifier: yRJd4Wbu4bX6p537PqI/8Nv0CAD+API2qTfLc8ND3yU=
Subject key identifier: CD:1B:87:5E:ED:88:2A:7F:96:90:8E:B1:17:B3:54:AC:34:80:26:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 37DA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zRuHXu2IKn-WkI6xF7NUrDSAJks.roa
Signing time: Fri 22 Aug 2025 08:44:42 +0000
ROA not before: Fri 22 Aug 2025 08:44:42 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 106.1.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14298 (0x37da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:44:42 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CD1B875EED882A7F96908EB117B354AC3480264B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:5b:f7:35:13:81:69:a0:34:3d:03:6b:a8:
71:0b:cd:79:6b:0e:b3:f0:da:af:fc:2c:bf:44:c6:
21:3f:2a:5f:d3:43:66:55:97:98:54:73:cc:37:cd:
73:c2:98:6e:63:5c:88:2e:0c:4f:03:6f:07:21:70:
7e:52:18:42:a8:e8:cd:7b:ad:e6:91:c0:48:cd:6a:
4e:c0:c9:dd:59:c0:35:45:a7:7a:d5:f3:49:ce:45:
11:a2:c5:09:46:3b:0b:c8:fc:37:36:af:e8:18:c6:
64:30:99:15:c0:fd:4b:0c:f6:76:71:92:1a:0b:3c:
c3:46:30:bb:c9:6a:c0:5d:52:81:6b:e0:55:3e:16:
09:58:83:8e:9a:02:ef:a2:ff:df:c0:d0:4c:18:4a:
fa:70:64:bd:34:9e:a4:5d:22:e7:02:54:35:3b:33:
03:f5:d0:2b:28:a8:09:4d:08:d8:69:f4:9a:18:ed:
de:2c:f1:08:55:8d:99:0e:59:1b:75:a9:7c:68:78:
d9:1d:ca:7b:d9:f4:57:e0:e6:d1:0d:c4:bf:e5:af:
9e:ae:8e:1e:ed:bf:14:bd:19:5c:0c:d5:4b:3d:a1:
b1:c0:13:3a:c7:e1:8a:a5:17:c3:3d:50:fc:5c:9c:
55:aa:f1:97:a6:46:e0:b8:b5:b8:7d:3d:1e:05:f7:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:87:5E:ED:88:2A:7F:96:90:8E:B1:17:B3:54:AC:34:80:26:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zRuHXu2IKn-WkI6xF7NUrDSAJks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:fb:84:4e:4e:20:10:87:92:df:dd:5e:9d:5a:c3:c2:49:b1:
8b:c6:d2:22:ec:b8:72:c2:42:ba:c3:44:1a:1c:84:b5:4c:6d:
09:5d:df:81:74:b3:2f:39:43:13:7f:bb:e5:11:02:22:91:fe:
c1:36:1b:04:12:49:a7:1d:38:52:54:f0:3d:8b:1a:ad:24:80:
6b:69:72:aa:cc:59:8d:c8:67:e8:57:37:92:04:34:89:5c:af:
ce:3b:2e:38:67:de:aa:bc:d2:89:25:cb:15:0b:e6:a0:e8:ee:
64:ea:77:c9:6a:5f:ff:b0:2f:92:d0:06:4e:7a:e5:94:60:4e:
ac:85:c0:27:8c:ad:f0:3e:5d:55:24:c1:b5:0a:5f:ee:c5:e0:
5b:f4:bc:cd:da:be:ce:59:cc:2b:3c:2c:a7:63:b7:d2:72:06:
b5:2b:a0:da:08:ed:ae:4a:96:54:cd:a8:ab:44:f1:7f:55:0d:
7c:1b:bf:9a:13:0b:d8:f3:f7:ae:4e:2c:06:e5:9e:48:26:04:
5b:62:3a:ce:d0:da:1f:5e:b6:b9:92:e4:d7:81:9c:f1:27:6d:
de:b6:9b:7f:9e:e0:c6:c8:12:20:16:5c:c9:49:fe:c6:c2:cd:
61:3c:94:76:52:3f:f8:71:25:3b:f5:02:b2:0d:a4:6c:9c:a0:
29:39:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:21:46 2025 by rpki-client