
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/LgggCVwPbNdcnrCqVMduXlIqpsw.roa
File: LgggCVwPbNdcnrCqVMduXlIqpsw.roa (raw, json)
Hash identifier: 4ju6mocONKVH9JpMBsRARsenKxMgM5gKSyN495Ilqg0=
Subject key identifier: 2E:08:20:09:5C:0F:6C:D7:5C:9E:B0:AA:54:C7:6E:5E:52:2A:A6:CC
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 1414
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/LgggCVwPbNdcnrCqVMduXlIqpsw.roa
Signing time: Fri 22 Aug 2025 08:58:55 +0000
ROA not before: Fri 22 Aug 2025 08:58:55 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131636
IP address blocks: 103.130.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 09:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5140 (0x1414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Aug 22 08:58:55 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2E0820095C0F6CD75C9EB0AA54C76E5E522AA6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:17:36:8f:c7:a5:be:eb:c8:6e:af:a5:f8:
eb:2f:d9:4f:11:91:5a:c1:1a:65:5d:d2:98:ce:4b:
ee:bb:74:01:75:ef:12:e1:11:71:7c:72:1a:b7:5b:
e0:55:37:75:31:af:0b:04:7d:30:5a:7a:a7:7d:38:
1a:e7:47:48:91:2d:cf:28:c1:de:32:59:ed:3d:fa:
af:d4:81:1d:9c:81:ce:5c:41:48:2d:b3:ad:14:17:
af:7d:16:39:ec:2d:39:a3:6a:8c:e1:17:64:07:62:
47:79:45:56:23:e0:f6:8b:db:b3:23:d4:d9:ff:1e:
92:a7:46:a0:7d:d5:ca:44:90:dc:d7:b2:28:7b:06:
38:63:a3:70:c6:88:f9:4e:68:3d:89:16:35:0d:02:
f6:c6:6c:86:a5:40:d2:c4:44:53:78:52:9e:6c:96:
b5:5f:59:b3:08:0f:e9:55:37:2b:d0:5d:f8:f5:5c:
8a:16:c3:9c:ee:17:74:67:0d:26:4e:c2:ff:28:e7:
5d:12:3b:69:99:15:40:56:26:bc:45:e3:c3:40:aa:
22:91:0b:11:b5:64:c9:72:01:73:63:30:9e:ba:7a:
22:f5:4a:d8:59:a3:b7:5d:f2:99:da:f9:54:3d:63:
3d:6b:14:76:d2:33:00:ba:25:97:3c:ce:0d:3b:ec:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:20:09:5C:0F:6C:D7:5C:9E:B0:AA:54:C7:6E:5E:52:2A:A6:CC
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/LgggCVwPbNdcnrCqVMduXlIqpsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.124.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:fb:03:ec:27:44:5b:a0:7a:e8:1b:ae:ff:b7:86:5f:ab:
85:ee:1c:24:32:6a:e0:e6:97:95:5e:e8:89:53:8d:ad:10:d1:
a2:67:ab:18:ca:8d:a6:0e:fd:4e:04:c9:7f:c3:66:41:e0:99:
f7:94:04:39:08:bc:3a:55:75:9a:a0:ee:05:0d:b8:5e:1f:55:
65:52:15:75:1d:f4:0b:28:28:24:d7:52:06:fc:52:7e:3f:88:
e6:13:e9:32:41:b2:12:bc:b3:52:7c:8a:65:de:41:af:e8:09:
35:d0:ca:a0:ee:6b:52:a3:c8:c8:2e:6f:60:9d:07:3f:f6:83:
c0:99:f6:fe:e7:41:62:22:db:07:63:25:3f:1f:13:2e:73:51:
c6:08:bb:99:04:8f:77:7c:37:a4:dc:bb:5c:89:33:0c:40:96:
e3:2d:31:6f:dc:fe:42:f8:93:53:4a:32:9b:8e:ff:3a:e5:aa:
20:cc:2c:d6:a5:d4:89:92:cd:40:2d:c7:06:af:3f:55:0f:fd:
ca:8b:b9:92:b5:96:51:22:10:68:0d:06:55:5a:9a:3a:16:57:
e7:cc:56:30:e0:16:37:46:31:7e:40:1c:af:f1:fc:22:90:f7:
ae:5d:ab:01:ac:97:e6:0e:36:12:f2:b1:04:b5:0a:ca:f8:a4:
20:9c:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:37:47 2025 by rpki-client