
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa
File: ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa (raw, json)
Hash identifier: LKn7uI6AgBpHG4K40L0bjJxIVTlLba08ez5ruWOAl7Q=
Subject key identifier: 65:5C:C1:05:88:37:3A:C5:DC:E9:A2:B4:68:58:DD:C4:DE:C4:B9:41
Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial: 109A
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa
Signing time: Fri 22 Aug 2025 08:44:18 +0000
ROA not before: Fri 22 Aug 2025 08:44:18 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 134823
IP address blocks: 103.134.80.0/22 maxlen: 30
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 12:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4250 (0x109a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Validity
Not Before: Aug 22 08:44:18 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=655CC10588373AC5DCE9A2B46858DDC4DEC4B941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:e2:8f:95:f1:f5:90:43:35:df:ed:ca:00:
bb:69:c7:07:ea:40:ca:af:ec:14:34:13:aa:e5:54:
ad:1d:15:9d:97:7b:37:1b:6d:43:84:8b:fd:e4:84:
ce:14:20:21:20:ab:d4:5f:f7:d6:bb:53:25:2a:a9:
f5:cb:af:f3:b5:0e:91:ea:b8:dd:71:3b:4b:65:66:
5c:c0:91:67:d5:64:17:ca:34:0c:a4:47:00:96:b2:
de:6a:99:a9:96:4f:9a:95:62:8c:56:0e:39:5a:9b:
85:9e:4f:57:d6:7a:69:a3:5f:95:11:74:a9:f5:73:
f8:bd:af:68:77:20:6c:c5:6b:01:00:aa:8d:a0:ce:
c5:b1:ec:6c:31:fc:3a:d9:9e:2d:93:05:8d:e7:be:
30:05:3c:ac:6d:df:d7:b9:e1:f0:66:45:82:e1:3f:
ce:d0:09:f8:bd:b1:cd:72:d7:6c:eb:ce:ec:b3:4b:
dc:c1:83:ae:5c:48:e8:66:27:05:86:32:cf:56:c6:
67:5b:69:0a:5f:f7:ea:38:84:2d:3c:d2:db:54:09:
fc:3b:f1:d6:14:d9:b3:dd:37:1b:47:ae:24:34:4a:
30:25:3c:6d:61:cf:76:3e:47:71:4c:4a:b7:f0:77:
b1:02:e7:1e:e9:00:0a:6d:8c:f8:25:41:bb:6a:b8:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5C:C1:05:88:37:3A:C5:DC:E9:A2:B4:68:58:DD:C4:DE:C4:B9:41
X509v3 Authority Key Identifier:
keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.80.0/22
Signature Algorithm: sha256WithRSAEncryption
47:10:65:f2:ff:3c:ad:4d:ca:5d:30:5b:87:e0:5b:58:b7:59:
ae:90:1c:96:16:7a:74:fe:5a:d7:c3:29:d4:12:79:51:f9:4e:
2c:d5:af:dc:bc:8e:86:4b:0a:76:e5:16:02:42:ef:f3:91:a4:
26:07:e4:75:ee:e6:1a:4f:b1:e4:dd:6a:60:09:99:ce:be:26:
01:56:4d:e1:0c:b2:8b:ce:ee:e3:1e:24:44:96:3e:40:c0:b2:
44:2d:7a:71:d6:12:22:5f:76:b1:e8:ff:ff:3b:bc:ad:76:54:
b4:41:d6:b6:54:d4:f6:97:47:f6:1d:fe:01:4f:ea:20:24:9d:
d1:c9:dd:04:6a:5b:1e:46:a6:fd:0a:7b:e5:d9:9b:f5:ab:b0:
84:f8:7e:82:fd:2c:ca:c2:0e:cd:06:df:bc:53:7f:33:4b:19:
60:a6:c6:08:41:cd:ea:02:a5:3f:e9:28:50:6b:7e:96:75:ed:
99:9b:17:b9:aa:34:ac:56:08:4f:6e:ca:b7:60:a2:98:4f:e8:
50:82:c4:35:6b:57:66:b9:ee:43:06:59:9d:8b:eb:b0:7d:83:
5c:ad:f6:fa:24:73:fc:48:f0:5d:0c:c8:bc:8d:6b:0d:35:46:
54:49:c0:1c:49:9d:5f:6b:ad:d7:65:17:e7:43:56:48:52:f5:
e9:23:53:3c
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICEJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2
MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yNTA4MjIw
ODQ0MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1NUNDMTA1ODgzNzNB
QzVEQ0U5QTJCNDY4NThEREM0REVDNEI5NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClWOKPlfH1kEM13+3KALtpxwfqQMqv7BQ0E6rlVK0dFZ2Xezcb
bUOEi/3khM4UICEgq9Rf99a7UyUqqfXLr/O1DpHquN1xO0tlZlzAkWfVZBfKNAyk
RwCWst5qmamWT5qVYoxWDjlam4WeT1fWemmjX5URdKn1c/i9r2h3IGzFawEAqo2g
zsWx7Gwx/DrZni2TBY3nvjAFPKxt39e54fBmRYLhP87QCfi9sc1y12zrzuyzS9zB
g65cSOhmJwWGMs9WxmdbaQpf9+o4hC080ttUCfw78dYU2bPdNxtHriQ0SjAlPG1h
z3Y+R3FMSrfwd7EC5x7pAAptjPglQbtquKizAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUZVzBBYg3OsXc6aK0aFjdxN7EuUEwHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk
FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H
SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vWlZ6QkJZZzNP
c1hjNmFLMGFGamR4TjdFdVVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmeGUDANBgkqhkiG9w0BAQsFAAOCAQEARxBl8v88rU3KXTBbh+BbWLdZ
rpAclhZ6dP5a18Mp1BJ5UflOLNWv3LyOhksKduUWAkLv85GkJgfkde7mGk+x5N1q
YAmZzr4mAVZN4Qyyi87u4x4kRJY+QMCyRC16cdYSIl92sej//zu8rXZUtEHWtlTU
9pdH9h3+AU/qICSd0cndBGpbHkam/Qp75dmb9auwhPh+gv0sysIOzQbfvFN/M0sZ
YKbGCEHN6gKlP+koUGt+lnXtmZsXuao0rFYIT27Kt2CimE/oUILENWtXZrnuQwZZ
nYvrsH2DXK32+iRz/EjwXQzIvI1rDTVGVEnAHEmdX2ut12UX50NWSFL16SNTPA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 11:36:32 2025 by rpki-client