
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa
File: wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa (raw, json)
Hash identifier: 36N1FeAVuZE8eI+ldZfqvGhEClJE27XR+yAWiFk5XZA=
Subject key identifier: C0:8C:90:97:01:20:15:40:9D:3B:3C:1B:BB:99:88:3E:0B:15:BF:86
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 013A
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa
Signing time: Thu 26 Feb 2026 08:24:03 +0000
ROA not before: Thu 26 Feb 2026 08:24:03 +0000
ROA not after: Wed 30 Dec 2026 15:30:20 +0000
asID: 18040
IP address blocks: 2402:43e0:100::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: Feb 26 08:24:03 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=C08C9097012015409D3B3C1BBB99883E0B15BF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:f8:b2:80:00:06:82:d2:e2:1f:ba:14:20:
ac:53:8f:a9:31:a3:4f:58:6e:29:57:15:d2:0e:35:
1a:44:db:5c:0d:21:a5:18:7d:70:e2:9d:61:1d:64:
a7:f4:b5:d6:2f:ec:8f:69:ce:25:76:92:74:84:c1:
eb:a6:e9:49:fb:30:5c:2a:c6:24:27:ba:ed:10:1b:
c9:bc:aa:90:0d:e7:55:39:c5:16:e9:1b:64:8e:5f:
2c:a3:63:1c:4a:f7:08:9b:9a:67:5a:2e:37:24:74:
b5:18:dd:52:80:2f:7d:fa:5b:e2:11:5f:e3:22:58:
77:7d:be:81:9b:90:15:a3:9b:61:71:27:0f:40:b3:
60:e3:6e:6b:37:14:5d:e4:b1:6c:03:b7:24:de:74:
a0:06:17:e8:a7:a5:18:70:35:53:3b:b5:3a:3e:a5:
c7:20:7b:52:8a:a4:76:30:f5:b0:2a:58:92:5e:57:
a6:20:bf:e8:4a:b1:59:1c:d1:d8:0e:24:14:cf:a3:
a6:d7:bb:5d:cd:94:01:5c:28:bf:35:8f:33:4c:87:
ab:28:06:38:40:04:a7:c8:82:37:d2:3f:83:e1:d7:
cc:a5:3f:e6:a9:34:c0:5c:10:3d:91:c7:c3:f4:52:
d5:27:9e:af:02:a4:ab:41:23:4e:43:8d:fe:57:4f:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:90:97:01:20:15:40:9D:3B:3C:1B:BB:99:88:3E:0B:15:BF:86
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:100::/48
Signature Algorithm: sha256WithRSAEncryption
16:e5:fc:0a:c1:9b:81:53:92:04:af:fd:c9:74:6e:13:b9:55:
78:c2:3c:13:05:17:2d:00:9d:19:5b:cb:5c:c7:8e:86:15:34:
67:e6:5e:b8:1d:15:f3:d0:9c:28:a2:a8:85:e3:e5:fe:5f:f0:
8c:fe:54:e3:50:8d:b0:9c:ae:17:24:92:9b:85:e7:92:6d:d3:
8f:14:45:03:64:fb:85:3b:a7:58:71:e9:bc:53:6c:a6:2a:51:
ff:e0:37:f8:03:46:98:23:18:d6:35:2f:7f:a8:2e:ce:d5:9c:
bb:ea:e4:4c:75:11:48:e9:ac:d1:65:42:df:8a:33:6b:81:7a:
d5:96:5a:da:f5:6a:43:91:94:e7:10:00:28:b2:f7:e2:f3:60:
43:69:7c:33:27:47:5d:d9:5d:85:82:4f:8d:34:22:6b:d2:6b:
30:09:4a:3e:27:ab:c9:5d:29:f3:95:41:7d:b2:b4:9e:23:7a:
c7:11:aa:15:42:b5:2b:1c:0c:a0:4e:77:9c:78:69:c0:f4:83:
b8:d6:46:2a:9f:8c:46:e0:b7:c3:9a:85:63:21:9e:41:62:e9:
27:e5:46:8b:bf:b0:3a:12:d1:8b:55:1b:42:8c:45:e5:12:92:
32:66:e7:46:53:20:bf:83:c9:db:9d:8f:7b:e5:6b:70:ce:88:
5d:1f:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:28 2026 by rpki-client