
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/uDcdSwyEicQSFIhPyI7y-T3U8Co.roa
File: uDcdSwyEicQSFIhPyI7y-T3U8Co.roa (raw, json)
Hash identifier: kaJK1ZX0zzUEzVE4Q+BIqKkazgYlfyCof4oJnWjIyBU=
Subject key identifier: B8:37:1D:4B:0C:84:89:C4:12:14:88:4F:C8:8E:F2:F9:3D:D4:F0:2A
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0FB3
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/uDcdSwyEicQSFIhPyI7y-T3U8Co.roa
Signing time: Fri 22 Aug 2025 08:51:12 +0000
ROA not before: Fri 22 Aug 2025 08:51:12 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131618
IP address blocks: 103.135.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 01:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4019 (0xfb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Aug 22 08:51:12 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B8371D4B0C8489C41214884FC88EF2F93DD4F02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:22:f6:44:d1:44:33:42:57:bf:a0:aa:1b:56:
e7:4d:73:d8:67:a3:47:0f:f6:c1:f1:93:15:f3:75:
ab:a5:55:21:fb:d2:77:50:16:ce:a5:3a:de:c9:99:
6d:61:16:a1:88:4d:63:94:c0:0e:9a:25:8b:5e:e4:
be:53:77:dc:b4:f4:5d:1c:59:59:ab:5d:e8:76:5f:
f7:c3:34:26:db:6a:31:2f:af:0f:f3:7d:f1:f4:72:
49:4e:b9:8a:38:af:cc:d5:be:82:3d:e0:d0:ee:00:
47:1b:bf:20:57:48:9c:05:90:2a:1e:18:29:ce:c0:
19:fc:8d:87:3c:24:55:7f:d9:c7:7d:ee:b7:fb:d5:
47:58:9e:45:15:fc:29:d6:47:d3:45:13:f7:6f:c8:
60:4c:da:5d:1c:4f:96:ee:44:34:7f:83:63:f3:c6:
de:b2:1e:66:9d:c6:b1:7e:41:49:0e:df:ee:7e:0d:
39:6f:cc:1f:94:c1:71:57:f1:e7:02:16:95:04:ec:
4c:ba:fa:4c:f2:b7:f6:77:94:5f:5b:16:37:fe:f1:
c4:00:ad:a7:d3:ca:59:ef:cd:a5:1e:90:b5:c4:87:
a6:95:cb:8a:54:58:8d:4c:e3:e3:82:9b:49:9a:41:
dc:e1:1d:2c:36:f8:94:5b:c0:1d:79:bc:d6:8d:d0:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:1D:4B:0C:84:89:C4:12:14:88:4F:C8:8E:F2:F9:3D:D4:F0:2A
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/uDcdSwyEicQSFIhPyI7y-T3U8Co.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
33:51:b8:b6:8f:99:df:eb:29:28:dc:88:b8:af:a1:98:df:62:
b1:e4:f3:81:f6:d8:a2:73:cf:28:95:32:8f:c2:43:46:2c:26:
0a:58:e5:5c:62:23:e9:8a:b0:b7:5c:57:8d:f7:cf:e3:03:81:
ff:89:1a:38:97:0d:03:f3:01:15:8d:fa:c2:73:67:12:2a:de:
ab:dd:63:0a:d2:b0:7f:cc:15:c6:82:bb:d1:c2:ba:89:59:04:
de:de:02:67:99:c5:85:12:b9:68:f7:d6:eb:a6:1d:cc:af:04:
32:b5:3f:55:63:b0:77:54:48:1c:eb:a7:64:fe:0f:39:08:99:
b7:99:cd:44:80:02:a1:97:a2:e0:66:d2:39:50:34:4e:a5:5e:
80:f3:f3:d5:54:ec:ba:7d:af:53:25:a9:5f:9e:bf:66:38:b5:
c6:37:d0:b8:0d:07:71:c4:99:4f:8e:ff:ca:e3:2b:73:b2:75:
28:b8:49:f5:5f:9f:17:33:99:e4:be:88:98:f4:3b:14:07:02:
03:59:6f:e0:67:c7:44:f5:3a:78:1c:77:37:f1:dc:75:d3:1b:
de:9f:01:61:50:c8:21:39:39:06:a1:40:17:9c:d2:3f:f7:32:
58:2b:c3:50:8c:08:c1:c9:83:c5:64:02:1f:38:65:bf:40:30:
04:bf:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:45:42 2025 by rpki-client