
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/7S7e62bEKmwRevYuUM8wpzIoIgg.roa
File: 7S7e62bEKmwRevYuUM8wpzIoIgg.roa (raw, json)
Hash identifier: S6yLfLdfpAiHyfEhnHNfXx2RN90/77nYlzGqQO9hQ8U=
Subject key identifier: ED:2E:DE:EB:66:C4:2A:6C:11:7A:F6:2E:50:CF:30:A7:32:28:22:08
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0D8E
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/7S7e62bEKmwRevYuUM8wpzIoIgg.roa
Signing time: Fri 17 Oct 2025 02:34:06 +0000
ROA not before: Fri 17 Oct 2025 02:34:06 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131617
IP address blocks: 103.104.148.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 11:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3470 (0xd8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Oct 17 02:34:06 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=ED2EDEEB66C42A6C117AF62E50CF30A732282208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:32:2b:43:63:9b:54:8b:88:1b:ca:5b:4f:
98:bd:66:56:a2:7e:6b:c1:72:2d:a4:fc:0d:60:e3:
62:86:86:42:53:06:47:46:7c:6e:71:3f:f3:5c:ab:
5a:e9:94:3f:5c:c1:af:03:39:7c:10:24:c7:64:4b:
6d:32:b9:41:85:db:40:2d:5f:13:0d:be:e5:bc:bd:
e4:ab:6c:c4:72:da:d9:1e:dc:d2:8c:2f:47:5b:9d:
9f:f9:98:a1:1f:83:c5:1b:89:7c:c4:14:80:e9:2c:
19:7c:50:fc:55:3c:a8:55:92:a9:9e:dd:e3:64:5b:
a0:ce:6a:84:57:d0:3e:ac:fa:cc:f5:86:a3:75:fa:
3c:49:f0:07:2f:0a:fb:8c:e0:b4:a5:29:5f:05:2c:
3c:9c:9f:5d:a2:5e:79:9b:c0:2c:3b:26:8d:32:b0:
9e:5d:ad:2a:20:05:3c:97:d3:91:81:28:bf:a7:95:
8b:30:94:b3:66:77:38:1c:f1:a0:70:91:b4:61:b8:
5b:13:0b:f1:f4:18:db:bc:2b:af:9b:9f:7b:8b:5b:
63:58:b1:b6:7d:10:91:8d:5d:ab:b3:b4:f9:91:81:
ca:3d:55:9b:63:39:c9:a6:f6:f0:2b:62:82:f9:25:
2e:97:25:d8:21:f4:41:5d:52:94:9c:39:22:91:e1:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2E:DE:EB:66:C4:2A:6C:11:7A:F6:2E:50:CF:30:A7:32:28:22:08
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/7S7e62bEKmwRevYuUM8wpzIoIgg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.148.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:66:c3:28:c1:d7:1a:34:b4:a3:1f:98:36:5a:cd:9c:d8:25:
95:02:25:93:24:50:c7:4f:e5:2c:95:84:c2:7d:c5:0f:ec:95:
f1:0e:47:f7:68:da:29:23:b7:29:d2:51:fc:5e:d3:70:5e:8a:
41:22:f8:dd:84:e9:fd:6d:1e:76:63:7e:5d:3d:b1:27:67:7d:
22:dc:0c:8e:cc:bf:b1:c7:7e:18:f8:97:0c:52:66:84:df:58:
e4:c8:5c:15:73:0e:b6:cf:f7:91:2d:e6:fe:b3:aa:51:99:09:
da:ad:3f:46:0f:1e:cd:bc:89:9d:62:b3:e9:40:75:68:26:bc:
ed:b2:81:8a:c1:61:ce:df:98:2e:ef:43:b1:2c:99:c1:f6:6d:
52:a7:cc:ca:b0:71:16:50:49:3e:bf:64:94:81:e1:7d:0f:12:
4d:a3:09:85:1d:b4:e9:be:93:1e:cb:6b:0f:03:af:77:9b:78:
46:10:7a:60:c0:04:e5:26:db:e5:c5:e7:4c:5c:fe:bc:47:6b:
52:2f:8e:5d:03:18:fc:4a:10:ec:69:95:9d:16:af:e8:b2:53:
9f:20:77:d8:6f:50:d0:e3:0e:71:2f:a7:b8:5c:17:b4:31:7e:
43:86:7f:4f:13:4f:02:08:ca:81:ef:b0:d8:ed:5e:fa:c9:da:
65:fb:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:22:47 2025 by rpki-client