
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/-1XVPannxNhE0gN6nt3WaVnbJzY.roa
File: -1XVPannxNhE0gN6nt3WaVnbJzY.roa (raw, json)
Hash identifier: HckFBq6bNh0Ty5m0qi4KgS81TTmfyriYDAa0HhLToXs=
Subject key identifier: FB:55:D5:3D:A9:E7:C4:D8:44:D2:03:7A:9E:DD:D6:69:59:DB:27:36
Certificate issuer: /CN=70642125FDF902365B240CA4022802132FDC1C15
Certificate serial: 0B
Authority key identifier: 70:64:21:25:FD:F9:02:36:5B:24:0C:A4:02:28:02:13:2F:DC:1C:15
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cGQhJf35AjZbJAykAigCEy_cHBU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/-1XVPannxNhE0gN6nt3WaVnbJzY.roa
Signing time: Fri 13 Feb 2026 16:29:02 +0000
ROA not before: Fri 13 Feb 2026 16:29:02 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131653
IP address blocks: 2402:4d20:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/cGQhJf35AjZbJAykAigCEy_cHBU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/cGQhJf35AjZbJAykAigCEy_cHBU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/cGQhJf35AjZbJAykAigCEy_cHBU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 20:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70642125FDF902365B240CA4022802132FDC1C15
Validity
Not Before: Feb 13 16:29:02 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FB55D53DA9E7C4D844D2037A9EDDD66959DB2736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:72:fb:b1:90:21:da:8c:4a:cb:7f:9b:8a:
b9:f4:78:b3:98:f4:96:f2:11:29:1d:52:ca:da:2f:
06:3b:b4:ef:10:80:62:89:d9:dc:22:f7:12:96:7b:
91:29:04:a9:42:79:02:53:81:41:4b:a7:a9:ba:1f:
3d:a7:91:67:fe:34:60:b5:40:6b:0f:71:eb:08:8a:
7f:f9:b0:11:16:0f:91:53:20:ab:b6:9a:9e:49:8e:
10:2e:d2:03:1e:6b:50:0a:90:5d:6d:f4:8d:e5:e7:
53:9d:78:0d:4c:1e:0f:05:a1:5d:48:53:bb:2c:c2:
c4:7a:1f:c5:e4:dd:cb:06:d0:cf:fb:21:4f:8f:f4:
ad:85:f4:2f:da:c9:bd:da:b1:a6:e2:4b:66:12:4c:
6d:2a:0c:cf:0c:72:af:61:83:28:35:ed:ec:69:18:
d6:c9:1d:33:fd:c6:f1:11:e6:1f:32:15:63:ce:6f:
fb:33:6a:cd:33:ea:49:12:4b:c4:b8:4b:aa:13:dc:
c9:62:48:ca:f6:22:bd:d0:d6:46:01:d6:0e:da:c2:
bf:d5:07:2d:1b:e3:42:ff:b8:87:51:0b:e7:b3:dc:
9b:ea:83:51:ee:4c:cb:db:90:85:a2:e6:79:4f:30:
64:52:72:ab:7b:93:72:bf:f6:7f:26:9f:6f:cc:44:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:D5:3D:A9:E7:C4:D8:44:D2:03:7A:9E:DD:D6:69:59:DB:27:36
X509v3 Authority Key Identifier:
keyid:70:64:21:25:FD:F9:02:36:5B:24:0C:A4:02:28:02:13:2F:DC:1C:15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/cGQhJf35AjZbJAykAigCEy_cHBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cGQhJf35AjZbJAykAigCEy_cHBU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/-1XVPannxNhE0gN6nt3WaVnbJzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4d20:1::/48
Signature Algorithm: sha256WithRSAEncryption
8d:06:f2:8e:f7:50:00:85:e0:fc:dc:64:5b:f3:71:49:63:77:
4b:50:83:03:c0:e6:d2:5c:32:ca:ca:48:cf:e4:e3:de:b7:db:
ae:fb:df:98:75:b7:fd:f7:c8:e7:c8:2d:d1:2c:1a:62:82:39:
33:c1:7d:70:ef:72:b5:c1:b9:a4:33:83:5c:e3:cc:ad:f9:1a:
da:6a:4e:89:6b:62:65:53:6b:c8:06:ef:a0:6f:48:e5:c5:15:
f8:3e:bb:4e:c6:23:55:ca:4f:4d:03:79:07:f1:18:10:48:0b:
9a:33:87:a5:ce:7a:57:d7:f7:3f:2f:0f:01:d1:b8:97:3c:4b:
e9:85:af:af:96:2d:42:20:75:89:db:33:d8:50:e4:68:32:9f:
21:7e:bb:02:b6:d3:9f:ce:a7:6c:df:e3:15:3b:c6:28:64:23:
56:42:25:49:65:17:2b:7d:d4:b8:25:48:4f:b9:44:ef:35:9d:
9a:6b:9b:86:1a:c8:2c:5d:ca:94:f2:dc:4d:a1:bc:82:18:59:
71:2d:cd:b3:05:19:24:c8:b3:98:5c:32:ae:f2:d1:9f:5a:2f:
f1:51:3e:2c:76:0d:4b:61:95:63:ec:f5:3e:74:9a:03:36:d2:
9a:11:e0:4f:3b:c1:2a:ae:19:ef:4c:5c:81:76:3c:34:56:06:
57:dc:a8:ea
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MDY0
MjEyNUZERjkwMjM2NUIyNDBDQTQwMjI4MDIxMzJGREMxQzE1MB4XDTI2MDIxMzE2
MjkwMloXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoRkI1NUQ1M0RBOUU3QzRE
ODQ0RDIwMzdBOUVEREQ2Njk1OURCMjczNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMHacvuxkCHajErLf5uKufR4s5j0lvIRKR1SytovBju07xCAYonZ
3CL3EpZ7kSkEqUJ5AlOBQUunqbofPaeRZ/40YLVAaw9x6wiKf/mwERYPkVMgq7aa
nkmOEC7SAx5rUAqQXW30jeXnU514DUweDwWhXUhTuyzCxHofxeTdywbQz/shT4/0
rYX0L9rJvdqxpuJLZhJMbSoMzwxyr2GDKDXt7GkY1skdM/3G8RHmHzIVY85v+zNq
zTPqSRJLxLhLqhPcyWJIyvYivdDWRgHWDtrCv9UHLRvjQv+4h1EL57Pcm+qDUe5M
y9uQhaLmeU8wZFJyq3uTcr/2fyafb8xEE/kCAwEAAaOCAfcwggHzMB0GA1UdDgQW
BBT7VdU9qefE2ETSA3qe3dZpWdsnNjAfBgNVHSMEGDAWgBRwZCEl/fkCNlskDKQC
KAITL9wcFTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS
oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTE9VREJB
U0UvY0dRaEpmMzVBalpiSkF5a0FpZ0NFeV9jSEJVLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9jR1FoSmYzNUFqWmJKQXlrQWlnQ0V5X2NIQlUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTE9VREJBU0UvLTFYVlBhbm54TmhF
MGdONm50M1dhVm5iSnpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3
bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACQCTSAAATANBgkqhkiG9w0BAQsFAAOCAQEAjQbyjvdQAIXg/NxkW/NxSWN3
S1CDA8Dm0lwyyspIz+Tj3rfbrvvfmHW3/ffI58gt0SwaYoI5M8F9cO9ytcG5pDOD
XOPMrfka2mpOiWtiZVNryAbvoG9I5cUV+D67TsYjVcpPTQN5B/EYEEgLmjOHpc56
V9f3Py8PAdG4lzxL6YWvr5YtQiB1idsz2FDkaDKfIX67ArbTn86nbN/jFTvGKGQj
VkIlSWUXK33UuCVIT7lE7zWdmmubhhrILF3KlPLcTaG8ghhZcS3NswUZJMizmFwy
rvLRn1ov8VE+LHYNS2GVY+z1PnSaAzbSmhHgTzvBKq4Z70xcgXY8NFYGV9yo6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:10 2026 by rpki-client