
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/_Euj15aa6O997nGOhN8V_HFrRqI.roa
File: _Euj15aa6O997nGOhN8V_HFrRqI.roa (raw, json)
Hash identifier: W5LsuvDW5136J/dAwKTv+GnT9zqFfGxgTZSgFChTWnM=
Subject key identifier: FC:4B:A3:D7:96:9A:E8:EF:7D:EE:71:8E:84:DF:15:FC:71:6B:46:A2
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0DC3
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/_Euj15aa6O997nGOhN8V_HFrRqI.roa
Signing time: Fri 22 Aug 2025 08:56:41 +0000
ROA not before: Fri 22 Aug 2025 08:56:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4780
IP address blocks: 61.58.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3523 (0xdc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Aug 22 08:56:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FC4BA3D7969AE8EF7DEE718E84DF15FC716B46A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:23:87:6e:27:05:39:b1:e7:e9:d1:ff:21:
a4:21:eb:4f:bf:74:36:61:f3:d6:48:2f:ad:88:be:
0d:7d:36:ef:88:53:d9:b8:c5:b7:6a:67:53:5d:1b:
70:1e:3e:ea:ee:05:79:bc:f7:b0:72:89:e2:12:12:
cd:14:d3:31:55:2e:40:74:a4:8a:41:95:4c:d1:09:
18:cb:1d:50:2d:d5:f4:78:61:43:fa:d4:72:a1:ee:
51:50:9f:a4:d1:01:aa:d8:55:6a:b3:30:fe:c8:25:
05:40:09:a1:5d:4a:ef:25:a4:15:b3:6a:6e:ab:f3:
bb:43:45:67:54:2d:b9:ff:e9:fd:48:3d:40:50:5a:
8c:48:ea:9f:9e:6b:5d:78:dc:93:99:34:fb:7c:f0:
26:be:ff:16:1a:ee:07:23:c5:0c:53:d8:89:ff:ac:
ca:ed:86:32:23:10:3f:5a:bf:20:a3:82:43:71:c8:
fb:cd:79:39:75:37:48:8c:f0:6d:9c:8f:4d:0c:8d:
7f:f7:38:cd:ed:c9:cf:c2:b4:1e:41:73:6b:e3:95:
04:be:97:04:0c:de:ed:de:26:46:e7:89:15:06:17:
e5:eb:a1:01:ed:b3:1f:a8:fc:23:50:d8:c6:7b:2f:
b5:12:9d:26:d7:85:a6:32:c9:ea:20:a5:c3:b3:ec:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:A3:D7:96:9A:E8:EF:7D:EE:71:8E:84:DF:15:FC:71:6B:46:A2
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/_Euj15aa6O997nGOhN8V_HFrRqI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:6c:2c:8e:34:6d:91:b2:06:a4:48:06:e5:58:67:43:4a:eb:
91:2c:6c:ae:a0:0e:39:99:5c:4c:8c:5c:ae:d7:04:92:1a:43:
ac:37:60:44:f9:78:7a:93:3f:3d:73:9a:e0:08:9b:11:bd:ab:
50:a2:6f:20:4a:18:a7:9d:c0:65:ec:2f:a6:39:66:f2:1a:37:
43:8d:03:c1:99:4b:4d:7e:ba:5e:9b:9c:66:b8:71:0f:72:93:
db:c8:b0:f7:a4:fa:07:fc:07:58:f1:29:55:a7:44:2b:18:6c:
e2:2f:d1:08:67:fc:f2:3b:d3:7a:8d:05:10:f3:6c:5b:b5:1d:
97:46:69:9f:d5:25:5b:29:9a:3a:78:f9:13:61:40:81:db:50:
0c:78:bd:14:6e:dc:73:dd:c2:3e:90:80:27:70:b3:b1:ad:88:
32:d6:74:39:11:74:0a:75:f8:22:1d:82:a3:1c:b5:f1:83:af:
7e:2a:d8:d8:dd:12:96:bb:c8:6a:ef:75:08:b7:c6:00:d1:05:
62:55:dc:da:30:ca:6b:fe:f1:54:74:00:d0:8f:4b:ae:5b:23:
95:64:5d:22:65:12:63:ff:c4:ff:7a:e0:63:21:c6:a3:3b:31:
76:c1:b4:10:85:b7:09:ff:ac:12:d1:54:e1:63:40:b7:bd:41:
e4:2c:3e:42
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNTA4MjIw
ODU2NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZDNEJBM0Q3OTY5QUU4
RUY3REVFNzE4RTg0REYxNUZDNzE2QjQ2QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDk3iOHbicFObHn6dH/IaQh60+/dDZh89ZIL62Ivg19Nu+IU9m4
xbdqZ1NdG3AePuruBXm897ByieISEs0U0zFVLkB0pIpBlUzRCRjLHVAt1fR4YUP6
1HKh7lFQn6TRAarYVWqzMP7IJQVACaFdSu8lpBWzam6r87tDRWdULbn/6f1IPUBQ
WoxI6p+ea1143JOZNPt88Ca+/xYa7gcjxQxT2In/rMrthjIjED9avyCjgkNxyPvN
eTl1N0iM8G2cj00MjX/3OM3tyc/CtB5Bc2vjlQS+lwQM3u3eJkbniRUGF+XroQHt
sx+o/CNQ2MZ7L7USnSbXhaYyyeogpcOz7DCJAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/Euj15aa6O997nGOhN8V/HFrRqIwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvX0V1ajE1YWE2Tzk5N25H
T2hOOFZfSEZyUnFJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD06MDANBgkqhkiG9w0BAQsFAAOCAQEAwGwsjjRtkbIGpEgG5VhnQ0rrkSxsrqAO
OZlcTIxcrtcEkhpDrDdgRPl4epM/PXOa4AibEb2rUKJvIEoYp53AZewvpjlm8ho3
Q40DwZlLTX66XpucZrhxD3KT28iw96T6B/wHWPEpVadEKxhs4i/RCGf88jvTeo0F
EPNsW7Udl0Zpn9UlWymaOnj5E2FAgdtQDHi9FG7cc93CPpCAJ3Czsa2IMtZ0ORF0
CnX4Ih2Coxy18YOvfirY2N0SlrvIau91CLfGANEFYlXc2jDKa/7xVHQA0I9Lrlsj
lWRdImUSY//E/3rgYyHGozsxdsG0EIW3Cf+sEtFU4WNAt71B5Cw+Qg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:46:17 2025 by rpki-client