
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa
File: E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa (raw, json)
Hash identifier: DOnWoTuUnMhp1zMSeb1FE4vy43lqSLX/0+8lmEPp0J8=
Subject key identifier: 13:D3:6A:D3:87:C9:1C:83:41:A6:01:1E:27:9A:B6:9A:DF:21:A0:86
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 13FF
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa
Signing time: Fri 22 Aug 2025 08:59:58 +0000
ROA not before: Fri 22 Aug 2025 08:59:58 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 1131591
IP address blocks: 103.231.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 01:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5119 (0x13ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 08:59:58 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=13D36AD387C91C8341A6011E279AB69ADF21A086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:d4:ec:a4:0a:b7:06:1d:5b:cf:6e:33:41:
8e:5c:48:f0:4a:9d:e7:0d:32:24:d8:be:33:05:16:
b7:c5:bb:63:16:cc:ca:2b:c2:ea:f1:5c:93:56:1b:
b0:12:d6:1f:e1:2c:55:68:4e:62:b7:a3:fb:a7:c8:
47:28:0b:cc:f3:cc:e4:1e:a7:3c:b9:7b:1a:f9:db:
43:73:4b:d8:a3:c4:92:df:2a:6f:1d:67:4b:be:94:
15:13:0b:80:70:c4:b6:af:2d:82:04:03:30:1d:1e:
7b:3e:5e:39:52:c3:35:c4:b0:d2:07:5c:27:93:bf:
d8:10:f1:cb:a4:b9:99:07:8b:c3:8f:dc:83:53:12:
fc:43:ae:ed:f8:41:fc:cc:0c:2d:db:37:9f:48:e9:
37:fa:83:93:32:28:da:68:d1:24:2c:f0:56:d6:61:
9e:aa:13:bf:8a:60:fd:52:15:fa:5e:a6:1c:56:19:
dd:79:fa:de:36:d3:c1:ac:e2:5a:1e:81:82:1b:fe:
f8:8d:a1:83:e5:09:43:ef:38:4c:fc:76:d7:f3:34:
d1:6f:0a:d0:e4:a2:cd:74:f3:74:9f:0c:6d:29:7e:
f7:80:6e:eb:90:91:f6:71:24:8a:95:74:5a:e3:17:
af:e7:aa:f7:fb:6c:77:f1:b3:5b:ed:ba:b3:9d:75:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D3:6A:D3:87:C9:1C:83:41:A6:01:1E:27:9A:B6:9A:DF:21:A0:86
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:d7:43:46:5a:c0:3f:be:d3:76:9d:45:f3:4a:64:64:8b:73:
ed:6f:9d:5e:aa:aa:6e:9d:eb:35:19:e3:19:d5:4f:0c:94:de:
43:22:af:16:44:02:8e:42:2b:45:49:f6:e1:b9:09:84:aa:07:
88:83:ae:9e:39:5c:d1:8d:ff:fd:09:61:c3:3c:8c:e8:e4:8c:
70:30:95:7c:d0:ce:49:39:e2:dd:4c:f9:0d:e8:7a:82:9d:74:
61:ef:e4:bb:70:72:4c:ed:f2:b1:02:ca:0a:37:3c:f1:b3:e1:
5e:77:60:7e:b1:4e:e4:16:ea:c7:e3:fb:be:ed:b7:12:29:c7:
c4:c7:2f:13:f1:f0:c7:af:ee:14:13:85:c6:a1:78:36:95:5f:
dc:88:88:62:3a:0b:e5:6a:e0:5a:6e:74:1a:d1:8f:98:24:f9:
0d:3d:56:0b:46:5e:13:e3:4d:8b:40:2e:85:74:b0:e4:d2:4e:
86:11:fb:b0:8b:82:4f:98:75:2c:a4:75:bf:8d:a8:cf:a9:b7:
5a:32:0d:a9:7c:9c:f1:5d:9e:92:30:b7:78:d2:ed:89:b9:5e:
0c:a5:65:6b:70:2c:b1:16:20:75:4d:6e:ff:40:5f:97:ab:a9:
5c:05:57:92:de:c2:16:e6:b1:89:04:85:2e:a5:5d:ca:a7:93:
f8:07:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:34:11 2025 by rpki-client