
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/EP1QC5jGh_8B5J5ZPc88D6MHONw.roa
File: EP1QC5jGh_8B5J5ZPc88D6MHONw.roa (raw, json)
Hash identifier: gycNu8u0JwFGQFGQi72xHqYyfqeqMBD1/XcZrSTFbNI=
Subject key identifier: 10:FD:50:0B:98:C6:87:FF:01:E4:9E:59:3D:CF:3C:0F:A3:07:38:DC
Certificate issuer: /CN=9E454EA69C0249FFAB072242AEDD882821269838
Certificate serial: 021B
Authority key identifier: 9E:45:4E:A6:9C:02:49:FF:AB:07:22:42:AE:DD:88:28:21:26:98:38
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nkVOppwCSf-rByJCrt2IKCEmmDg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/EP1QC5jGh_8B5J5ZPc88D6MHONw.roa
Signing time: Fri 22 Aug 2025 09:01:03 +0000
ROA not before: Fri 22 Aug 2025 09:01:03 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 150756
IP address blocks: 203.99.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/nkVOppwCSf-rByJCrt2IKCEmmDg.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/nkVOppwCSf-rByJCrt2IKCEmmDg.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/nkVOppwCSf-rByJCrt2IKCEmmDg.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 01:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E454EA69C0249FFAB072242AEDD882821269838
Validity
Not Before: Aug 22 09:01:03 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=10FD500B98C687FF01E49E593DCF3C0FA30738DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:33:79:58:cf:81:7d:58:c9:96:33:e7:74:
a0:ea:25:1f:fc:23:00:49:0e:e1:be:f9:c6:41:2c:
b1:af:c9:1f:8f:7b:35:d3:39:68:bb:57:b4:64:fc:
97:6e:94:1b:09:cf:00:98:4e:e1:5d:ec:11:71:b3:
09:2d:11:5e:0a:5c:aa:c3:3d:e0:10:f1:3e:ad:dd:
28:3d:07:0d:40:0f:86:e3:22:f3:cd:2d:99:58:f8:
ca:51:bd:9c:11:3d:2e:71:14:07:7b:31:54:65:30:
53:c9:be:7c:ee:fc:71:71:03:a6:64:1d:6b:2d:12:
d0:de:3a:f1:38:4b:ff:33:70:2c:c0:84:a3:8e:b2:
4d:12:03:e9:ae:57:de:4a:03:f2:9f:6f:41:fe:5d:
40:d9:6d:95:54:51:9f:d2:f2:4b:64:91:c1:cd:71:
b2:2f:2c:15:2f:a8:cd:52:a1:9f:38:7a:64:6c:b4:
7a:fe:75:74:e2:89:ca:54:62:ef:bd:45:b9:45:06:
8b:67:40:c4:18:a0:bd:05:ad:02:86:94:3e:39:f6:
2e:12:18:d8:d2:88:6d:c1:77:67:6b:be:86:a2:aa:
ea:1b:8b:e5:25:e8:38:a7:ea:72:82:70:ef:8a:82:
09:b9:39:92:b4:b6:2f:de:75:20:b3:67:6e:02:94:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:50:0B:98:C6:87:FF:01:E4:9E:59:3D:CF:3C:0F:A3:07:38:DC
X509v3 Authority Key Identifier:
keyid:9E:45:4E:A6:9C:02:49:FF:AB:07:22:42:AE:DD:88:28:21:26:98:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/nkVOppwCSf-rByJCrt2IKCEmmDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nkVOppwCSf-rByJCrt2IKCEmmDg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/EP1QC5jGh_8B5J5ZPc88D6MHONw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.99.146.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:c1:64:99:43:74:b0:4c:2b:e3:6f:dd:cc:d7:a4:68:a0:4d:
14:f4:f6:a0:78:2f:cb:bc:ad:f7:f1:d9:c6:8e:e1:73:52:da:
e6:8e:ad:d0:ac:62:ec:33:63:83:98:1f:26:50:39:3b:0a:3e:
c5:45:28:31:43:b2:a8:11:e2:31:2a:d6:21:fa:f5:1d:98:5c:
c4:6a:ef:52:b1:03:cf:a3:26:11:6b:09:7c:cf:43:68:14:cf:
46:b6:45:67:4f:b9:af:5f:f0:ce:46:ea:56:05:b7:ea:ef:b3:
c1:6c:ea:ff:45:1f:6e:a2:ed:f0:1d:af:b8:1d:fd:7a:5e:8f:
0f:bf:d0:06:94:49:98:bc:52:22:6d:65:f5:65:aa:5a:e2:b3:
7c:48:82:da:f7:fb:26:8d:1c:91:f0:02:f7:2c:c6:e8:16:1d:
d4:13:aa:18:10:fb:47:b1:c7:69:79:ac:c9:ff:da:09:ad:1d:
43:3b:eb:1e:66:26:d9:e9:6e:28:1c:25:83:39:1d:74:a7:25:
1b:a7:1c:50:00:09:18:36:4d:a5:9b:bd:14:68:ac:29:62:ae:
bc:6f:2f:04:88:25:6c:fe:30:1f:9e:6f:93:cd:9e:99:fc:3e:
ae:e7:7d:dd:83:bb:0e:ca:44:c6:28:7a:17:9f:80:ce:ca:c4:
0b:b1:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:34:24 2025 by rpki-client