
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa
File: BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa (raw, json)
Hash identifier: pZ36mWf4EmMRw0PL1g7KkkHhiDYRf5KVAOYZD8FPr4E=
Subject key identifier: 06:70:7D:10:75:6B:1E:1D:42:57:13:0A:1E:1B:AF:39:AE:88:A0:6B
Certificate issuer: /CN=79422E30E1CBDB79522B52AADFD637F509C924A5
Certificate serial: 03
Authority key identifier: 79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa
Signing time: Mon 13 Apr 2026 02:07:26 +0000
ROA not before: Mon 13 Apr 2026 02:07:26 +0000
ROA not after: Sat 10 Apr 2027 15:30:19 +0000
asID: 38042
IP address blocks: 163.128.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 20:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79422E30E1CBDB79522B52AADFD637F509C924A5
Validity
Not Before: Apr 13 02:07:26 2026 GMT
Not After : Apr 10 15:30:19 2027 GMT
Subject: CN=06707D10756B1E1D4257130A1E1BAF39AE88A06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:ea:66:b6:83:65:39:58:53:a8:d2:8f:49:
b7:1e:a3:70:e2:5c:a0:f8:f4:27:b9:a0:51:bc:10:
1c:1c:c9:e2:ab:e2:94:4e:ef:59:6a:0e:8d:04:51:
9b:05:30:59:9a:3f:ab:fe:f7:8d:e8:26:de:ee:41:
1a:ee:2b:45:05:0a:a9:5d:2b:ec:7f:aa:25:24:75:
f4:48:85:d4:b4:8d:36:f3:e9:26:de:87:39:e9:c7:
5f:d2:98:f4:49:39:87:96:fd:99:79:44:00:21:4a:
ac:cd:6c:4e:70:3f:69:27:40:ae:fd:ab:a0:d2:2b:
6d:d3:19:30:82:fc:e9:aa:1e:7c:0a:c5:cc:75:19:
2d:32:aa:d1:f5:8e:d3:19:18:e3:bc:1b:3e:2f:9e:
94:1d:41:fe:f2:26:cf:d2:66:e3:dc:9e:34:a2:c2:
a8:70:7c:21:9d:47:3e:a0:c0:35:1c:fd:a8:52:91:
7a:ca:71:cd:68:18:57:74:e2:90:db:14:44:da:ba:
a3:c5:57:c1:b5:2b:f1:80:e0:fd:b9:68:3f:04:29:
31:83:26:ac:e2:84:0e:b6:74:04:36:51:a6:c2:ae:
94:13:26:d2:25:89:66:43:96:8f:dc:58:70:88:e1:
8a:91:18:db:0b:78:3b:12:20:20:4b:61:b9:7d:d7:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:70:7D:10:75:6B:1E:1D:42:57:13:0A:1E:1B:AF:39:AE:88:A0:6B
X509v3 Authority Key Identifier:
keyid:79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.128.192.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a4:df:e6:31:44:c2:41:85:dd:c5:7b:07:2b:73:78:5d:88:
50:e0:60:2c:fe:9f:8f:01:81:01:8e:21:5b:b9:a6:ed:45:5d:
4c:f3:8b:ac:cb:e6:10:3e:46:3f:22:9c:e4:2e:35:5e:13:ad:
b6:b7:e1:01:82:ac:c5:f6:73:68:42:07:40:8d:0b:03:4b:0c:
cb:e8:6b:b9:2d:29:72:72:de:c3:60:06:a3:59:d9:8d:20:a7:
6f:ce:ee:7f:58:b4:ee:76:b1:41:d2:12:6b:61:26:30:5a:76:
01:46:8a:f3:6b:b6:56:d8:1b:5f:8c:1f:68:e7:a3:51:55:cb:
ce:1c:75:78:3f:09:23:7b:fb:27:0d:46:99:6c:92:5c:86:cb:
dd:5b:06:2c:36:a4:35:72:3e:3e:e0:f4:d9:46:d3:e6:32:8d:
56:db:9f:c3:4a:2d:34:a2:fd:f0:1f:88:20:0f:5a:fd:b1:77:
95:ef:5c:bb:15:7c:59:22:77:bd:83:d8:ce:b1:37:a1:61:38:
59:18:ee:ed:3f:68:87:47:8d:ac:3e:7c:df:d3:99:b0:99:8e:
47:a3:a9:12:75:86:de:2c:c7:01:2e:a9:42:88:c8:37:da:b8:
e1:03:1a:97:4b:25:88:d6:83:30:13:5b:00:94:04:d1:dc:d1:
0e:f4:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:58 2026 by rpki-client