
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/X7UJZh_kRBtSwbfpW83GeR6ARgQ.roa
File: X7UJZh_kRBtSwbfpW83GeR6ARgQ.roa (raw, json)
Hash identifier: aIT4Kes1PAHde6U3hbsmN9EihDxy3NVnhup6eiwMPQc=
Subject key identifier: 5F:B5:09:66:1F:E4:44:1B:52:C1:B7:E9:5B:CD:C6:79:1E:80:46:04
Certificate issuer: /CN=79422E30E1CBDB79522B52AADFD637F509C924A5
Certificate serial: 05
Authority key identifier: 79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/X7UJZh_kRBtSwbfpW83GeR6ARgQ.roa
Signing time: Mon 13 Apr 2026 02:07:50 +0000
ROA not before: Mon 13 Apr 2026 02:07:50 +0000
ROA not after: Sat 10 Apr 2027 15:30:19 +0000
asID: 134823
IP address blocks: 163.128.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79422E30E1CBDB79522B52AADFD637F509C924A5
Validity
Not Before: Apr 13 02:07:50 2026 GMT
Not After : Apr 10 15:30:19 2027 GMT
Subject: CN=5FB509661FE4441B52C1B7E95BCDC6791E804604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:9d:65:9b:13:9f:d3:68:11:c6:cf:64:c6:
e5:36:f5:3c:83:09:7e:1a:c7:fa:e1:ec:5c:71:af:
23:2c:5e:16:ab:26:4b:1d:7a:57:54:38:76:16:fe:
0c:e0:7e:1d:ed:53:3e:fb:d7:b0:95:73:3b:04:ba:
65:3d:14:94:db:cd:0c:2e:d0:ff:c3:e9:d1:f3:6a:
52:00:c0:3b:0b:33:fc:5a:0d:85:69:aa:2f:1f:0c:
5b:db:eb:0f:b5:8f:c9:ae:46:6c:96:8b:a8:4c:cc:
2e:be:5c:7a:70:fe:cf:92:1c:90:dd:ba:51:8f:04:
c2:9d:92:fb:ca:ef:a3:8c:19:12:b4:a4:10:90:16:
d0:39:82:e5:04:66:71:76:ec:95:f2:72:51:af:ba:
69:20:58:a3:24:a3:5e:f5:38:6c:f3:d8:0c:84:e2:
55:6a:53:5e:61:05:c2:21:b7:05:98:98:a2:83:f2:
c2:34:d3:b0:43:56:dd:0b:4e:c6:ce:39:ff:ff:f3:
2c:f7:23:4b:be:11:60:87:56:12:4a:9a:77:7a:67:
e6:21:37:4a:44:8b:ce:2d:ff:d1:c0:ef:5a:0b:79:
64:6c:28:28:9c:3f:3c:fa:9c:e1:04:dd:e4:d8:fa:
6c:84:c2:1b:38:ec:de:68:f8:f8:0e:82:51:3a:fa:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B5:09:66:1F:E4:44:1B:52:C1:B7:E9:5B:CD:C6:79:1E:80:46:04
X509v3 Authority Key Identifier:
keyid:79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/X7UJZh_kRBtSwbfpW83GeR6ARgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.128.192.0/23
Signature Algorithm: sha256WithRSAEncryption
66:e9:a2:89:a8:1e:ea:f7:df:74:86:02:ed:fd:d7:e6:fb:fd:
31:70:d3:37:b5:15:5e:f4:55:a9:97:ee:50:30:82:80:f7:8c:
1a:55:a1:50:cd:0b:2a:4a:7f:41:be:58:63:46:8b:bb:c5:4a:
45:1f:da:06:d9:5f:6e:27:9e:34:46:f3:8c:a4:72:b8:5f:2f:
c9:8e:d5:1e:9d:08:7d:3c:80:df:2d:20:3c:cf:8d:89:83:fd:
01:1d:33:bc:2e:0e:a1:03:a4:77:98:d5:6f:22:52:7b:05:d7:
4d:9a:18:77:38:a3:39:c3:58:a7:c0:12:e7:c5:79:da:8e:27:
77:b7:4f:90:7e:31:d2:57:3f:b2:4b:65:11:f6:33:af:60:9a:
a7:3c:b0:c9:be:a0:11:74:a3:75:7b:98:a2:73:1e:5b:0a:8c:
2d:0f:67:6b:7b:bd:f4:6b:07:a7:ec:44:5f:61:a9:3c:3e:ba:
d4:83:ef:6a:13:79:52:f2:7b:81:c9:bd:60:f0:12:e1:05:ae:
f5:0e:ce:29:02:48:50:84:57:87:fc:c0:6e:4e:1f:86:36:bd:
1f:40:4e:61:d4:3e:65:63:14:9b:01:63:dc:fa:c7:7b:6c:99:
c5:a6:e5:28:a0:97:79:c9:f5:d9:2f:1d:f4:22:4e:46:08:bf:
50:17:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:27 2026 by rpki-client