
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fO6FcTv-X4P1RUCT_UnV_cuXthA.roa
File: fO6FcTv-X4P1RUCT_UnV_cuXthA.roa (raw, json)
Hash identifier: e7twuWlXTWBbDLXXNqy53GQSzi+V13eJY36lz5/UfwU=
Subject key identifier: 7C:EE:85:71:3B:FE:5F:83:F5:45:40:93:FD:49:D5:FD:CB:97:B6:10
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 1072
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fO6FcTv-X4P1RUCT_UnV_cuXthA.roa
Signing time: Fri 22 Aug 2025 08:54:16 +0000
ROA not before: Fri 22 Aug 2025 08:54:16 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9919
IP address blocks: 192.72.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4210 (0x1072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Aug 22 08:54:16 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7CEE85713BFE5F83F5454093FD49D5FDCB97B610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:5b:ea:dd:65:de:6a:04:40:f6:69:ca:28:
d4:b4:29:ef:47:a0:00:b3:41:70:34:64:75:1d:33:
af:92:b8:ee:c2:ce:b3:2d:ad:24:e6:75:9b:a4:ba:
f1:e2:d7:0f:fe:59:9a:9d:80:53:07:24:90:53:33:
d7:bb:23:63:b9:82:59:33:e3:38:ea:ee:d2:29:12:
8c:5a:0e:bb:c0:1e:10:16:7b:5d:ea:52:00:dd:58:
53:ba:59:f6:39:84:ab:d0:d6:1b:a8:26:80:61:2b:
b3:86:82:a1:ed:6a:d5:19:9c:9a:8a:12:36:a4:15:
58:50:f8:29:e2:67:13:e9:e7:80:b2:43:c8:97:83:
ec:2f:0d:7e:6a:04:f4:9c:aa:04:66:35:cc:a4:b0:
76:d0:38:9d:a8:e8:a7:b1:cf:79:dd:66:b7:ce:53:
f9:34:21:01:0a:58:43:72:9c:9b:db:38:22:85:a8:
81:1f:61:2b:4f:93:06:7d:9d:17:d6:b3:63:94:8d:
90:e2:4c:e6:43:69:b0:cb:42:98:f6:7d:e9:ef:4d:
5e:04:5f:92:16:9b:ce:4c:58:a1:55:9b:c9:6e:97:
9f:14:ae:c2:40:b7:b9:64:b8:99:30:31:a6:4d:84:
73:b6:e3:09:fb:65:77:45:af:f6:27:90:db:42:04:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:85:71:3B:FE:5F:83:F5:45:40:93:FD:49:D5:FD:CB:97:B6:10
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fO6FcTv-X4P1RUCT_UnV_cuXthA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.64.0/18
Signature Algorithm: sha256WithRSAEncryption
14:e7:ba:38:90:06:34:82:5f:06:d5:6e:3c:5a:99:37:f5:3d:
3d:ad:a8:c9:ff:5b:80:33:68:b8:40:88:a3:42:82:c5:fc:e9:
14:09:9a:6f:5e:2a:f0:21:ea:04:91:a7:b1:83:c9:d0:ec:0c:
d2:1f:f1:d8:02:66:09:bb:af:42:47:e8:6a:bf:78:3b:61:56:
3f:30:1c:6b:58:4c:66:9d:1a:0b:61:da:47:b0:83:29:1b:83:
ad:22:99:c4:c5:bc:f1:2c:67:71:ae:06:60:97:42:ed:4a:b1:
05:27:0b:61:46:b5:4d:0a:59:c7:3a:17:b7:16:a2:59:18:02:
d7:86:9c:2f:00:6d:27:2a:73:df:68:1b:d8:6e:29:3f:96:89:
66:55:d8:4a:96:f2:22:e7:91:84:1d:ad:5b:3c:6f:a8:c7:1c:
29:fc:19:68:58:27:b9:8a:c9:9d:fe:c3:45:ff:4a:9d:44:53:
6c:72:9d:88:7d:a0:9a:85:ed:47:82:5c:c4:b0:5c:df:6c:8b:
8a:4e:08:25:8b:bd:a1:bb:90:03:2a:13:92:f0:6f:8c:57:bd:
f7:ce:90:1f:7b:2e:d0:09:7a:d1:21:91:ae:48:14:37:8b:19:
3e:14:d3:c3:90:ac:ad:d2:6e:12:c0:5f:50:07:0b:a1:19:17:
18:53:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:21:07 2025 by rpki-client