
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/E6hohibFbdDUjHnadQJZw9TfblU.roa
File: E6hohibFbdDUjHnadQJZw9TfblU.roa (raw, json)
Hash identifier: ajbecMlrNpQdFDlOHJamg/SuYNjOcUN0BJLwmtlG6ac=
Subject key identifier: 13:A8:68:86:26:C5:6D:D0:D4:8C:79:DA:75:02:59:C3:D4:DF:6E:55
Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E
Certificate serial: 0438
Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/E6hohibFbdDUjHnadQJZw9TfblU.roa
Signing time: Mon 27 Oct 2025 07:15:13 +0000
ROA not before: Mon 27 Oct 2025 07:15:13 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 140214
IP address blocks: 103.175.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 01:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040D968303B364F772A753578220D3537E16166E
Validity
Not Before: Oct 27 07:15:13 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=13A8688626C56DD0D48C79DA750259C3D4DF6E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:de:b2:f9:fd:72:ba:b0:75:fa:7d:0c:82:
e8:9c:94:6f:a1:14:09:b0:63:c1:5a:df:6a:04:81:
19:2f:04:af:ed:f8:21:29:32:99:32:fe:b8:86:6e:
6a:94:72:ba:d6:35:49:39:57:90:cf:c1:ae:7c:0d:
0e:c2:c8:e8:ea:5f:ff:a9:73:6c:cf:48:68:63:a3:
7c:57:3c:26:26:93:39:da:7f:9f:07:a0:76:cd:6c:
f5:c4:a5:f5:6c:d3:c6:ce:c4:bd:37:5e:25:79:94:
a4:2e:25:d9:af:63:c4:82:4e:8c:3f:d6:55:ed:a3:
37:09:8d:85:9a:88:20:a7:7b:d8:64:d9:5a:6e:68:
2e:14:5e:8b:ec:72:92:b3:2c:18:20:ff:79:ba:08:
03:2a:e1:a4:28:03:1b:cf:22:e1:aa:b5:52:33:18:
dc:0d:9a:0f:e4:cd:56:a3:21:76:ad:46:31:aa:5b:
75:7c:5a:1a:f4:a9:23:d1:b3:ee:f7:0f:52:96:36:
fb:38:e7:83:f1:63:05:52:de:bc:51:74:de:58:6d:
cb:72:bc:f0:d0:38:27:23:6b:ce:aa:6a:73:6e:5f:
6a:1c:3e:9d:7b:de:46:d6:47:b7:46:fb:6c:47:0b:
ec:c2:dc:b6:23:89:e2:be:18:82:40:2b:00:46:a9:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:68:86:26:C5:6D:D0:D4:8C:79:DA:75:02:59:C3:D4:DF:6E:55
X509v3 Authority Key Identifier:
keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/E6hohibFbdDUjHnadQJZw9TfblU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.255.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:0c:fd:f3:c7:e5:c8:76:59:77:92:a0:22:32:cd:36:02:9b:
cf:9b:e1:89:ab:7f:9d:cc:7d:bc:4f:7d:dc:a0:59:ce:2f:44:
4a:6a:ed:c0:5d:49:db:84:7b:14:8d:24:62:d7:c6:be:bd:23:
72:48:d9:9b:a4:8d:ff:ad:c2:74:07:05:73:18:0f:db:20:bf:
15:44:9b:0a:dc:a4:dc:ef:ed:a8:c3:11:30:21:ed:94:39:b4:
be:ed:c5:82:04:a3:25:08:5b:45:6c:82:27:6c:0d:31:53:7f:
d8:1b:6e:4b:96:c8:74:4e:33:4c:41:16:f4:d1:5d:f3:e5:e4:
66:73:c2:f0:65:21:4f:79:e0:ae:05:11:cf:d0:4b:32:61:e2:
18:e6:93:09:00:3f:38:e7:06:7b:57:ab:28:73:59:d2:58:fe:
84:c5:a2:3e:76:de:ec:f6:2b:6e:40:d0:f4:ed:30:98:3f:34:
38:96:1d:af:5a:24:2c:59:ac:56:d4:77:99:2a:5c:61:07:87:
0a:6e:fd:8d:cb:59:ab:75:62:33:49:7b:b1:13:ed:6c:ca:72:
14:9f:0d:e6:53:ea:f8:d5:f7:d5:03:fb:4f:ae:03:75:9d:a9:
5b:c1:ae:a9:6f:8c:e1:be:f1:b7:dc:fd:3b:e2:1d:74:dd:7b:
4c:a5:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:12:01 2025 by rpki-client