
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa
File: xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa (raw, json)
Hash identifier: s553w3qgM52MCTRpVmvmoICABdpOVlTElpSMah7PPdA=
Subject key identifier: C5:DC:3F:05:EA:18:C0:D8:0B:AF:D5:2D:1B:32:7B:1F:A4:EE:74:12
Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
Certificate serial: 056A
Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa
Signing time: Mon 03 Nov 2025 08:41:40 +0000
ROA not before: Mon 03 Nov 2025 08:41:40 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 16509
IP address blocks: 103.196.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
Validity
Not Before: Nov 3 08:41:40 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C5DC3F05EA18C0D80BAFD52D1B327B1FA4EE7412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:7b:ae:8e:ad:55:0d:1b:62:dc:b8:af:49:
b8:f0:14:1e:c7:b5:80:93:88:d1:aa:30:79:d1:39:
43:09:dd:6a:de:af:b0:56:ff:17:ae:26:47:0b:04:
a8:44:3e:9a:92:76:60:66:3f:66:f7:ab:d1:74:52:
59:2d:22:d0:cd:32:f4:76:4c:e3:8f:2f:eb:37:a6:
04:ea:11:33:e3:47:0e:ea:70:57:15:c1:32:60:50:
df:10:3b:ba:64:e7:a7:3e:d5:d0:c8:9a:51:25:f6:
c6:17:3c:f2:e4:a6:01:cc:77:ef:ab:af:c2:eb:54:
3b:dc:d1:f9:d8:9c:92:7f:66:31:b7:37:97:86:09:
0e:f8:a7:60:8e:a2:06:47:c0:b1:df:29:ce:7d:1b:
54:54:e5:55:ee:03:f7:bb:2c:a8:bd:32:ae:55:eb:
36:56:2f:13:ad:2e:bf:93:ed:35:91:fd:cb:82:ce:
d5:ee:d1:05:c7:a0:83:20:fa:52:8c:1c:72:cb:10:
f0:31:ec:39:eb:39:3c:c9:11:b6:2f:be:ff:ac:49:
0e:09:c0:56:f3:32:aa:23:45:7e:4d:db:ae:b2:82:
9a:bf:3f:b5:bb:41:96:e2:e5:ca:52:85:a4:17:58:
93:57:78:6c:27:1f:fe:c9:7a:84:66:2d:07:97:18:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:3F:05:EA:18:C0:D8:0B:AF:D5:2D:1B:32:7B:1F:A4:EE:74:12
X509v3 Authority Key Identifier:
keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.196.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:bc:09:63:fa:12:21:58:60:99:46:11:2c:5d:8c:5a:ba:5f:
e4:3f:3e:d0:0f:f3:74:b7:2d:aa:08:3a:b2:f9:b1:d2:46:79:
46:22:58:f6:ec:ea:51:cb:c9:91:15:44:19:52:36:cc:34:ee:
78:51:1b:4b:1a:40:3f:9b:b1:5d:8b:ae:2b:71:60:c3:82:47:
79:62:8a:51:d5:2e:50:43:ad:07:7c:3d:44:a6:1d:de:a9:d1:
70:44:cb:1b:84:4f:4a:23:7b:bf:0f:1f:39:80:f6:fc:f1:e3:
e7:80:b4:3c:cc:f9:6e:0b:df:7f:f0:88:83:a0:e7:37:b9:0d:
0a:05:cf:54:80:3a:e5:0e:f2:ea:e8:01:91:2f:42:0d:14:bd:
14:ae:85:48:2b:48:4d:2f:d0:19:ee:98:7d:11:cd:23:5b:12:
19:bf:84:aa:f6:b9:25:b3:22:59:6e:26:3d:79:96:4c:98:12:
05:aa:2f:e3:c8:1c:82:ff:d1:d3:70:77:3d:5e:d5:e3:30:d3:
ff:6d:54:e9:95:43:52:c8:92:75:5b:18:9b:80:16:a0:1e:c6:
2a:0e:5d:53:63:24:e3:e2:77:5e:9e:a4:a6:ee:a5:9b:f1:f9:
37:9e:13:f4:52:fd:51:ef:10:32:44:f7:4a:f4:86:4e:30:dc:
d8:85:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:16 2025 by rpki-client