
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/LxPyhZIENNA6sxC1FkmmMEtpGrM.roa
File: LxPyhZIENNA6sxC1FkmmMEtpGrM.roa (raw, json)
Hash identifier: iFcqkly23JHwVUWv6SmUnQWGG7U5NYVMRs2clPmIo84=
Subject key identifier: 2F:13:F2:85:92:04:34:D0:3A:B3:10:B5:16:49:A6:30:4B:69:1A:B3
Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial: 0D96
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/LxPyhZIENNA6sxC1FkmmMEtpGrM.roa
Signing time: Wed 29 Oct 2025 06:03:32 +0000
ROA not before: Wed 29 Oct 2025 06:03:32 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 7483
IP address blocks: 202.148.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3478 (0xd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Validity
Not Before: Oct 29 06:03:32 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2F13F285920434D03AB310B51649A6304B691AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:1e:41:c1:62:d2:b0:e5:2e:9d:a8:61:5e:
4b:0d:e2:83:0e:c4:2f:91:eb:39:ef:5b:c9:9e:83:
c5:bc:41:f6:41:ea:63:80:00:7f:38:69:70:d0:eb:
bb:69:e6:65:a0:75:d4:79:7d:63:da:c2:dc:b2:8c:
a4:50:14:45:5f:d8:1b:3b:82:55:52:f9:78:83:b5:
18:2f:c1:31:60:fa:58:6f:06:f3:0c:a9:e5:14:5b:
13:c9:dc:ef:d8:2d:ba:15:dc:7d:44:f5:98:1a:0e:
cf:cf:02:68:34:18:2e:3f:20:df:69:77:da:a3:8c:
c7:09:0d:00:b5:4f:8b:ff:94:76:b6:ce:7d:bc:56:
c7:df:af:c1:3d:43:49:c4:ff:91:29:b8:5c:79:34:
ce:a2:52:c0:1f:26:b0:9f:24:7c:be:be:ec:8d:7f:
d6:0d:7b:8b:f4:cd:16:7b:14:ac:d6:08:3d:82:f8:
3c:6d:c6:3c:72:64:65:af:20:67:88:eb:e7:aa:ec:
9a:aa:f5:6f:46:56:94:ad:6e:9f:e7:4c:0a:af:20:
a3:ab:11:36:92:c7:4b:6e:80:92:18:4f:73:4d:fd:
72:4b:e2:47:17:31:a0:87:92:2b:5d:98:41:8e:ba:
66:c2:d2:da:48:63:38:0d:29:a1:10:47:da:1b:ec:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:F2:85:92:04:34:D0:3A:B3:10:B5:16:49:A6:30:4B:69:1A:B3
X509v3 Authority Key Identifier:
keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/LxPyhZIENNA6sxC1FkmmMEtpGrM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.148.216.0/23
Signature Algorithm: sha256WithRSAEncryption
54:38:d5:34:11:7a:b2:97:c1:e3:28:be:22:85:9c:23:cd:d7:
97:f0:72:ff:8a:db:ea:17:17:9a:b1:0d:80:07:8a:92:0b:4e:
b7:dd:f1:7e:e0:29:27:f3:dc:00:92:f0:b6:9f:a2:b2:b9:cc:
5c:a3:ae:1d:a6:63:c5:69:60:11:bf:73:b8:16:a8:7b:56:23:
4c:07:8b:7e:2d:73:36:39:47:ef:a6:5b:cf:a7:f5:a7:4d:dd:
81:80:f8:25:64:5a:f6:07:c7:93:41:7e:4e:4f:19:0b:93:ad:
66:ad:68:1c:2a:bc:c4:a5:be:7a:73:20:60:dc:f8:c2:b2:79:
85:b8:ac:e2:b0:ef:92:81:fb:70:ab:44:45:2f:59:5b:ff:9e:
ad:ea:bd:0b:a8:20:6b:b9:38:f1:0c:dc:b6:61:04:8b:b4:98:
bb:57:c6:56:e0:9a:10:5a:48:e7:cc:0e:bd:36:0d:5d:5f:2b:
bd:ad:eb:e8:19:61:f3:78:fe:11:41:2b:62:b5:f0:50:1a:32:
b0:d7:cd:8a:d6:36:1a:1f:56:30:7d:eb:85:1d:55:b4:5e:15:
54:44:ad:cd:2c:86:c6:1f:e1:64:73:fa:38:18:89:e8:e3:8c:
ac:06:80:e5:80:63:fd:24:74:ce:4c:e9:03:84:82:2d:42:a2:
7a:33:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:16:30 2025 by rpki-client