
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/0-awy_8w4O6KARzR5fDujPDfF5A.roa
File: 0-awy_8w4O6KARzR5fDujPDfF5A.roa (raw, json)
Hash identifier: 5WdSHPlqZUPxCtiJHluPiITdZeXgddc8vHtpMDKVaH8=
Subject key identifier: D3:E6:B0:CB:FF:30:E0:EE:8A:01:1C:D1:E5:F0:EE:8C:F0:DF:17:90
Certificate issuer: /CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
Certificate serial: 03
Authority key identifier: 68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/0-awy_8w4O6KARzR5fDujPDfF5A.roa
Signing time: Fri 13 Feb 2026 01:54:02 +0000
ROA not before: Fri 13 Feb 2026 01:54:02 +0000
ROA not after: Wed 10 Feb 2027 15:30:20 +0000
asID: 142046
IP address blocks: 2402:4de0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Mar 2026 22:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
Validity
Not Before: Feb 13 01:54:02 2026 GMT
Not After : Feb 10 15:30:20 2027 GMT
Subject: CN=D3E6B0CBFF30E0EE8A011CD1E5F0EE8CF0DF1790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:79:fd:0f:00:5a:a2:a9:4c:a8:9a:47:62:
8d:1f:da:62:3c:f6:b7:62:6e:94:0e:65:28:d6:10:
df:4a:27:48:1f:e8:ec:73:9c:6a:f8:78:cb:94:ff:
36:19:7d:32:09:d7:c1:ca:69:f0:5f:04:27:25:c0:
28:23:c9:1f:7a:83:5d:46:72:ec:8e:38:8b:ad:3a:
fc:ca:46:d4:b5:b4:46:00:c2:c0:b6:a3:4e:6f:48:
b7:97:42:64:11:f1:5d:63:17:6b:b4:24:d2:eb:8d:
b1:b2:4f:77:69:c8:7d:4e:2c:df:08:31:04:6b:42:
15:0e:09:3c:33:ca:66:52:b9:64:52:b4:5b:f9:c5:
d7:b9:e6:94:7f:9c:2d:09:8d:48:b5:d0:52:ec:2a:
9b:64:6e:da:8c:07:0d:4e:d6:18:d2:04:46:90:3b:
95:f9:b8:24:99:00:55:f4:ba:a8:cc:b5:78:8b:bf:
97:75:a5:f7:8c:c3:97:a5:82:69:07:84:bc:a3:10:
ed:e5:d3:6c:f0:47:91:53:b8:11:9a:d6:f3:36:6a:
5f:c2:60:41:dc:da:e5:dc:ec:15:81:ba:4b:13:b0:
9f:08:90:06:a4:32:2d:d3:29:61:b7:3c:fc:c3:e5:
fd:4c:f8:be:db:8b:fe:bd:3b:31:7d:40:09:8f:4e:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:B0:CB:FF:30:E0:EE:8A:01:1C:D1:E5:F0:EE:8C:F0:DF:17:90
X509v3 Authority Key Identifier:
keyid:68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/0-awy_8w4O6KARzR5fDujPDfF5A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4de0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:95:00:8a:db:96:1c:28:05:5a:4b:f3:27:b1:f1:b2:a0:2a:
c1:b9:e5:08:bd:ad:3b:4c:40:ef:f3:76:f6:65:e6:eb:77:73:
49:9b:4f:80:34:5c:71:d7:cf:eb:4c:55:34:ff:8e:fd:c3:91:
45:4c:e8:9e:f8:c4:5d:0b:0a:7f:20:ca:0b:de:42:64:87:e8:
06:3a:1f:fd:56:44:27:03:5a:36:a3:f8:8d:fd:f6:29:4d:b6:
b2:11:7a:8e:71:4a:76:32:34:c0:aa:b5:8c:1d:be:68:1f:cd:
47:02:34:78:92:b9:6c:93:2f:73:26:93:13:55:d8:bc:91:6a:
31:91:e2:0e:0d:7e:25:a9:b4:0b:61:66:49:a2:aa:e9:3a:93:
2f:a3:ed:cb:e7:a1:ff:0b:87:90:c5:5d:06:0c:9b:01:d6:99:
1c:60:f0:fe:fa:f9:c9:21:12:48:a1:67:4e:40:2e:91:18:2d:
49:b5:71:f6:26:90:74:2a:0a:b8:2e:96:32:f3:81:c4:87:bb:
7a:ce:26:a3:86:9c:b7:34:a8:e2:2f:7c:10:16:79:f7:de:50:
e7:76:32:0f:e7:0f:b7:c0:42:e9:b3:c8:a4:e1:b2:c3:39:36:
ae:7c:84:55:65:ab:73:24:3f:7f:11:e5:11:1d:a7:25:9b:80:
0c:ec:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:20 2026 by rpki-client