
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/VVbqlGmA_ek_QsoEHmuFJ_hL1C4.roa
File: VVbqlGmA_ek_QsoEHmuFJ_hL1C4.roa (raw, json)
Hash identifier: mc465NWIk7BAgpNQYFMh9PMdcYx/MBi79jxA0RgEMhk=
Subject key identifier: 55:56:EA:94:69:80:FD:E9:3F:42:CA:04:1E:6B:85:27:F8:4B:D4:2E
Certificate issuer: /CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
Certificate serial: 4C
Authority key identifier: 68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/VVbqlGmA_ek_QsoEHmuFJ_hL1C4.roa
Signing time: Wed 25 Feb 2026 06:44:56 +0000
ROA not before: Wed 25 Feb 2026 06:44:56 +0000
ROA not after: Wed 10 Feb 2027 15:30:20 +0000
asID: 215993
IP address blocks: 2402:4de0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 03:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
Validity
Not Before: Feb 25 06:44:56 2026 GMT
Not After : Feb 10 15:30:20 2027 GMT
Subject: CN=5556EA946980FDE93F42CA041E6B8527F84BD42E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:4c:a7:2b:b3:81:11:38:76:c4:87:93:81:
d5:55:b9:12:f2:42:d3:ff:05:f0:0f:f9:e3:2a:05:
63:b2:13:64:26:8c:46:83:2e:d3:6f:73:2e:bd:99:
e9:c7:c5:d6:85:83:72:b8:ab:83:04:59:7c:c9:24:
5a:13:9f:13:3f:cd:55:c5:37:fd:13:5b:56:d7:2a:
7c:12:2b:44:8a:a7:ae:5d:bc:93:ba:db:e6:0a:92:
c9:df:42:67:8d:f9:05:a8:62:ef:33:54:8e:08:99:
54:f4:24:5b:f2:b1:f8:d0:fd:79:49:5a:6b:a4:94:
cf:2e:e4:f3:1a:74:c9:dc:ae:14:31:c0:9c:3d:59:
5e:f4:ab:c8:9a:10:97:fc:e9:ff:fd:37:73:69:14:
5e:db:88:96:14:38:2a:e2:b7:ea:93:43:ce:b4:e7:
25:50:29:2e:d0:a8:b6:f1:35:bc:97:ab:02:8d:39:
32:13:54:10:47:02:c5:d0:9a:44:37:41:01:12:9c:
01:af:44:ec:13:02:da:63:bf:83:56:8f:3b:64:ac:
19:0b:bc:a3:84:35:f9:e6:41:29:1f:df:69:1a:fc:
cc:d7:2f:64:fd:66:e6:d4:d0:0d:97:13:36:ac:cb:
00:ec:43:28:51:6b:ac:09:d7:44:e7:64:91:a2:ef:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:56:EA:94:69:80:FD:E9:3F:42:CA:04:1E:6B:85:27:F8:4B:D4:2E
X509v3 Authority Key Identifier:
keyid:68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/VVbqlGmA_ek_QsoEHmuFJ_hL1C4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4de0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:89:5e:06:bb:cd:0c:1e:23:07:82:ea:d4:2b:ef:12:3a:79:
5e:43:8b:86:8e:f3:f2:e6:41:c5:1a:e7:c4:a4:91:a2:7b:53:
8a:27:34:07:c2:15:d7:50:48:90:a0:40:86:b2:ce:20:ff:83:
a4:09:e3:78:99:4f:0d:3e:49:fe:88:44:aa:5e:99:48:e4:b4:
63:b2:5d:a8:f8:62:41:dd:3a:62:4a:48:86:20:d5:d1:4b:eb:
70:70:a2:3e:21:21:8e:93:4f:97:b9:0a:98:60:c7:bc:0e:2c:
b3:f7:c4:34:46:fe:7e:dc:35:06:00:0c:66:8e:57:e9:d4:df:
7a:dd:9e:43:75:9d:f7:d9:18:7d:65:68:39:0f:23:c6:86:93:
30:f0:3f:c2:96:db:32:e3:d8:72:f5:ab:02:6c:65:70:86:d3:
de:8a:9d:01:b7:9e:a0:62:14:42:d3:e9:9b:bd:58:83:61:74:
be:d0:e6:d8:22:98:e5:49:b9:c5:42:69:08:c9:36:97:2a:0f:
37:5f:0e:e7:f3:28:b1:10:53:d3:46:d6:20:fd:f3:5c:3c:65:
c4:cd:2c:60:0c:1a:af:1c:60:12:ae:bd:47:28:bd:a6:ca:48:
26:4e:56:86:9b:24:d3:24:d1:f3:b7:a9:a8:3a:82:3e:9f:8b:
ed:15:4f:f9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2ODkz
QjdBMDIzNEQwRTZEQkY0MkVBNjA1NUE3MTQ1NjhCRkRGOEE1MB4XDTI2MDIyNTA2
NDQ1NloXDTI3MDIxMDE1MzAyMFowMzExMC8GA1UEAxMoNTU1NkVBOTQ2OTgwRkRF
OTNGNDJDQTA0MUU2Qjg1MjdGODRCRDQyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCSTKcrs4EROHbEh5OB1VW5EvJC0/8F8A/54yoFY7ITZCaMRoMu
029zLr2Z6cfF1oWDcrirgwRZfMkkWhOfEz/NVcU3/RNbVtcqfBIrRIqnrl28k7rb
5gqSyd9CZ435Bahi7zNUjgiZVPQkW/Kx+ND9eUlaa6SUzy7k8xp0ydyuFDHAnD1Z
XvSryJoQl/zp//03c2kUXtuIlhQ4KuK36pNDzrTnJVApLtCotvE1vJerAo05MhNU
EEcCxdCaRDdBARKcAa9E7BMC2mO/g1aPO2SsGQu8o4Q1+eZBKR/faRr8zNcvZP1m
5tTQDZcTNqzLAOxDKFFrrAnXROdkkaLvhMsCAwEAAaOCAe8wggHrMB0GA1UdDgQW
BBRVVuqUaYD96T9CygQea4Un+EvULjAfBgNVHSMEGDAWgBRok7egI00Obb9C6mBV
pxRWi/34pTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UVzEwMzMv
YUpPM29DTk5EbTJfUXVwZ1ZhY1VWb3Y5LUtVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9hSk8zb0NOTkRtMl9RdXBnVmFjVVZvdjktS1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UVzEwMzMvVlZicWxHbUFfZWtfUXNvRUht
dUZKX2hMMUM0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3
L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQC
TeAwDQYJKoZIhvcNAQELBQADggEBAHyJXga7zQweIweC6tQr7xI6eV5Di4aO8/Lm
QcUa58SkkaJ7U4onNAfCFddQSJCgQIayziD/g6QJ43iZTw0+Sf6IRKpemUjktGOy
Xaj4YkHdOmJKSIYg1dFL63Bwoj4hIY6TT5e5Cphgx7wOLLP3xDRG/n7cNQYADGaO
V+nU33rdnkN1nffZGH1laDkPI8aGkzDwP8KW2zLj2HL1qwJsZXCG096KnQG3nqBi
FELT6Zu9WINhdL7Q5tgimOVJucVCaQjJNpcqDzdfDufzKLEQU9NG1iD981w8ZcTN
LGAMGq8cYBKuvUcovabKSCZOVoabJNMk0fO3qag6gj6fi+0VT/k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:44 2026 by rpki-client