
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/9bdvzNtxJroURAqmtnTtMDcywaw.roa
File: 9bdvzNtxJroURAqmtnTtMDcywaw.roa (raw, json)
Hash identifier: aiDh8liXCefG1qZ5Rw/TnoadqG7H49y4w8Ut6v6hkAg=
Subject key identifier: F5:B7:6F:CC:DB:71:26:BA:14:44:0A:A6:B6:74:ED:30:37:32:C1:AC
Certificate issuer: /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
Certificate serial: 052E
Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/9bdvzNtxJroURAqmtnTtMDcywaw.roa
Signing time: Wed 28 Jan 2026 03:39:16 +0000
ROA not before: Wed 28 Jan 2026 03:39:16 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 152624
IP address blocks: 165.99.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 06:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
Validity
Not Before: Jan 28 03:39:16 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=F5B76FCCDB7126BA14440AA6B674ED303732C1AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:24:2b:a5:5e:90:4c:18:49:59:1d:9d:5b:
7a:b2:db:9e:25:61:2c:18:5f:a6:c7:22:20:3a:89:
d6:56:c5:37:33:e5:24:2e:94:5e:0d:55:d8:b9:ae:
59:52:69:65:60:d4:8c:b7:3f:5e:f3:74:ff:46:c8:
b4:cd:3c:66:03:41:4f:70:ad:74:a1:dc:83:79:fe:
4c:ae:48:79:6c:c0:51:0b:c0:63:0c:70:79:a2:ae:
a2:24:d0:15:85:4a:2c:6f:71:86:fb:cf:92:72:a1:
c1:0e:93:b0:5b:6e:e3:12:5d:14:fa:a1:5e:23:c1:
fe:7f:5a:06:67:aa:25:c3:b3:9a:9c:d6:ff:80:40:
4a:0b:1e:32:bd:d2:2d:e3:be:2f:13:72:be:65:0c:
e5:9c:8a:d5:d1:9d:41:73:80:ff:ec:05:ed:90:b1:
5a:ff:47:3a:b7:3e:06:15:cf:ae:6c:00:cf:ef:30:
0d:18:26:03:ba:74:64:95:bb:0a:63:47:cb:c4:95:
ca:b3:92:44:e1:4a:7b:88:5e:48:8c:e1:9f:0c:4e:
92:d0:67:fc:cc:de:d7:6d:9a:b9:03:6a:d3:ef:de:
2b:d5:39:cd:ce:2a:5c:90:59:ba:ff:07:6f:c5:00:
30:ca:0e:88:03:6a:77:16:b4:64:70:58:f1:76:0a:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B7:6F:CC:DB:71:26:BA:14:44:0A:A6:B6:74:ED:30:37:32:C1:AC
X509v3 Authority Key Identifier:
keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/9bdvzNtxJroURAqmtnTtMDcywaw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.66.0/24
Signature Algorithm: sha256WithRSAEncryption
23:34:bd:fc:28:2f:4b:fa:c8:08:89:88:0f:ac:9b:5e:75:6b:
71:b8:26:f9:2f:a6:92:63:89:4b:b2:fe:d7:3e:54:29:a4:4a:
8d:61:6d:1a:e2:5b:27:df:30:f2:4f:d0:95:1a:15:a9:dc:f6:
23:a3:e6:38:70:00:de:89:3a:1c:bd:4d:0a:91:93:98:3f:a9:
63:5f:a3:21:ed:e1:26:26:8a:1b:9e:60:55:22:a1:b8:4b:70:
8d:38:c7:e9:c4:2e:d5:91:aa:cb:c2:e0:18:76:dc:5e:0e:28:
de:fe:c9:9c:4d:f8:88:1b:79:3e:14:b1:11:80:fe:9d:6e:7b:
73:28:17:0c:15:77:b5:37:02:31:d0:8e:d4:ba:0d:fb:5a:a1:
fa:69:ff:d3:8b:e5:6b:57:9c:fe:47:0b:47:40:c4:dd:0e:a6:
f8:67:2e:06:3a:41:75:0d:06:1e:fd:79:56:68:ec:b9:0f:c0:
d2:14:d3:34:2b:56:b3:5f:56:a4:4d:f1:a2:7c:d4:1c:c0:f7:
9b:97:c2:09:16:00:7c:08:a3:b7:eb:47:13:97:66:da:ec:15:
69:0a:5e:b7:37:09:fe:64:e9:60:a7:4d:15:2a:96:4f:e0:4a:
68:81:21:02:93:25:03:3e:3d:83:8e:ae:2b:81:a4:e3:dc:ad:
75:01:0b:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlD
NjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5RDAeFw0yNjAxMjgw
MzM5MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY1Qjc2RkNDREI3MTI2
QkExNDQ0MEFBNkI2NzRFRDMwMzczMkMxQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2SCQrpV6QTBhJWR2dW3qy254lYSwYX6bHIiA6idZWxTcz5SQu
lF4NVdi5rllSaWVg1Iy3P17zdP9GyLTNPGYDQU9wrXSh3IN5/kyuSHlswFELwGMM
cHmirqIk0BWFSixvcYb7z5JyocEOk7BbbuMSXRT6oV4jwf5/WgZnqiXDs5qc1v+A
QEoLHjK90i3jvi8Tcr5lDOWcitXRnUFzgP/sBe2QsVr/Rzq3PgYVz65sAM/vMA0Y
JgO6dGSVuwpjR8vElcqzkkThSnuIXkiM4Z8MTpLQZ/zM3tdtmrkDatPv3ivVOc3O
KlyQWbr/B2/FADDKDogDancWtGRwWPF2CokJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9bdvzNtxJroURAqmtnTtMDcywawwHwYDVR0jBBgwFoAU+cYtwWoyWUFWZBQs
knjF3cTYKZ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlP
Ly1jWXR3V295V1VGV1pCUXNrbmpGM2NUWUtaMC5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvLWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLzliZHZ6TnR4SnJvVVJBcW10
blR0TURjeXdhdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACl
Y0IwDQYJKoZIhvcNAQELBQADggEBACM0vfwoL0v6yAiJiA+sm151a3G4JvkvppJj
iUuy/tc+VCmkSo1hbRriWyffMPJP0JUaFanc9iOj5jhwAN6JOhy9TQqRk5g/qWNf
oyHt4SYmihueYFUiobhLcI04x+nELtWRqsvC4Bh23F4OKN7+yZxN+IgbeT4UsRGA
/p1ue3MoFwwVd7U3AjHQjtS6Dftaofpp/9OL5WtXnP5HC0dAxN0OpvhnLgY6QXUN
Bh79eVZo7LkPwNIU0zQrVrNfVqRN8aJ81BzA95uXwgkWAHwIo7frRxOXZtrsFWkK
Xrc3Cf5k6WCnTRUqlk/gSmiBIQKTJQM+PYOOriuBpOPcrXUBC3o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:21 2026 by rpki-client