
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qzfC8xXw13QoZvAeirHoMoMjF_w.roa
File: qzfC8xXw13QoZvAeirHoMoMjF_w.roa (raw, json)
Hash identifier: +hd+V4pZkluuElVHK+JxYxJyAfdrWEVCrNirnInG1o8=
Subject key identifier: AB:37:C2:F3:15:F0:D7:74:28:66:F0:1E:8A:B1:E8:32:83:23:17:FC
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0F12
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qzfC8xXw13QoZvAeirHoMoMjF_w.roa
Signing time: Fri 22 Aug 2025 08:50:06 +0000
ROA not before: Fri 22 Aug 2025 08:50:06 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18424
IP address blocks: 103.30.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 11:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3858 (0xf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Aug 22 08:50:06 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=AB37C2F315F0D7742866F01E8AB1E832832317FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:6a:bc:74:51:19:a3:a6:cd:c2:d1:e3:1e:
40:a0:4c:64:42:8d:8f:db:29:98:c0:8d:d1:42:b5:
5e:e3:7b:20:b2:80:9d:00:8c:0e:86:cf:ff:e9:a2:
5b:28:25:77:19:78:8b:95:9e:25:6a:e4:66:0b:62:
33:4b:24:0b:fe:b1:ca:cc:33:5f:2a:c3:22:74:7c:
7f:dd:4c:ca:1c:fc:b0:0b:d0:48:03:ac:58:87:38:
8a:ee:ce:4e:b6:ac:18:de:4a:c6:c6:4f:d5:4a:03:
49:2e:e6:ae:00:64:ff:20:c1:21:3c:96:5e:88:c3:
c2:11:45:fe:9c:74:2c:30:8e:1f:04:f4:c9:de:93:
73:fa:e3:a9:84:13:9a:5f:cf:63:c8:9e:53:0f:20:
8f:35:2c:d8:44:2e:e8:bf:a2:fa:80:2b:04:c3:61:
8d:32:94:45:e0:54:27:b6:71:86:b9:a3:fc:f4:4b:
3d:9f:9c:2f:f2:8d:9b:3d:8d:08:c6:5d:9c:f0:ae:
bf:32:ff:c7:49:6d:cd:35:c6:ef:fc:6f:b5:cf:5e:
81:13:04:50:ec:92:d6:62:f8:29:00:e8:52:5b:b3:
1c:94:c8:19:50:77:f0:e5:46:65:33:a5:57:3c:d0:
13:b6:b3:52:46:1e:a2:11:1c:1a:70:78:0a:16:b7:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:37:C2:F3:15:F0:D7:74:28:66:F0:1E:8A:B1:E8:32:83:23:17:FC
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qzfC8xXw13QoZvAeirHoMoMjF_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:94:d6:0d:38:d7:c7:bd:50:2e:8a:ea:88:c3:c7:f1:63:e1:
e8:e2:fc:de:6c:24:1a:14:f1:e9:5c:46:7a:61:52:63:cf:0b:
83:85:48:15:fe:a4:dc:25:6f:b1:c8:37:5c:5d:28:bd:11:8a:
4a:de:d7:c2:98:e4:30:be:1c:4a:24:39:83:dc:62:21:41:da:
61:25:2b:cf:98:33:44:70:aa:8f:fe:f3:42:83:37:74:a1:8c:
f9:8f:49:dd:18:0e:45:47:4b:6d:5c:0f:4f:86:81:46:e6:44:
3a:95:1a:da:04:f9:f5:84:81:df:27:6a:09:0e:40:3a:5c:2b:
4c:83:7a:08:4a:87:02:79:ee:9b:66:38:85:71:5f:60:57:e4:
83:c5:7a:fd:3a:e3:63:49:fd:2d:be:28:6c:79:d8:91:91:78:
24:cb:06:1d:be:2c:8c:93:f6:19:50:4b:21:c0:ed:8b:a1:9f:
c6:59:27:b2:78:1b:18:70:a4:11:9b:33:b2:b8:e1:88:13:30:
48:00:54:bc:37:18:78:13:e0:c1:5d:8b:95:b0:f6:4d:19:4c:
37:c2:e2:7b:ee:91:3f:cf:59:c9:ea:89:ae:bc:8d:8f:94:51:
25:3c:2a:5a:07:e9:49:e9:4a:cd:9e:fa:45:2c:51:f1:35:81:
8b:87:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:09:14 2025 by rpki-client