
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/FI_l4-13QP9OGl6Mb5mklqo6scA.roa
File: FI_l4-13QP9OGl6Mb5mklqo6scA.roa (raw, json)
Hash identifier: 6XXI7Jhd9lXAImf1MeS6P7d+O2EVvcvFLkcH2BaNDoU=
Subject key identifier: 14:8F:E5:E3:ED:77:40:FF:4E:1A:5E:8C:6F:99:A4:96:AA:3A:B1:C0
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 01F4
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/FI_l4-13QP9OGl6Mb5mklqo6scA.roa
Signing time: Tue 24 Mar 2026 14:10:01 +0000
ROA not before: Tue 24 Mar 2026 14:10:01 +0000
ROA not after: Wed 30 Dec 2026 15:30:20 +0000
asID: 152612
IP address blocks: 2402:43e0:301::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 06:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: Mar 24 14:10:01 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=148FE5E3ED7740FF4E1A5E8C6F99A496AA3AB1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:e7:25:bb:69:c5:9f:75:9b:21:91:c5:1a:
ef:44:db:75:bb:69:52:d4:56:32:73:04:ad:fc:7b:
5f:2b:6d:9c:b4:64:bb:52:b4:9a:56:33:ec:b5:6c:
1b:d0:ab:4b:30:e0:1a:09:14:2e:e2:ae:f1:99:bf:
b1:5b:7d:e9:f0:a0:23:1e:c7:b9:39:79:5b:58:68:
81:14:68:78:ba:ab:ea:80:12:dc:90:cb:5b:c3:ea:
c7:54:3b:54:cc:48:1d:10:27:90:2f:57:f9:a8:49:
45:96:33:c8:5a:cb:7a:29:ad:0c:ac:db:14:26:31:
df:ca:45:74:93:45:db:30:e5:c1:d6:18:e9:58:58:
9b:db:7e:1e:b3:5b:fd:e8:59:14:5f:e0:83:1b:b2:
30:54:aa:d7:39:32:e7:9a:f7:56:3b:de:f0:0b:1e:
e3:9f:5d:f8:ac:3a:af:41:31:b3:36:14:9b:09:5c:
fc:f0:98:5e:82:10:10:1c:34:06:e1:f0:e5:6f:18:
1c:47:c3:dd:b5:bf:dc:89:29:fc:30:84:49:e5:98:
cb:0a:27:04:71:0d:80:97:be:55:98:18:51:2f:43:
8a:be:ba:e9:c6:2d:72:ba:f7:0e:03:6e:18:69:bf:
58:da:25:3d:37:af:61:a0:f3:5b:b6:f1:97:bb:d5:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:E5:E3:ED:77:40:FF:4E:1A:5E:8C:6F:99:A4:96:AA:3A:B1:C0
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/FI_l4-13QP9OGl6Mb5mklqo6scA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:301::/48
Signature Algorithm: sha256WithRSAEncryption
61:16:31:80:24:7a:dd:ae:a4:e6:cc:64:95:3f:e6:b7:36:bc:
0e:59:b8:62:f5:b9:0e:1f:7b:ff:41:a7:a7:74:51:73:80:c5:
99:de:39:18:69:67:2f:66:57:99:e1:06:c8:86:7d:be:5b:75:
97:63:f8:96:62:87:49:e1:eb:a8:0c:44:4b:53:09:9a:c7:4b:
ba:a4:f8:94:b6:c6:9e:38:ed:7e:01:16:44:ca:92:1f:af:d0:
48:1e:86:b8:b4:d8:2b:4f:88:c0:6b:67:37:a3:89:3d:42:47:
86:d5:8f:41:92:d7:73:2d:45:a3:21:00:3a:8a:84:80:94:8c:
8c:e0:3c:a9:4e:2c:99:2a:ee:99:8a:ca:9a:0c:12:73:29:42:
a8:d6:09:76:1d:63:9e:35:0e:f6:64:33:9e:67:6e:4d:b1:10:
68:f0:36:a8:1c:15:c4:6f:e6:ed:80:81:fd:77:5e:e4:ea:8b:
7b:54:be:29:74:c6:96:46:de:94:8c:b5:78:96:c9:32:c1:12:
95:2b:52:64:c1:a7:8f:29:63:a2:80:68:c4:eb:0e:62:22:b9:
b5:ad:f5:be:e4:92:39:82:48:fa:85:08:9f:0e:07:49:08:a1:
a3:f2:3b:44:a8:0d:bd:e0:1e:47:05:dc:1f:de:73:62:ba:eb:
d2:44:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:17:29 2026 by rpki-client