
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa
File: c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa (raw, json)
Hash identifier: ac0VZploS/ch50uu+zR+hsk8EiWbeNJBis2RNPUO5ZM=
Subject key identifier: 73:CE:18:9E:1F:43:47:84:23:81:61:D0:09:C0:F7:26:71:CE:FF:CB
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0D95
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa
Signing time: Fri 22 Aug 2025 08:59:14 +0000
ROA not before: Fri 22 Aug 2025 08:59:14 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131588
IP address blocks: 2400:e480::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Oct 2025 22:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3477 (0xd95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Aug 22 08:59:14 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=73CE189E1F434784238161D009C0F72671CEFFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:b8:e8:06:2a:4c:c8:a8:ec:ac:24:c3:8c:
4b:a1:ec:fa:2b:8d:b1:5a:7a:7e:78:29:34:41:f8:
96:5a:3d:90:70:94:f2:8d:62:ff:b8:2d:d9:11:fb:
5a:00:56:ad:32:9b:b5:75:12:dd:cf:5e:11:f4:75:
5d:a9:6e:32:9b:7d:5e:8b:c1:3a:ed:b1:62:47:8f:
d3:11:ea:c6:42:b4:db:16:c9:17:04:bd:a2:76:b9:
68:40:ab:b9:6b:51:60:3a:f9:1f:39:87:a9:2d:d4:
0f:cb:b9:10:6d:f6:58:3d:05:89:e8:5e:da:14:49:
de:ed:30:8e:1f:e4:74:d8:13:b6:33:47:33:b5:88:
ff:6a:63:8b:ba:d4:e4:ed:7d:be:6d:ce:57:cb:35:
3c:43:41:cb:69:a1:14:de:0c:43:e8:17:64:ba:91:
75:90:a3:da:61:84:ab:91:fc:42:4e:2c:65:97:ad:
53:b3:7d:04:bd:f1:b2:53:d1:66:91:5c:19:14:c5:
e3:48:06:79:b8:68:04:db:73:64:46:b7:cd:0b:08:
61:41:5c:aa:a4:eb:f7:62:8f:1b:96:3d:1f:ca:a9:
7f:bc:29:8c:6f:d9:21:82:9b:d5:87:82:e8:2c:83:
47:e1:16:7f:bd:a5:b1:22:cf:09:ed:1a:bc:1b:de:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CE:18:9E:1F:43:47:84:23:81:61:D0:09:C0:F7:26:71:CE:FF:CB
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:e480::/32
Signature Algorithm: sha256WithRSAEncryption
34:c0:13:0a:65:c1:96:19:b9:53:3b:06:bf:bf:bd:bf:f4:ff:
51:cf:4f:21:48:74:64:8c:bf:03:3c:ea:72:39:13:0e:c1:9a:
d4:cb:aa:aa:2a:3f:bb:f1:b1:9b:fa:9f:6a:76:87:19:99:a4:
cf:09:e3:10:c5:0f:fe:5c:01:6b:01:ec:aa:1b:fa:c8:14:ad:
94:15:43:32:48:db:33:6e:6a:40:68:9c:1d:ca:04:f1:ab:a9:
08:63:83:6f:2f:98:00:f8:5a:82:63:03:a0:5f:40:72:e0:51:
c6:95:77:f6:a7:4e:8d:17:99:c3:75:83:2a:63:89:29:ab:f1:
ed:18:56:1b:08:6e:3b:43:fe:f2:cb:80:42:c2:2b:ee:ea:c8:
ba:58:71:e8:dd:25:bb:89:04:b1:57:3d:5c:59:c9:61:a9:9a:
3e:b4:33:4a:da:1f:8c:f2:43:b8:bb:97:0d:19:01:cb:16:77:
9a:92:0e:22:76:90:d8:9f:16:02:d1:20:ff:e3:55:39:92:a4:
43:10:94:6e:4a:6a:5f:32:d3:bd:95:7d:3b:0a:9a:90:fe:0d:
b0:49:30:95:8f:d0:99:5b:7e:40:6c:df:39:da:63:c2:61:e7:
a1:df:65:e2:75:7b:9f:df:d4:84:f3:43:1d:a1:ca:0d:54:48:
23:70:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:36:19 2025 by rpki-client