
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7AMiCYhXS9C-q4QqvNJ_S2ZH0U4.roa
File: 7AMiCYhXS9C-q4QqvNJ_S2ZH0U4.roa (raw, json)
Hash identifier: i3QAoxwk0YVFLs6vivuazvqN87OrK/Zgok/d5n2Mciw=
Subject key identifier: EC:03:22:09:88:57:4B:D0:BE:AB:84:2A:BC:D2:7F:4B:66:47:D1:4E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26C6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7AMiCYhXS9C-q4QqvNJ_S2ZH0U4.roa
Signing time: Fri 22 Aug 2025 08:43:14 +0000
ROA not before: Fri 22 Aug 2025 08:43:14 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24165
IP address blocks: 103.225.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9926 (0x26c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:14 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EC03220988574BD0BEAB842ABCD27F4B6647D14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:37:4c:2e:5d:55:af:b3:7d:4a:02:aa:52:
42:0f:a8:13:dd:55:32:40:da:dd:57:b7:76:f9:f5:
2b:d1:e3:9e:fb:f3:98:f3:d9:e1:f6:b5:6b:91:c5:
1a:f0:4a:71:d4:61:4b:b7:b5:74:91:77:87:a6:8c:
91:9f:4b:79:3b:a2:9c:74:d3:69:79:d8:58:42:d5:
dc:cf:64:d4:a1:f2:a4:e1:af:21:05:53:87:4c:9e:
9b:ce:bb:a6:ab:62:9d:61:ae:fe:2f:2b:e9:7b:1b:
8d:39:af:fa:42:4d:9d:1a:e1:89:27:8b:18:97:7e:
6f:2f:ad:6e:5a:07:fd:ef:76:65:c2:af:52:45:61:
98:f4:90:53:a2:80:49:53:ae:ee:fa:74:e5:a4:8c:
34:d5:ea:a6:28:15:7b:8a:ca:79:d0:ce:15:20:6a:
02:51:8a:73:1a:92:6b:de:ff:83:ed:8d:cf:8e:b7:
66:75:a5:60:05:14:4d:0f:d8:2b:a7:e0:8b:1a:95:
30:2b:83:70:aa:75:bc:b0:23:9b:2e:ee:90:bd:cf:
d3:3c:d8:ec:91:94:68:e2:9d:87:11:f2:09:79:3b:
45:dc:a7:53:18:95:bd:ef:eb:9a:85:a4:3e:0c:9f:
2a:73:22:16:bb:14:ab:5c:db:9d:11:c7:63:f9:af:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:22:09:88:57:4B:D0:BE:AB:84:2A:BC:D2:7F:4B:66:47:D1:4E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7AMiCYhXS9C-q4QqvNJ_S2ZH0U4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
44:7b:0e:4e:6f:75:3d:60:41:4f:8d:24:d8:27:d4:bc:6d:1b:
fd:ec:75:ac:cf:ba:74:e3:28:7f:b1:35:87:2d:f6:59:2f:69:
14:38:5e:24:eb:ea:42:91:3d:c8:52:78:f9:82:a9:47:5f:06:
86:e1:22:b3:94:0f:91:45:c6:6e:6a:7e:be:86:42:4b:87:8f:
5d:25:50:8a:5d:b7:20:c0:c0:54:2d:bd:ad:8e:de:b5:bb:e3:
1e:55:a3:15:29:06:ad:33:47:fe:6d:ee:c7:ae:de:a9:8f:39:
dd:c6:4a:2e:05:20:fd:81:79:c9:f3:f0:42:0d:e1:e7:66:88:
3d:ef:2c:e2:00:4e:bd:d6:b3:fa:18:ef:a9:4d:a5:a7:4a:16:
51:2b:ce:57:0d:3a:61:cd:07:9b:d8:2c:b5:32:fb:5c:41:90:
b8:d1:7a:67:bb:e2:6f:7e:e1:ef:25:c5:a4:fd:5b:25:84:3d:
a8:0c:e3:6e:4d:69:c9:bd:d0:c6:49:e6:24:1d:2b:a0:73:d3:
59:95:41:32:df:0d:e9:49:00:40:e3:57:72:26:73:5a:1b:c0:
63:44:ab:d5:4c:4e:05:11:7c:24:ad:38:a9:69:bf:e8:37:91:
42:02:6a:c4:4b:e6:d0:46:44:f9:e6:82:76:6e:41:69:3f:96:
47:87:92:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQzMTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVDMDMyMjA5ODg1NzRC
RDBCRUFCODQyQUJDRDI3RjRCNjY0N0QxNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+/jdMLl1Vr7N9SgKqUkIPqBPdVTJA2t1Xt3b59SvR457785jz
2eH2tWuRxRrwSnHUYUu3tXSRd4emjJGfS3k7opx002l52FhC1dzPZNSh8qThryEF
U4dMnpvOu6arYp1hrv4vK+l7G405r/pCTZ0a4YknixiXfm8vrW5aB/3vdmXCr1JF
YZj0kFOigElTru76dOWkjDTV6qYoFXuKynnQzhUgagJRinMakmve/4Ptjc+Ot2Z1
pWAFFE0P2Cun4IsalTArg3CqdbywI5su7pC9z9M82OyRlGjinYcR8gl5O0Xcp1MY
lb3v65qFpD4MnypzIha7FKtc250Rx2P5r11/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7AMiCYhXS9C+q4QqvNJ/S2ZH0U4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdBTWlDWWhYUzlDLXE0UXF2
TkpfUzJaSDBVNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
4QAwDQYJKoZIhvcNAQELBQADggEBAER7Dk5vdT1gQU+NJNgn1LxtG/3sdazPunTj
KH+xNYct9lkvaRQ4XiTr6kKRPchSePmCqUdfBobhIrOUD5FFxm5qfr6GQkuHj10l
UIpdtyDAwFQtva2O3rW74x5VoxUpBq0zR/5t7seu3qmPOd3GSi4FIP2Becnz8EIN
4edmiD3vLOIATr3Ws/oY76lNpadKFlErzlcNOmHNB5vYLLUy+1xBkLjReme74m9+
4e8lxaT9WyWEPagM425Nacm90MZJ5iQdK6Bz01mVQTLfDelJAEDjV3Imc1obwGNE
q9VMTgURfCStOKlpv+g3kUICasRL5tBGRPnmgnZuQWk/lkeHkjE=
-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:41 2025 by rpki-client