
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa
File: Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa (raw, json)
Hash identifier: U8JHXRKCsP5eiE6VpYaivJ6sXYA5X2LQdS0ox60Olgo=
Subject key identifier: 0D:CE:95:C9:AE:60:89:97:8B:CB:0D:18:D3:73:7A:6E:46:EA:B2:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 261B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa
Signing time: Fri 22 Aug 2025 08:42:35 +0000
ROA not before: Fri 22 Aug 2025 08:42:35 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 180.218.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9755 (0x261b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:35 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=0DCE95C9AE6089978BCB0D18D3737A6E46EAB24D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:f6:90:4c:26:a5:95:58:af:6d:d8:23:ab:
59:7c:2e:cb:50:6b:d7:62:12:f7:89:05:f2:22:1a:
46:d0:cb:3a:04:7e:74:60:5c:92:18:9c:45:05:89:
0d:bf:60:76:9e:ce:0e:65:a3:8a:23:d3:ad:72:d7:
69:f8:77:99:cd:0e:0d:e1:fc:55:ab:82:c3:86:bd:
0c:c1:75:a5:d8:95:a0:85:aa:44:84:62:93:50:71:
4c:c9:5c:1e:fe:23:09:6b:94:66:32:e6:96:de:51:
d3:3e:2f:23:ea:1a:c5:59:67:24:51:fe:0d:1f:48:
b8:ba:f1:da:6b:e9:60:6b:bb:63:04:17:e6:32:16:
ee:57:d9:e9:87:d5:8c:9f:0f:fe:4b:48:ff:bc:f2:
1d:ea:b1:13:e2:9c:9d:31:39:db:ad:52:f5:ea:f8:
71:73:ee:dd:7e:b0:13:aa:47:7e:98:a5:e8:05:77:
32:9a:82:90:f9:19:d4:24:e1:a5:85:91:ed:c9:ba:
10:ed:f5:b4:f6:3f:fd:1f:e0:a2:d0:09:2e:50:19:
a0:7b:84:91:cf:27:dd:a7:e5:ed:09:46:72:87:0d:
1a:3a:a8:ea:76:93:45:e0:19:4d:6a:e6:a0:cf:64:
79:c7:b2:5a:cf:49:55:56:9e:1e:fb:a1:41:12:9e:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:95:C9:AE:60:89:97:8B:CB:0D:18:D3:73:7A:6E:46:EA:B2:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/22
Signature Algorithm: sha256WithRSAEncryption
92:48:1d:ff:47:05:42:87:ea:09:66:cc:1f:09:41:30:75:06:
ec:d6:75:29:e5:c8:3d:d4:52:d9:93:fe:d2:62:ee:ee:03:66:
ff:ba:5d:32:f5:c8:a3:bc:74:73:de:7e:e0:74:20:ec:f8:7d:
cb:ee:7f:e3:5a:b5:d0:1a:ef:d5:e0:7f:e9:24:04:90:23:43:
4a:6c:5c:61:f6:9f:98:50:49:c2:91:f9:d9:57:02:42:da:16:
01:09:11:a3:68:81:be:b9:47:73:9e:df:83:7e:53:84:54:d6:
54:b7:f0:82:83:e2:a1:ff:65:77:49:ef:d3:5b:c0:29:f7:6f:
5b:67:e8:9d:36:5c:4d:53:31:47:f1:c2:40:04:11:d6:26:5c:
3a:be:62:84:d6:88:26:88:30:2f:07:2b:56:d8:e4:94:d1:73:
91:c4:fe:97:6d:47:5c:74:e3:e6:b1:7e:da:21:fc:1d:fa:21:
38:c8:da:f5:52:49:4e:dc:16:46:ef:4b:72:fe:aa:bf:3f:4a:
e9:21:8d:21:22:a1:48:0e:35:87:b7:ca:f3:a3:68:e8:50:c0:
0c:f8:8d:7e:8a:a2:14:7f:b7:45:6a:08:59:71:89:70:51:fe:
62:e2:21:7a:26:a3:39:8e:7a:e8:93:92:75:ad:8b:3a:5c:86:
ae:9e:05:dd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQyMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBEQ0U5NUM5QUU2MDg5
OTc4QkNCMEQxOEQzNzM3QTZFNDZFQUIyNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg+faQTCallVivbdgjq1l8LstQa9diEveJBfIiGkbQyzoEfnRg
XJIYnEUFiQ2/YHaezg5lo4oj061y12n4d5nNDg3h/FWrgsOGvQzBdaXYlaCFqkSE
YpNQcUzJXB7+IwlrlGYy5pbeUdM+LyPqGsVZZyRR/g0fSLi68dpr6WBru2MEF+Yy
Fu5X2emH1YyfD/5LSP+88h3qsRPinJ0xOdutUvXq+HFz7t1+sBOqR36YpegFdzKa
gpD5GdQk4aWFke3JuhDt9bT2P/0f4KLQCS5QGaB7hJHPJ92n5e0JRnKHDRo6qOp2
k0XgGU1q5qDPZHnHslrPSVVWnh77oUESnpxnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDc6Vya5giZeLyw0Y03N6bkbqsk0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0RjNlZ5YTVnaVplTHl3MFkw
M042YmticXNrMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2oAwDQYJKoZIhvcNAQELBQADggEBAJJIHf9HBUKH6glmzB8JQTB1BuzWdSnlyD3U
UtmT/tJi7u4DZv+6XTL1yKO8dHPefuB0IOz4fcvuf+NatdAa79Xgf+kkBJAjQ0ps
XGH2n5hQScKR+dlXAkLaFgEJEaNogb65R3Oe34N+U4RU1lS38IKD4qH/ZXdJ79Nb
wCn3b1tn6J02XE1TMUfxwkAEEdYmXDq+YoTWiCaIMC8HK1bY5JTRc5HE/pdtR1x0
4+axftoh/B36ITjI2vVSSU7cFkbvS3L+qr8/SukhjSEioUgONYe3yvOjaOhQwAz4
jX6KohR/t0VqCFlxiXBR/mLiIXomozmOeuiTknWtizpchq6eBd0=
-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:18 2025 by rpki-client