
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa
File: E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa (raw, json)
Hash identifier: ziu6iE6w4rhFkEqx+wBozZhPAe9MRv6ToYCLr4MxNtc=
Subject key identifier: 13:4C:F7:64:9D:12:A4:A0:89:46:05:75:80:50:4E:6A:47:CD:7D:FB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 266D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa
Signing time: Fri 22 Aug 2025 08:42:54 +0000
ROA not before: Fri 22 Aug 2025 08:42:54 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24165
IP address blocks: 122.254.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9837 (0x266d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:54 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=134CF7649D12A4A08946057580504E6A47CD7DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:67:2e:53:76:81:74:4e:1a:95:d0:b8:b9:
41:ba:20:8f:16:fe:a2:da:eb:58:dc:79:41:b6:32:
82:a8:c3:c1:69:09:05:27:57:be:86:b4:7f:a0:d9:
29:52:9f:41:f7:e2:2b:89:3d:88:44:65:06:df:c7:
f1:82:fd:3e:55:d9:b4:0d:9d:64:43:13:c1:8d:31:
af:7c:98:67:c6:a9:ab:37:77:4f:0c:5d:ed:d5:1b:
b0:5a:22:e3:d5:b4:a6:4f:bd:15:e7:66:9a:0f:99:
75:e3:ac:85:1b:1d:a5:d6:97:f1:fa:24:48:8d:aa:
a8:5c:8e:58:75:53:7f:3f:e2:a5:60:3f:7d:29:93:
7c:f4:06:2e:4e:9f:e7:09:4e:44:f3:84:2b:55:5d:
de:80:91:a4:f8:95:a0:c2:41:83:f6:ab:73:5b:1c:
bb:29:a6:e9:d9:89:ae:25:8a:0b:6a:81:38:5c:4a:
c7:d7:46:a7:14:80:b0:1c:de:0a:a9:0e:b4:61:ab:
05:9a:d5:67:80:ae:60:e0:50:1c:e0:7c:43:3b:78:
69:af:d7:63:4f:42:6b:47:a1:0e:3d:69:8a:79:42:
7c:4e:ee:2c:5d:8c:05:f3:8a:32:d3:12:38:00:b9:
70:0b:8c:f9:88:29:3c:cf:f7:e3:85:96:9b:b3:36:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4C:F7:64:9D:12:A4:A0:89:46:05:75:80:50:4E:6A:47:CD:7D:FB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:2c:57:20:65:10:47:f4:9b:b7:bf:b3:5b:d5:02:df:89:7b:
c8:0c:20:74:dc:00:6e:5c:b5:92:c4:f3:7a:66:0a:90:67:cd:
f6:eb:96:b9:24:dd:bc:6b:31:83:7a:6b:f4:50:25:53:f4:28:
93:ab:82:15:55:24:c3:99:72:63:4e:61:0d:b4:10:d3:f3:f3:
23:34:ba:7b:6d:d8:81:d0:f0:b1:b0:be:85:c0:49:72:43:f3:
d7:16:c9:4c:56:c1:ae:65:dd:e2:b3:85:d2:5f:8f:00:ed:1f:
06:43:9c:91:bd:1a:0d:79:9c:d4:7f:4c:4b:d6:9c:63:29:a2:
af:7f:b9:67:cb:e1:65:59:e9:a4:ac:d0:99:b5:38:a1:91:cf:
62:9e:40:41:63:01:90:a5:c8:df:24:a6:f2:81:61:8e:de:06:
36:67:24:24:fa:48:02:44:d4:4e:45:e4:19:91:f8:71:df:c2:
39:73:79:88:0b:be:68:37:bd:df:2e:0b:68:9b:11:44:47:7d:
40:16:74:2e:ae:de:45:36:87:47:a0:11:cf:c2:08:b3:57:3c:
b8:bb:69:77:af:48:f9:1c:ab:37:f2:6e:29:7e:4b:79:96:d5:
71:3b:68:3d:26:d2:6f:05:ec:45:5b:b9:e3:10:73:da:ca:d6:
63:ed:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:00 2025 by rpki-client