
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EQJRKjqWKZu3KaQ8Vr_XcOcfI04.roa
File: EQJRKjqWKZu3KaQ8Vr_XcOcfI04.roa (raw, json)
Hash identifier: X93rlfgPMYGJflzpU1pWbo7qQapZtvQ6yAAKCFsR7B8=
Subject key identifier: 11:02:51:2A:3A:96:29:9B:B7:29:A4:3C:56:BF:D7:70:E7:1F:23:4E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26A2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EQJRKjqWKZu3KaQ8Vr_XcOcfI04.roa
Signing time: Fri 22 Aug 2025 08:43:07 +0000
ROA not before: Fri 22 Aug 2025 08:43:07 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 61.64.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9890 (0x26a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:07 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1102512A3A96299BB729A43C56BFD770E71F234E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:e5:02:72:f5:1a:e8:02:af:1b:7f:7c:99:
d0:37:ec:8f:c3:f1:d9:98:ac:e7:ae:6c:7f:0f:84:
11:2f:5e:c4:ae:c2:56:95:dd:86:3e:49:db:03:9c:
1d:9f:88:3b:5d:75:62:4e:62:a6:cb:b9:e4:97:44:
15:c4:44:90:8a:b4:77:f8:44:45:73:cb:1f:64:17:
15:34:77:df:35:79:30:37:92:5a:64:f4:69:a4:b7:
71:a7:60:ef:2d:5b:31:3c:da:53:2f:bc:14:af:f1:
73:c3:5f:6f:a6:65:5b:f3:6b:f1:3b:0d:27:ab:24:
f4:0b:6f:1d:6f:ce:aa:b1:30:90:40:b3:24:ed:77:
99:56:b7:6d:26:59:ad:ca:24:f4:ef:52:b6:72:4f:
7d:05:c8:fc:a7:bc:bf:51:9f:eb:e1:22:b8:43:c6:
e3:ee:64:86:18:39:fc:00:34:09:5f:10:3a:42:d2:
26:db:3e:e0:e1:69:be:b1:3e:98:07:36:17:61:99:
95:c6:b1:30:58:ba:05:4f:5b:0f:f6:63:8f:47:d2:
b5:2b:0a:e7:23:87:42:13:9a:35:ed:f3:ee:a9:20:
9d:e5:11:80:b6:74:47:12:d3:ce:1a:7e:4e:8e:8f:
11:27:75:a7:9d:ad:04:b3:a8:94:a1:1c:d9:ac:6e:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:51:2A:3A:96:29:9B:B7:29:A4:3C:56:BF:D7:70:E7:1F:23:4E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EQJRKjqWKZu3KaQ8Vr_XcOcfI04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:41:b1:11:ed:59:45:b6:51:ff:aa:95:14:48:57:b7:5c:bc:
55:87:eb:e5:f2:66:ca:af:9f:e4:80:80:6a:fd:59:71:69:be:
6f:c1:e8:fc:1f:e6:20:48:33:f3:5d:18:d2:df:9d:28:c2:01:
26:54:e8:ae:a4:58:f6:69:05:39:6d:45:10:98:7f:82:4b:6b:
6f:27:d5:00:b3:c9:e6:99:c5:45:7f:2f:4d:69:89:20:9b:85:
5f:0c:1d:bd:df:a1:e5:47:7e:40:88:28:ca:9e:38:ba:69:1e:
1a:05:6b:69:16:5b:e3:4a:a5:a8:f9:17:d6:ea:92:83:a2:ad:
19:a4:47:64:83:b6:90:86:64:d8:cc:38:aa:2e:81:b1:aa:1f:
50:cb:27:57:67:48:e3:74:04:57:61:2d:f6:34:a3:c2:e9:01:
0c:65:3a:ef:78:22:34:52:50:a7:af:96:c5:11:72:1c:17:45:
e0:da:38:4c:34:86:43:2b:fd:df:55:5b:e7:a8:b7:df:f1:53:
97:e1:a5:b4:e9:58:6b:6d:0a:0d:54:12:40:e4:84:83:49:45:
ec:4e:1e:79:0b:f3:9e:50:2b:96:c9:0e:c1:58:c0:de:dc:e5:
fd:96:d9:82:6a:a9:81:2a:f1:56:48:43:7d:61:71:9b:73:ba:
af:9b:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:10 2025 by rpki-client