
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GXTocPbgEoHEcmzp14jNyO1s0zA.roa
File: GXTocPbgEoHEcmzp14jNyO1s0zA.roa (raw, json)
Hash identifier: jJ4gRgVW1J4ydoS/fz0BsI+tzN8ops9CgyJW/m/ZS3c=
Subject key identifier: 19:74:E8:70:F6:E0:12:81:C4:72:6C:E9:D7:88:CD:C8:ED:6C:D3:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26F0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GXTocPbgEoHEcmzp14jNyO1s0zA.roa
Signing time: Fri 22 Aug 2025 08:43:24 +0000
ROA not before: Fri 22 Aug 2025 08:43:24 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 180.218.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9968 (0x26f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:24 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1974E870F6E01281C4726CE9D788CDC8ED6CD330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:17:7c:45:07:b5:ef:0b:82:77:1d:dd:5b:
3c:2c:67:13:10:e3:fd:e5:29:08:d3:16:b9:73:7d:
10:b8:97:98:ab:52:47:7e:1a:57:13:6a:cd:9f:6c:
64:3a:70:4d:83:2d:a4:18:9c:b2:1f:33:e2:d5:ab:
bd:b1:7e:0b:95:0e:69:b3:e7:d8:8c:a2:54:cd:34:
6f:74:5d:41:ab:6d:1f:6c:dc:a8:f7:11:3c:c7:56:
a2:ed:bc:b8:ce:9a:e5:1b:8f:65:8d:d7:af:24:39:
d9:f9:fa:18:97:5b:f8:be:ed:1d:64:db:f0:5e:f8:
86:90:75:21:2f:a4:15:04:4f:c8:9d:cc:97:cf:f7:
14:f0:21:73:a7:72:c8:15:b9:a4:0c:a1:67:18:f7:
96:bf:a8:b2:73:b0:50:2a:25:14:5c:43:47:40:71:
a5:07:83:0a:eb:1e:d1:42:83:23:43:a5:f4:c1:0b:
68:d9:7d:81:27:95:b7:11:65:fa:48:4b:b8:24:50:
a0:43:c0:dc:9d:b7:15:cb:35:bb:36:86:9a:dd:75:
ea:92:91:16:bd:e6:03:f7:54:b8:ab:4a:f4:6c:ee:
e1:ec:0e:a8:47:39:9b:ea:3d:da:ea:75:c6:71:2b:
35:22:e3:b6:fc:19:0f:b3:72:b9:e7:5b:ba:c9:75:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:E8:70:F6:E0:12:81:C4:72:6C:E9:D7:88:CD:C8:ED:6C:D3:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GXTocPbgEoHEcmzp14jNyO1s0zA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.132.0/24
Signature Algorithm: sha256WithRSAEncryption
77:11:b6:ff:cf:e9:3d:c2:0f:a0:12:2d:1b:14:80:26:7e:70:
bf:ae:e3:a6:70:6d:26:8e:ed:06:fd:c4:80:9b:d2:2b:6f:a0:
79:ae:a9:41:16:8c:1c:6a:ed:32:0f:fa:c3:9b:ac:f5:29:88:
f8:c3:1d:a8:e7:7c:4b:ac:a8:32:6f:2f:f9:fc:e6:9b:62:8b:
bc:b8:a9:fb:1b:81:89:61:a3:32:bc:a3:a3:4f:c2:08:d6:f5:
f1:24:19:42:6c:81:47:6e:ee:de:6a:f8:82:dd:8a:ef:d7:3b:
0f:ec:96:e5:fa:35:d6:0c:e3:75:5b:20:63:65:e7:f6:0f:f1:
ba:0b:29:43:dc:b4:40:5e:28:13:a3:3b:04:d1:27:0f:9e:05:
92:69:03:c5:09:86:9c:6f:82:c6:0d:14:c7:6f:5d:af:0e:09:
c1:67:d8:59:df:4f:b1:28:f0:88:8b:60:da:67:3d:8a:91:b8:
82:4a:9d:1c:e4:80:35:df:54:7f:41:fc:7a:24:f9:b2:75:f8:
57:67:ec:06:3f:ec:bf:67:4b:22:f8:6a:d4:dc:37:d3:e8:4e:
7a:6f:c6:60:69:1a:af:24:c8:a4:4c:3c:d4:6b:7c:61:f1:d4:
12:5c:b7:ed:a2:49:26:72:07:9f:d3:38:99:88:18:de:90:95:
62:05:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:50:50 2025 by rpki-client