
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jni7A7_8QrnRKkWW67AXb-VzPbE.roa
File: Jni7A7_8QrnRKkWW67AXb-VzPbE.roa (raw, json)
Hash identifier: AgxAruQEdf1SeMcYZ5vtj8/OyvvwjoUOLUdwQTMAcUk=
Subject key identifier: 26:78:BB:03:BF:FC:42:B9:D1:2A:45:96:EB:B0:17:6F:E5:73:3D:B1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26F6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jni7A7_8QrnRKkWW67AXb-VzPbE.roa
Signing time: Fri 22 Aug 2025 08:43:25 +0000
ROA not before: Fri 22 Aug 2025 08:43:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 49.159.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9974 (0x26f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:25 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2678BB03BFFC42B9D12A4596EBB0176FE5733DB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:eb:ca:93:ab:1a:31:40:9a:86:47:b3:25:
70:03:f7:e2:60:2c:2c:54:15:8e:ea:c8:f2:f6:17:
d7:66:c6:0b:f6:7d:bd:78:c4:ea:c7:c4:7c:3d:09:
c7:0c:74:a2:35:d9:a5:3c:25:16:50:ba:a0:78:9d:
41:cc:5b:0f:4f:d6:42:fe:fd:bc:be:5e:3b:2c:0f:
7f:e8:0a:63:76:9c:02:b4:48:84:ce:fd:ba:c0:d7:
de:62:44:eb:c9:d4:31:9c:6b:05:83:5c:5a:10:c7:
b6:e9:51:0d:72:e0:a9:29:e9:56:99:01:1b:83:e4:
4f:38:4c:60:a8:06:55:51:6e:b3:84:34:61:34:37:
83:43:52:79:c8:05:df:8e:d6:67:5d:f2:53:c3:73:
8b:2a:b9:2c:42:a2:9b:59:ca:1d:df:a6:0d:3a:01:
9e:5e:8a:a6:7a:47:f9:38:6d:af:38:ae:da:63:24:
18:e2:f9:e1:02:34:a7:b7:e0:7c:8f:4e:db:a2:7f:
d3:29:db:62:63:80:ea:71:46:7b:1b:1d:2c:1e:4f:
54:48:9f:3a:e2:e3:d5:da:8f:a5:da:f3:6e:70:35:
af:d3:3e:4d:45:61:75:ad:0e:7d:f9:2d:03:5f:e0:
4b:e4:38:9b:b9:2b:12:68:08:fa:1d:fd:23:8f:89:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:BB:03:BF:FC:42:B9:D1:2A:45:96:EB:B0:17:6F:E5:73:3D:B1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jni7A7_8QrnRKkWW67AXb-VzPbE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.96.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:fa:1c:17:90:13:e0:de:c4:85:a3:42:a0:65:c3:42:16:20:
57:2c:33:ed:fc:b4:78:07:78:cb:42:74:90:85:d7:ea:94:19:
28:a0:5f:85:9c:a8:91:72:ea:eb:58:e3:79:cc:41:c6:b9:b0:
47:d5:7c:e0:ab:d3:dc:50:cd:8e:a6:af:6e:b0:9d:49:15:94:
01:71:c1:a7:55:13:79:1b:0d:36:e8:20:47:c5:03:85:94:ea:
9a:74:5b:78:4d:5c:cd:58:42:44:11:81:20:a1:1f:26:2e:08:
80:48:01:8d:74:eb:06:19:b6:3b:99:96:12:41:b6:26:60:77:
72:48:a3:45:82:2a:1f:f6:13:b7:34:e5:84:f6:ae:f8:67:09:
ee:67:ee:9e:7e:75:a2:de:a5:27:05:8c:9b:03:99:25:3d:7a:
0d:11:d6:da:9c:48:ab:d5:5b:b9:31:bd:43:f7:f6:ed:4b:d8:
9a:58:9f:fe:6e:48:77:98:18:fc:59:93:63:e8:a2:34:f1:bb:
23:b1:27:74:88:d6:f2:e8:9c:a0:d6:3a:79:ae:ac:98:63:9a:
92:c4:e8:17:b6:66:84:0d:b3:48:14:38:d2:19:6b:7c:af:e0:
df:07:c1:81:b1:4d:3b:1f:fe:1d:be:33:33:f0:ab:de:83:1d:
31:62:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:18 2025 by rpki-client