
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAmvr_ptQfpHplsGbR_46kqJJWI.roa
File: RAmvr_ptQfpHplsGbR_46kqJJWI.roa (raw, json)
Hash identifier: UUB/Lrww1uXyhVSLYWchE7DcDPrv4CNTP5pbvqa6wE8=
Subject key identifier: 44:09:AF:AF:FA:6D:41:FA:47:A6:5B:06:6D:1F:F8:EA:4A:89:25:62
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 270A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAmvr_ptQfpHplsGbR_46kqJJWI.roa
Signing time: Fri 22 Aug 2025 08:43:30 +0000
ROA not before: Fri 22 Aug 2025 08:43:30 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 123.0.48.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9994 (0x270a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:30 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4409AFAFFA6D41FA47A65B066D1FF8EA4A892562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:73:55:4c:50:7f:cd:d1:d5:80:0c:9f:81:
95:61:f6:f6:85:3d:9a:a2:99:89:be:15:05:c4:cf:
73:ca:a3:c8:93:9d:37:b8:7a:ad:c5:c4:90:8b:88:
26:fa:cb:4e:aa:4f:9b:f0:0f:30:ff:e4:ca:27:db:
64:ca:7d:88:67:fa:e1:d7:65:fd:95:8a:65:7b:47:
90:d9:a2:d9:ac:37:47:dd:19:d6:da:f6:fb:9a:e0:
27:80:db:56:00:ea:d9:ba:72:e2:ca:a0:8d:49:6a:
69:fb:d9:da:20:e2:14:4c:e5:3e:6c:f1:62:96:89:
43:97:52:d4:36:4e:28:b4:02:6f:a0:3b:c6:7b:f9:
8d:26:a6:31:f2:47:fe:55:35:f9:42:45:ac:90:54:
c5:41:49:2b:f3:6a:e1:5b:c6:f9:09:46:7b:3f:4f:
ea:50:5a:37:46:22:f7:95:7b:a5:a5:e1:c2:e9:7b:
dd:1b:01:d6:d7:bc:ed:94:67:ef:97:cf:bc:bf:2c:
82:73:7c:e1:ef:33:1e:8b:c1:37:4b:51:c1:7c:ed:
2b:f4:25:ea:9c:be:18:af:d1:56:27:a1:c8:16:8a:
fe:7a:32:23:f8:a6:4a:d9:bd:4c:81:d9:88:72:f3:
83:6a:ae:9b:1d:1f:b2:3e:79:d0:e6:8e:ad:05:66:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:AF:AF:FA:6D:41:FA:47:A6:5B:06:6D:1F:F8:EA:4A:89:25:62
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAmvr_ptQfpHplsGbR_46kqJJWI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:ca:7f:90:14:4c:d7:d9:5a:ed:87:ae:be:dd:4d:4c:c6:6e:
e5:7e:29:77:43:d3:8a:2d:db:96:b6:4f:04:61:68:5b:ce:4c:
51:7a:d9:7e:9a:c2:66:f1:29:3f:51:23:7a:50:fa:d5:d6:3b:
89:22:fa:14:a8:0e:2b:27:00:98:6e:6f:bf:e2:1a:0e:fb:ba:
33:86:f5:e4:40:0f:81:30:47:be:f6:1b:1a:85:0d:76:86:f6:
51:aa:99:db:cf:9d:df:a4:2a:b1:05:93:47:69:50:5b:1a:ba:
4b:ef:6b:1c:1c:3d:63:c7:e1:a7:9c:20:66:48:b1:3b:53:97:
17:ec:1e:ce:75:f0:01:78:c9:7e:4b:52:59:8a:a4:aa:d9:ce:
f2:c1:92:80:4c:7b:f0:77:46:d9:84:55:7d:9f:e9:a2:44:d1:
8c:eb:1a:e8:35:3f:2c:45:6a:40:4e:09:66:b9:ee:60:7e:03:
00:05:c0:38:b7:e4:e4:dd:f7:a7:be:ab:1c:03:dd:0d:5b:3b:
a7:f3:73:0b:10:f3:ec:75:6f:ba:e9:2d:6f:07:0e:63:87:91:
dd:01:fd:fa:cb:f6:24:5c:ba:76:01:27:3d:ee:37:b0:56:77:
66:f1:13:9b:8e:93:90:df:b9:ec:ac:2d:4b:62:4a:5b:0f:b8:
8b:58:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:26 2025 by rpki-client