
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SmuR0yf-NXCRVEKKPounA--dW6o.roa
File: SmuR0yf-NXCRVEKKPounA--dW6o.roa (raw, json)
Hash identifier: a25HYTs7+JYjvqaXIelMMNvajn601lxL0VRuHcVuUTU=
Subject key identifier: 4A:6B:91:D3:27:FE:35:70:91:54:42:8A:3E:8B:A7:03:EF:9D:5B:AA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2641
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SmuR0yf-NXCRVEKKPounA--dW6o.roa
Signing time: Fri 22 Aug 2025 08:42:45 +0000
ROA not before: Fri 22 Aug 2025 08:42:45 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 211.76.32.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9793 (0x2641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:45 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4A6B91D327FE35709154428A3E8BA703EF9D5BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:01:3c:0d:62:9b:0c:29:61:26:40:43:fd:
3c:de:a5:ca:f0:94:a4:9e:94:8e:88:ff:eb:55:b5:
59:86:16:37:7b:63:b4:b2:c7:ef:24:49:b0:81:e9:
50:da:38:d8:41:c0:11:5c:c5:ff:c5:15:0e:ec:db:
c1:b5:bf:b5:f7:2d:e3:e6:ce:93:f6:04:ba:28:66:
75:c7:d5:2c:f3:12:ad:7f:38:b2:cd:21:54:13:12:
e2:f3:ac:48:10:dc:29:b4:b1:c2:46:d3:0a:c9:71:
9c:26:47:89:02:88:b8:60:a8:27:1e:8c:f8:78:ed:
8b:38:50:ee:9f:4c:a4:41:e4:61:00:ac:5d:9f:03:
92:39:72:18:28:e4:b9:27:e5:07:1d:2e:3a:1d:b0:
6e:66:39:47:71:6f:41:1c:42:2d:cd:46:fc:69:20:
3d:95:fc:81:80:59:3d:0c:5b:6f:02:80:78:ca:ae:
83:2d:31:a5:83:a5:60:a2:fa:35:f7:e5:ad:80:84:
52:61:df:2c:d0:55:43:59:ec:bc:1b:4e:c9:17:c0:
e3:71:5f:a7:bf:e1:6e:c3:e0:71:40:6f:5f:07:f9:
7d:09:f6:ab:c2:f3:68:cb:af:61:91:27:ae:55:bb:
e6:99:8e:cb:4a:82:9c:56:1d:4d:2c:15:37:b5:0a:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:91:D3:27:FE:35:70:91:54:42:8A:3E:8B:A7:03:EF:9D:5B:AA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SmuR0yf-NXCRVEKKPounA--dW6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/19
Signature Algorithm: sha256WithRSAEncryption
99:4a:37:e0:56:31:65:cd:53:83:14:c8:7f:76:79:b2:e7:a1:
ee:ff:93:91:2d:cd:b3:bb:b7:67:6c:42:48:b4:1d:f5:0b:0a:
9d:33:d9:76:f5:ff:5e:7a:e1:5b:94:bf:4d:82:00:35:5d:f6:
15:70:bc:47:8f:91:50:b1:0d:dd:90:20:ca:ee:60:46:29:f5:
a7:16:7e:86:bd:3e:c7:a4:e8:27:55:96:64:fa:c8:9c:46:bd:
5f:00:82:90:fb:9a:0d:4c:b4:3a:a3:16:78:07:15:88:77:61:
f8:7b:7e:a3:24:d7:c1:cd:68:4f:1d:2c:36:00:a5:55:47:d0:
0e:d4:96:4c:44:a8:86:a5:54:0d:eb:8c:ab:bf:86:8c:5d:5b:
b0:91:2e:1c:ab:0d:21:31:28:42:d5:b8:4f:99:d8:a5:f9:a7:
3b:cf:df:7b:36:df:5f:f8:20:1d:c0:bc:eb:10:a7:9f:93:c9:
d9:53:7a:34:6c:41:7a:d5:15:9d:04:74:64:53:2f:f6:9b:a5:
e9:bc:54:26:e7:68:62:e3:27:1e:bc:c5:f7:94:e5:f3:05:70:
78:e2:dd:7f:06:c4:ba:aa:1c:e6:8d:c6:d0:2d:63:6c:de:31:
c8:b6:8f:c6:ab:d1:b5:23:14:47:94:d5:a4:69:e9:49:d9:65:
52:e0:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:16 2025 by rpki-client