
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TO-M5xPLunYzSVk4v78G9kZANRM.roa
File: TO-M5xPLunYzSVk4v78G9kZANRM.roa (raw, json)
Hash identifier: b97gkCt9ZqYZKaYnEPxZ4v5HbcjuItPCtjfgcqPzSE4=
Subject key identifier: 4C:EF:8C:E7:13:CB:BA:76:33:49:59:38:BF:BF:06:F6:46:40:35:13
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 266C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TO-M5xPLunYzSVk4v78G9kZANRM.roa
Signing time: Fri 22 Aug 2025 08:42:54 +0000
ROA not before: Fri 22 Aug 2025 08:42:54 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 124.6.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9836 (0x266c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:54 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4CEF8CE713CBBA7633495938BFBF06F646403513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:16:4c:75:71:5e:05:e4:b6:f3:aa:35:b6:
c2:7f:59:7e:b9:e9:1f:ba:11:37:69:7b:41:e0:e6:
87:14:e7:67:ad:06:ca:63:ae:41:11:e3:42:29:5a:
71:b7:f5:90:7e:eb:56:1f:0a:be:70:42:63:8c:e7:
75:54:5c:59:44:41:6d:b7:82:52:1b:a4:62:05:aa:
22:5d:53:87:27:9a:4a:13:22:8d:ea:99:33:7d:01:
03:86:2c:a4:09:60:c2:54:30:0a:88:02:b5:25:21:
fb:e8:f5:0d:dd:4d:3a:7e:6e:d6:fb:b2:63:5b:52:
85:d6:41:4d:1a:26:fb:63:6d:14:c7:65:07:87:4f:
6f:c8:73:3d:57:4c:7e:df:2b:68:ad:bf:8e:6b:52:
77:67:a2:7f:ca:35:e2:02:7b:25:66:96:67:8e:99:
91:73:c9:f6:e7:13:09:71:72:b2:24:cf:a1:f3:9d:
6f:1f:fe:6f:21:a5:23:a2:c1:09:99:c4:cb:22:fe:
ce:e7:88:b7:e5:a0:b1:92:06:83:34:2e:a1:5b:d9:
36:74:be:06:a3:58:5e:7c:4f:f2:f8:75:aa:a8:09:
c2:47:ec:af:fe:38:f4:32:53:ec:ae:e1:fb:19:25:
1c:da:43:01:60:59:76:7d:29:a5:fe:4e:b1:93:98:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:8C:E7:13:CB:BA:76:33:49:59:38:BF:BF:06:F6:46:40:35:13
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TO-M5xPLunYzSVk4v78G9kZANRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.20.0/22
Signature Algorithm: sha256WithRSAEncryption
67:1d:b8:13:ad:df:3b:0e:3d:86:0a:ae:53:31:cf:7f:54:b7:
61:78:c9:dc:fe:e0:13:89:ff:e9:75:56:79:57:78:a0:6a:47:
fb:cc:25:7c:b4:d0:f6:6e:30:8c:91:74:37:d4:30:ed:a9:cd:
a8:37:39:e6:33:65:a7:12:21:bd:55:0e:06:72:05:88:e6:df:
bf:c6:6f:cf:51:33:80:45:88:01:22:a6:83:c9:a4:2d:d4:c1:
dd:69:0c:5e:5c:2e:44:f9:ab:60:b5:05:f6:e1:96:60:0d:96:
6d:e1:2a:66:44:bf:c3:34:ae:89:20:85:f6:fc:7f:4f:4f:9d:
a7:a2:da:e6:90:a0:bd:82:1d:57:9e:2a:07:4b:f9:d6:41:e3:
fe:1c:a2:58:2e:c6:a1:a3:d7:27:88:f6:d2:65:02:87:6c:af:
49:9d:80:35:63:ac:ac:25:10:01:1d:0d:4f:d8:d6:81:99:ed:
9e:9c:d4:66:15:97:ed:d3:10:52:2e:fc:33:c6:6e:69:68:59:
c3:7b:a5:f0:7c:5c:2c:97:3d:b8:71:9e:db:b0:15:bd:4e:37:
5f:00:2a:7e:a2:98:0b:99:88:74:13:90:8b:63:7b:1e:1a:0b:
47:50:36:19:75:4e:31:91:ab:99:31:8e:f2:2b:cb:9c:fc:6b:
ed:55:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:39 2025 by rpki-client