
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U7NcvCUag6ykqeoZKvHPitiNink.roa
File: U7NcvCUag6ykqeoZKvHPitiNink.roa (raw, json)
Hash identifier: aiwxOe2Nn2sTDJ3TTA6lmxCUnzrEc1yo2F4F0E/DSvc=
Subject key identifier: 53:B3:5C:BC:25:1A:83:AC:A4:A9:EA:19:2A:F1:CF:8A:D8:8D:8A:79
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26D1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U7NcvCUag6ykqeoZKvHPitiNink.roa
Signing time: Fri 22 Aug 2025 08:43:17 +0000
ROA not before: Fri 22 Aug 2025 08:43:17 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 122.254.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9937 (0x26d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:17 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=53B35CBC251A83ACA4A9EA192AF1CF8AD88D8A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:af:06:d8:96:7d:90:aa:53:56:6b:23:01:
52:ed:62:fc:03:49:5b:23:7a:8f:c4:85:57:0c:61:
60:4c:37:30:49:1b:66:5a:aa:9f:d8:cf:cc:43:e5:
93:85:59:d0:9d:93:df:e0:f0:e1:51:87:df:53:66:
22:1a:fd:3b:41:da:96:25:32:db:ba:19:51:e4:ee:
6e:d9:04:eb:fe:7f:20:14:58:c1:32:a6:0e:2d:76:
1c:3c:84:39:28:fa:55:f5:b0:d5:e2:ee:ba:86:20:
71:d1:3a:33:eb:01:1d:0f:39:52:f1:f9:1b:49:ec:
4a:4f:dc:97:43:63:24:8d:ff:dc:91:15:be:26:57:
31:de:ef:86:ab:d1:ee:5c:c0:f7:38:58:af:d2:54:
a0:fa:cf:ea:18:4f:a5:bf:0a:c0:7b:57:f9:25:59:
7b:ec:15:cd:89:29:bf:50:00:7d:f5:dd:57:fb:f0:
ce:f9:2c:47:72:29:70:e4:22:2d:16:a3:29:98:f4:
36:31:22:6e:99:fe:ec:92:6e:85:65:5b:b9:56:b7:
9f:3e:e9:e9:34:53:26:4e:54:08:b6:20:31:4d:43:
96:d7:58:d1:9a:56:c0:62:1a:c5:f3:55:21:1c:25:
48:6b:b1:ee:7c:af:ab:53:a8:a7:e3:c1:c9:d4:b3:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:5C:BC:25:1A:83:AC:A4:A9:EA:19:2A:F1:CF:8A:D8:8D:8A:79
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U7NcvCUag6ykqeoZKvHPitiNink.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.0.0/18
Signature Algorithm: sha256WithRSAEncryption
68:af:d3:2b:a5:99:ca:38:62:33:70:c8:e9:e7:e6:5e:30:a6:
c0:cf:40:63:c0:36:69:f9:a5:e7:37:55:3e:8f:3b:af:af:59:
44:89:90:ee:c2:79:bf:2e:22:26:47:a6:18:bf:d0:6e:5f:d6:
8e:45:7d:11:e4:a4:6d:a4:ad:5a:b1:bf:41:56:1e:ad:59:3e:
20:2b:6a:08:88:98:dd:20:64:7b:44:2a:59:f5:72:de:f7:18:
29:53:47:d5:43:85:80:40:b6:85:7a:5e:aa:88:43:f8:3c:b2:
44:3c:99:70:86:a2:81:72:9f:30:df:33:1b:57:08:00:90:7a:
47:3b:c4:26:2d:e7:66:cd:ab:2a:00:a0:d4:cd:fe:7e:e0:e0:
f4:d4:70:e5:88:a0:93:1e:80:b2:3a:97:79:a9:7c:0c:40:6a:
0b:8d:2b:e8:25:d0:41:96:b3:e9:db:13:9b:57:9c:e8:59:95:
5d:6a:41:37:7d:d4:c5:13:ab:a8:15:70:2b:8b:55:b3:2f:d7:
ea:c8:e4:29:4a:41:b4:5a:1b:69:8c:3e:a2:a4:bd:7b:1b:8d:
a7:6f:28:8f:09:c1:d2:0e:22:3a:26:c9:5d:52:b8:7d:ad:8e:
67:62:e8:fb:4d:b7:76:34:03:6b:cc:f8:51:9f:1c:fc:7c:a3:
0f:1b:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:50:41 2025 by rpki-client