
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViWptrJceYc8HPgIk0KmcDqDMG4.roa
File: ViWptrJceYc8HPgIk0KmcDqDMG4.roa (raw, json)
Hash identifier: VAngx3CpTWNx6lvSow1tmXaDh+ovHOSC6e3uGGSTCHs=
Subject key identifier: 56:25:A9:B6:B2:5C:79:87:3C:1C:F8:08:93:42:A6:70:3A:83:30:6E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2633
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViWptrJceYc8HPgIk0KmcDqDMG4.roa
Signing time: Fri 22 Aug 2025 08:42:41 +0000
ROA not before: Fri 22 Aug 2025 08:42:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4662
IP address blocks: 61.64.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9779 (0x2633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5625A9B6B25C79873C1CF8089342A6703A83306E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:a5:e0:83:6d:fb:47:c2:7e:aa:bb:88:66:
21:b8:0a:65:41:d2:6d:90:0c:6b:33:3f:1d:de:fc:
3e:6d:54:ce:71:ff:5f:e2:7c:3c:86:8a:95:1c:93:
b6:b7:8a:b1:c1:6c:5a:4a:96:32:40:2d:98:e3:43:
dd:bc:b0:74:6e:eb:e4:2d:44:99:49:c2:5d:3e:51:
96:9c:a0:c5:97:4c:22:9f:dc:89:e4:76:22:98:73:
45:5f:be:04:55:d2:8d:8b:fe:8d:00:66:bc:4a:7d:
cb:f3:f6:ff:e8:11:c3:56:bf:19:2b:52:cb:af:87:
d5:e4:bc:a8:ad:7c:64:55:d3:69:02:f3:3d:9e:a6:
76:ff:fa:71:65:31:08:aa:40:8c:44:08:c5:32:76:
9d:5e:22:31:59:2d:07:99:59:c6:20:10:e4:f5:d0:
66:8d:39:64:99:bb:ca:e5:d2:e7:3d:33:19:2e:0b:
c7:35:72:9d:f5:77:1b:6b:58:07:80:82:5e:5d:62:
36:a1:98:e8:a0:d3:30:c4:a4:66:6e:c5:6f:26:14:
e2:51:c8:73:98:ca:3d:10:a5:10:43:ba:ae:09:f3:
30:e7:ec:f0:63:b4:c7:97:77:07:54:47:5c:ca:eb:
3d:ca:87:82:50:ec:16:85:ab:26:af:16:55:10:3d:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:A9:B6:B2:5C:79:87:3C:1C:F8:08:93:42:A6:70:3A:83:30:6E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViWptrJceYc8HPgIk0KmcDqDMG4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:28:2e:10:40:2f:88:ef:21:a3:dd:08:46:91:0a:8c:dc:d2:
2d:a6:89:04:2b:d5:74:79:66:e8:48:6e:d5:eb:75:81:7f:b3:
06:14:c2:2c:6d:f7:e6:56:d8:b1:2b:07:fe:d6:01:82:d1:00:
f7:27:6a:14:60:79:ea:e1:eb:bb:04:a6:22:8a:0e:bf:21:9f:
4f:c1:cb:37:7a:19:81:9c:95:f9:cd:26:63:94:33:95:07:0a:
ad:fb:e7:b2:f9:63:59:47:ef:79:9c:91:73:91:a0:96:0d:cf:
a0:ab:92:86:db:0b:3c:59:4f:ce:a7:a1:8b:89:b4:a9:70:d4:
d7:97:3d:1e:fe:b8:8a:35:a5:a9:73:dc:3e:f2:dd:d0:b9:fb:
2b:44:c4:0d:fc:ac:58:7d:8a:6f:f1:20:35:ee:88:e1:0a:65:
2c:f4:30:de:b3:7f:c3:d3:a2:1e:aa:ab:8f:f2:fe:8c:19:17:
4e:e2:9b:9b:15:fc:65:cb:23:e6:2a:31:ad:54:4a:e8:6d:b7:
37:51:42:82:a5:7b:bd:f6:1e:1c:cd:90:d3:0b:a7:70:04:d0:
ec:f8:e3:87:b9:da:ab:46:c9:1a:30:41:f1:6f:92:9a:15:96:
4b:3c:0f:9d:22:ed:41:df:01:e4:91:17:3c:ca:4a:64:e4:0e:
fd:7a:42:44
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQyNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU2MjVBOUI2QjI1Qzc5
ODczQzFDRjgwODkzNDJBNjcwM0E4MzMwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkOqXgg237R8J+qruIZiG4CmVB0m2QDGszPx3e/D5tVM5x/1/i
fDyGipUck7a3irHBbFpKljJALZjjQ928sHRu6+QtRJlJwl0+UZacoMWXTCKf3Ink
diKYc0VfvgRV0o2L/o0AZrxKfcvz9v/oEcNWvxkrUsuvh9XkvKitfGRV02kC8z2e
pnb/+nFlMQiqQIxECMUydp1eIjFZLQeZWcYgEOT10GaNOWSZu8rl0uc9MxkuC8c1
cp31dxtrWAeAgl5dYjahmOig0zDEpGZuxW8mFOJRyHOYyj0QpRBDuq4J8zDn7PBj
tMeXdwdUR1zK6z3Kh4JQ7BaFqyavFlUQPVh5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUViWptrJceYc8HPgIk0KmcDqDMG4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZpV3B0ckpjZVljOEhQZ0lr
MEttY0RxRE1HNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9
QAAwDQYJKoZIhvcNAQELBQADggEBAJ0oLhBAL4jvIaPdCEaRCozc0i2miQQr1XR5
ZuhIbtXrdYF/swYUwixt9+ZW2LErB/7WAYLRAPcnahRgeerh67sEpiKKDr8hn0/B
yzd6GYGclfnNJmOUM5UHCq3757L5Y1lH73mckXORoJYNz6CrkobbCzxZT86noYuJ
tKlw1NeXPR7+uIo1palz3D7y3dC5+ytExA38rFh9im/xIDXuiOEKZSz0MN6zf8PT
oh6qq4/y/owZF07im5sV/GXLI+YqMa1USuhttzdRQoKle732HhzNkNMLp3AE0Oz4
44e52qtGyRowQfFvkpoVlks8D50i7UHfAeSRFzzKSmTkDv16QkQ=
-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:11 2025 by rpki-client