
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W1TypA8f4P9RJl-ytu4XAXW45U8.roa
File: W1TypA8f4P9RJl-ytu4XAXW45U8.roa (raw, json)
Hash identifier: g6z/fCVKzU8NyMvbklHoEHo9k7nM+Tv+JgDAMBXGXO4=
Subject key identifier: 5B:54:F2:A4:0F:1F:E0:FF:51:26:5F:B2:B6:EE:17:01:75:B8:E5:4F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2677
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W1TypA8f4P9RJl-ytu4XAXW45U8.roa
Signing time: Fri 22 Aug 2025 08:42:57 +0000
ROA not before: Fri 22 Aug 2025 08:42:57 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 45.64.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9847 (0x2677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:57 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5B54F2A40F1FE0FF51265FB2B6EE170175B8E54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:42:be:ab:66:fb:95:92:2c:85:5f:18:04:
4a:1e:ce:13:a2:ca:9e:bc:7c:8e:38:4e:7a:46:8a:
17:21:3e:3f:2e:60:5c:6a:cf:cf:aa:43:41:8d:de:
a2:47:ef:71:42:b2:da:27:36:06:8b:51:ff:4a:c5:
8b:f4:66:56:42:f8:f1:15:67:1f:3b:1d:1e:f2:4f:
0d:81:3e:3a:f6:14:47:95:d3:4b:86:66:a7:4a:ae:
8a:88:9c:32:de:b3:29:7c:d7:a0:2d:93:36:07:2f:
45:0c:db:c8:0d:dc:7b:f5:23:2e:7e:6b:63:56:66:
19:6d:da:42:4e:8e:2e:93:f1:c2:37:cc:da:d9:45:
5e:19:c9:41:d4:a4:e3:0c:34:0d:82:70:27:40:f9:
4b:b3:88:8f:93:a2:1e:6b:d9:9a:a6:38:20:85:d9:
8c:7e:95:96:ba:05:35:d5:fb:00:ba:d5:f6:06:55:
d8:f6:ae:ad:e3:1e:cf:e0:2c:4f:fa:e5:d3:78:c7:
20:0a:7c:f2:14:bd:c3:21:95:01:41:3d:53:14:36:
dd:f4:54:59:13:0a:23:e5:25:de:56:dc:06:fe:fb:
08:f4:ac:6a:c2:48:a4:a3:72:4c:a1:d4:94:bf:35:
25:d1:99:d4:a6:4b:8b:b8:04:56:85:4c:fa:14:cf:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:F2:A4:0F:1F:E0:FF:51:26:5F:B2:B6:EE:17:01:75:B8:E5:4F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W1TypA8f4P9RJl-ytu4XAXW45U8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.32.0/22
Signature Algorithm: sha256WithRSAEncryption
13:57:e6:64:80:3d:63:28:5f:2e:80:79:4b:ee:39:c9:bf:49:
db:e3:ce:56:ef:3d:99:b7:99:eb:a7:76:c6:5c:48:52:4d:5d:
32:89:bd:28:f8:49:af:eb:ee:c5:e3:43:98:88:1f:a4:03:db:
76:d3:63:6f:db:42:79:3e:cc:1e:73:89:57:66:2e:d0:79:ab:
9a:bb:e2:3c:34:b9:0b:e4:3d:de:56:3d:fe:3f:4d:fd:49:f6:
f0:35:4a:55:ee:8f:c8:bc:91:ab:cd:66:5a:15:d1:51:a5:bd:
a0:74:1f:f5:07:db:fc:0b:c5:8c:cc:2f:8e:e9:54:3c:ed:36:
10:fb:3f:0f:3a:c0:16:8f:b1:d5:cf:ea:da:d3:59:89:47:83:
74:fc:ed:0c:fa:77:14:04:74:6a:59:96:07:79:8b:bf:d6:c7:
c1:0d:d9:ae:72:ec:0b:3a:96:18:97:c3:bb:45:b5:47:7a:01:
2b:1b:fc:2a:f4:a3:7f:62:30:6e:22:69:7c:2e:2b:eb:fd:7b:
c1:60:e0:1e:1b:5a:b1:67:de:e8:32:08:21:c3:a4:47:17:8f:
e6:fa:8a:e0:1c:97:76:b5:d9:42:4e:95:c4:eb:13:9e:35:40:
56:64:e7:5c:0e:b3:5f:13:55:05:40:fd:64:f0:92:ef:9f:a4:
05:74:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:26 2025 by rpki-client