
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WOEhgcu29wkx0ssVNwG-fGqah80.roa
File: WOEhgcu29wkx0ssVNwG-fGqah80.roa (raw, json)
Hash identifier: 6bJEO7Z7iaAb/2055yFJn23U6OMzthmDpK5S+HsqiFo=
Subject key identifier: 58:E1:21:81:CB:B6:F7:09:31:D2:CB:15:37:01:BE:7C:6A:9A:87:CD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 267D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WOEhgcu29wkx0ssVNwG-fGqah80.roa
Signing time: Fri 22 Aug 2025 08:42:58 +0000
ROA not before: Fri 22 Aug 2025 08:42:58 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 49.158.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9853 (0x267d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:58 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=58E12181CBB6F70931D2CB153701BE7C6A9A87CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:99:2d:7a:63:0a:8c:36:ad:b6:f1:15:97:
c2:e7:25:eb:e5:08:ed:a9:38:be:bc:a8:1b:a7:19:
f7:24:c5:04:1a:f2:fe:dc:56:83:8d:be:a2:c1:1f:
05:eb:6f:97:fb:b5:ef:69:c2:8f:f5:3e:26:57:0e:
50:95:69:8e:67:ce:dc:43:78:0f:fe:fa:01:48:7f:
aa:5b:03:8e:68:8b:72:6c:8b:a7:8b:2b:0d:10:5f:
b3:4b:be:e9:92:6e:a2:61:e0:d0:ac:a8:fc:78:2c:
00:8b:a2:8f:ac:ad:2c:84:fa:eb:cd:25:27:5a:f3:
46:21:66:89:64:6c:1e:34:7f:19:f9:50:09:54:16:
5c:7b:ad:55:e1:d3:67:c2:2c:86:a5:14:d9:28:bd:
e4:da:4f:ff:9a:40:76:48:b5:16:1c:c8:6b:9e:fa:
2e:5d:47:56:cc:8c:35:3b:a2:8f:12:4f:0d:ec:36:
ea:83:cc:79:f9:7c:34:53:2c:ec:55:dd:25:21:93:
8b:a2:45:88:30:25:ba:2a:fa:c4:46:f4:7a:50:2d:
37:ec:6a:f9:7c:e8:be:72:9a:51:2e:0d:5f:f7:3f:
da:f5:bd:71:0d:30:2a:69:c3:f2:68:54:10:17:50:
e6:b9:a1:e1:99:bb:e4:6e:93:22:72:df:7f:a9:76:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E1:21:81:CB:B6:F7:09:31:D2:CB:15:37:01:BE:7C:6A:9A:87:CD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WOEhgcu29wkx0ssVNwG-fGqah80.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.184.0/21
Signature Algorithm: sha256WithRSAEncryption
19:36:8a:c7:a1:2f:df:a9:f6:07:d0:41:c9:63:6c:fb:11:02:
d0:96:91:5a:ec:c8:c4:2f:aa:b6:1c:fb:f8:29:79:8a:c1:a5:
c7:c0:ee:3a:6d:4b:b5:f9:40:2f:4a:20:67:f4:46:f2:81:4e:
ca:47:d1:a3:c7:69:ef:57:42:95:e7:e9:f9:e3:2b:c9:17:5d:
e4:bd:fe:8e:e4:f6:81:5b:ac:45:f7:a7:13:ed:2c:2e:7d:5f:
88:9f:b2:79:e5:7c:de:3c:f3:e1:9d:6d:90:db:bf:b0:6a:4a:
e9:c9:2f:8f:47:ac:90:b0:1e:e6:cc:49:06:de:ae:f2:7d:48:
59:77:59:0d:9b:c6:9f:e5:b0:56:75:27:60:b4:1b:cd:93:df:
df:50:15:82:d9:cc:c8:ad:82:65:be:cf:c7:27:5d:a3:57:9f:
b2:d9:43:54:80:06:be:d9:c5:70:87:ba:f0:04:31:1b:43:16:
5c:4d:ac:27:c9:9d:96:42:87:20:90:9d:a5:b1:1a:9b:c9:24:
65:ab:82:2b:70:84:1a:19:f0:13:00:37:21:b1:84:00:fe:79:
bd:88:88:ca:4a:f1:71:0c:b5:d5:6f:0f:f1:bf:7f:63:21:ff:
e5:df:f7:13:1b:87:44:19:79:34:68:c8:9e:2f:2f:a5:6c:04:
67:39:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:36 2025 by rpki-client