
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_kIL5STQoW2zQdZwfJIgUMHyjJE.roa
File: _kIL5STQoW2zQdZwfJIgUMHyjJE.roa (raw, json)
Hash identifier: u0o+VsVysLWKQYcxaUo87/3WBp7wePqme8qxie0V7A0=
Subject key identifier: FE:42:0B:E5:24:D0:A1:6D:B3:41:D6:70:7C:92:20:50:C1:F2:8C:91
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26B3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_kIL5STQoW2zQdZwfJIgUMHyjJE.roa
Signing time: Fri 22 Aug 2025 08:43:10 +0000
ROA not before: Fri 22 Aug 2025 08:43:10 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24165
IP address blocks: 61.58.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9907 (0x26b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:10 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FE420BE524D0A16DB341D6707C922050C1F28C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:e0:0e:03:e8:29:8b:ca:aa:39:3a:ce:8d:
e4:39:af:e9:25:1b:5e:5d:d3:74:ed:ee:95:0a:56:
29:c3:7a:ef:46:f4:e9:66:96:50:e4:16:a6:15:8a:
d1:47:d1:bc:e5:3b:3f:26:4b:c1:7d:5e:b0:b5:e0:
37:77:25:54:7b:4d:4c:7b:61:c2:b1:7f:ba:73:be:
00:df:bb:77:d1:7b:f6:7e:82:eb:d8:2e:4b:b5:e7:
ab:23:54:22:95:a2:05:28:7d:2c:0f:1d:75:f7:a2:
dd:36:32:ef:a9:7c:ee:9f:94:86:8e:94:59:25:2b:
23:3e:11:fe:9e:07:13:42:c9:4b:c6:4e:e2:b3:e6:
29:13:3e:ed:48:7e:91:a7:dd:a7:07:6f:91:2d:ec:
92:dc:c5:01:ff:51:1b:8f:58:a6:b3:bf:bf:9c:9e:
47:ff:9e:e2:6e:61:b4:1c:84:d0:af:e8:93:cc:8a:
59:14:94:f8:a4:7c:e2:ac:bf:71:97:24:a7:fd:59:
48:67:19:45:2c:0f:ad:9b:c5:7e:7b:69:a7:a3:5f:
65:a7:79:38:93:7a:c4:18:89:9d:b9:83:ab:d6:ad:
2f:7b:5c:9e:11:bd:21:72:3f:2e:07:82:20:bd:2b:
d3:62:a5:d9:17:fe:60:7e:10:64:56:3f:ce:5e:ff:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:42:0B:E5:24:D0:A1:6D:B3:41:D6:70:7C:92:20:50:C1:F2:8C:91
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_kIL5STQoW2zQdZwfJIgUMHyjJE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.120.0/22
Signature Algorithm: sha256WithRSAEncryption
30:92:51:db:e5:38:76:5b:b3:0e:7c:79:b2:89:8b:71:d0:b8:
8b:16:6a:3f:3b:c6:72:64:74:6c:ac:27:3d:c9:ac:b2:5c:28:
ce:76:f0:08:cc:87:c8:02:e2:0b:9d:16:02:ce:b6:9c:7f:fa:
b8:56:1e:44:f5:c9:ef:b3:c9:5d:df:e5:af:67:23:37:fa:e7:
49:6f:7d:f8:b9:15:25:5a:22:42:94:cb:80:31:c0:88:04:a2:
b8:a9:8e:4c:46:e0:55:bb:6d:5e:f2:ab:73:74:0d:21:67:c5:
8c:44:a8:fe:a6:b6:29:b7:13:d5:60:9d:a1:89:15:60:a7:d1:
26:2e:3d:9a:1e:8f:d4:44:bf:2c:d7:67:67:90:59:c9:e9:e5:
e4:51:6e:89:e3:e2:54:b5:35:42:36:f7:2d:94:a8:90:b0:c0:
31:2f:12:58:e3:3b:90:2f:67:ae:26:6c:eb:c3:63:bb:39:30:
07:3c:46:8b:e0:89:9b:ad:4b:d5:99:d6:22:03:f4:b2:b8:af:
80:79:22:35:d8:70:34:3f:13:a2:c6:8d:43:df:ca:ce:75:97:
a7:67:32:53:1f:86:08:b9:bc:a7:4e:1c:73:3d:db:eb:f3:a9:
fb:fa:8a:40:27:5e:4f:df:21:45:c8:e4:0b:04:2e:b3:2e:fe:
1b:bf:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:50:48 2025 by rpki-client