
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/coKp9pDa9PN53mxk2T8DRqN3Nus.roa
File: coKp9pDa9PN53mxk2T8DRqN3Nus.roa (raw, json)
Hash identifier: PTwGaFagicXY224+7OinpB476w7Z256DofrD2RG62n0=
Subject key identifier: 72:82:A9:F6:90:DA:F4:F3:79:DE:6C:64:D9:3F:03:46:A3:77:36:EB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 25DB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/coKp9pDa9PN53mxk2T8DRqN3Nus.roa
Signing time: Fri 22 Aug 2025 08:42:19 +0000
ROA not before: Fri 22 Aug 2025 08:42:19 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24165
IP address blocks: 61.61.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9691 (0x25db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:19 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7282A9F690DAF4F379DE6C64D93F0346A37736EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:0d:55:b1:37:5b:24:bf:30:e7:8f:d6:b3:
97:f2:7c:54:7b:88:4f:1b:d1:e9:cd:8c:f5:c8:54:
f9:88:7c:20:4c:16:f3:d4:02:41:36:fc:13:7f:1c:
2e:78:c6:b5:ce:7d:4c:05:88:e7:a5:c4:8d:c9:33:
77:41:57:d5:c9:58:aa:a3:6d:75:2e:bb:fd:15:fa:
6e:a8:39:91:85:03:e2:8b:da:5b:9c:8c:00:54:f1:
b9:64:ee:15:e8:04:d2:c1:8b:9c:2d:39:9c:83:71:
16:05:93:85:6d:fb:04:a2:1d:50:86:32:dd:7c:25:
d1:e4:8d:be:73:9d:91:06:31:4c:0d:20:84:34:52:
0c:8e:43:8e:09:16:8b:fa:dc:98:13:ab:37:c1:6c:
97:30:c5:ef:fa:c4:a3:81:4d:75:45:90:e2:7b:e8:
93:7f:c1:cb:1f:8d:79:37:fd:d5:96:da:8b:ee:93:
fa:eb:82:16:d7:8b:8b:05:df:6d:54:85:6d:67:08:
42:a2:2d:38:33:7c:2d:84:7f:78:29:4f:74:c7:15:
4f:7a:eb:69:33:a1:95:c3:f9:3b:4f:d8:5d:d6:79:
e1:4a:df:42:5c:49:4e:0d:9a:83:53:1d:2c:1d:40:
2d:a5:6c:e6:a0:69:59:ef:33:b0:07:cd:18:59:bc:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:A9:F6:90:DA:F4:F3:79:DE:6C:64:D9:3F:03:46:A3:77:36:EB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/coKp9pDa9PN53mxk2T8DRqN3Nus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.213.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a4:f2:aa:5f:94:26:9b:65:c8:9f:48:24:b6:aa:1d:2f:3c:
76:5f:6a:00:16:1c:f5:82:cf:41:0d:11:cb:60:05:d1:3a:93:
95:7a:b5:d1:6a:37:5e:3e:55:ab:0b:f3:8c:a6:01:c1:8a:8e:
74:19:57:fc:7c:3c:44:21:99:1d:72:5b:81:4b:b7:83:18:cc:
57:4b:ba:a7:43:76:e7:68:ca:64:f0:b7:c3:19:bd:90:01:34:
ff:fc:52:4f:ba:e8:dc:48:7a:90:f9:56:24:04:fc:3c:20:df:
6f:fc:9a:06:cb:f4:83:ea:b3:1a:09:59:e5:41:74:4c:08:e7:
90:5c:a3:55:68:2c:65:61:7f:64:78:3a:1e:f0:6e:79:a5:33:
20:57:f2:84:31:77:fe:31:91:69:11:41:c1:71:2c:e6:59:a3:
21:b2:9a:34:19:2b:b0:d1:37:37:0c:ba:4e:de:95:14:c5:3a:
d0:09:02:11:03:3c:1c:d2:4b:06:e9:e4:4c:8e:5b:eb:87:ac:
e6:82:31:be:87:8b:e8:03:b7:94:46:76:87:f9:fd:7c:5e:0a:
6d:2a:84:78:30:68:86:c7:80:c8:99:5e:0c:d1:6d:f1:9c:e0:
9f:e2:f6:00:a4:73:d2:82:f4:c9:9c:89:57:06:01:8c:29:63:
e7:cb:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:49:16 2025 by rpki-client