
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa
File: fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa (raw, json)
Hash identifier: BtzqWuxdrCv09e+WdVE+AlYHLXIj5etXloWAZ1obsMY=
Subject key identifier: 7C:7D:53:8E:3E:85:BB:CD:D3:99:4A:D5:AA:C2:BD:70:86:12:E5:A9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26C3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa
Signing time: Fri 22 Aug 2025 08:43:13 +0000
ROA not before: Fri 22 Aug 2025 08:43:13 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9924
IP address blocks: 114.198.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 07:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9923 (0x26c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:13 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7C7D538E3E85BBCDD3994AD5AAC2BD708612E5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:96:ec:89:2e:87:63:af:fa:d7:7b:c9:b6:
3b:f6:b6:53:82:41:d4:b3:c9:68:59:e4:c1:fb:de:
82:51:34:c7:09:d4:fd:24:41:a3:50:f2:7b:4a:fb:
73:b1:0e:14:b6:4c:3f:9f:2b:51:da:16:ce:27:1e:
63:ab:ec:83:ce:98:a4:67:ce:a3:dc:bd:12:c8:ec:
79:a6:5e:99:f5:23:ae:c7:28:e9:0f:84:8b:2b:81:
d6:d4:03:04:f8:67:69:bb:40:c2:c8:c6:a1:4f:63:
ad:ce:46:16:7f:e0:9f:31:c9:8c:f3:68:3e:29:9a:
a2:27:b1:95:eb:88:6f:2f:8b:c1:bf:24:63:8e:72:
1e:7d:a5:e6:23:6c:4a:4e:86:5d:af:af:17:aa:63:
33:58:de:6c:9f:47:a9:d6:49:cf:03:79:c4:62:f9:
b8:c8:a0:b7:90:be:89:aa:55:67:01:be:e4:62:97:
0a:27:6e:1d:77:1d:48:1e:16:73:8c:38:c5:09:0c:
22:3e:24:da:29:ee:e5:e5:f5:99:fe:54:49:14:d9:
90:21:a1:d1:f3:5c:db:1b:ea:34:80:b2:1d:ec:a1:
75:51:0b:90:07:9b:1a:b2:1a:76:b9:49:b1:33:6b:
81:d2:c8:f8:68:19:c2:e1:ce:13:96:c5:84:d4:5d:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:53:8E:3E:85:BB:CD:D3:99:4A:D5:AA:C2:BD:70:86:12:E5:A9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
15:0d:15:0b:8d:48:7c:37:84:be:a9:a3:ba:25:52:ce:66:9d:
d6:5d:0e:13:fc:ce:a3:8c:ea:82:0a:92:8e:0b:98:56:07:1d:
35:8c:f3:00:de:2f:3a:f7:64:af:b0:ac:4e:c8:6c:b4:9b:32:
9c:7a:78:11:c5:1f:2f:c1:17:b3:7b:0f:a4:a6:81:6c:d0:96:
d3:45:bd:4e:ef:58:90:75:54:62:9c:95:5b:2c:f7:ef:34:fe:
fb:80:47:be:24:29:53:57:6f:3d:e1:03:d9:7d:a9:7d:b8:38:
e5:24:2a:6a:81:f8:47:fb:0b:8b:21:4c:b9:ec:2a:a5:23:d4:
47:9d:19:24:87:29:58:16:a4:38:35:ff:77:4f:36:79:f5:79:
88:51:0d:97:0a:af:6d:97:9a:b7:6e:22:ad:b0:ff:66:74:a9:
54:1a:d4:ed:50:7e:7c:bb:9f:2a:fb:24:4f:06:65:4f:e6:8f:
fe:ff:ff:37:8e:82:53:2a:2f:87:f4:a8:67:aa:93:25:10:79:
e3:ad:f7:90:b5:b4:b2:a8:b0:5d:23:3b:bc:94:95:10:68:67:
8e:62:f2:5e:71:0c:24:8a:98:e7:8c:dd:0c:06:6a:21:4e:86:
b8:32:85:7d:fb:fa:ae:73:6b:2f:ee:f4:f2:65:e7:0d:3f:91:
2d:ca:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 04:48:24 2025 by rpki-client