
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jhjM5ll_CpJJKO65mivmVcfpjds.roa
File: jhjM5ll_CpJJKO65mivmVcfpjds.roa (raw, json)
Hash identifier: 3pcgWIsoXK9TINXSYF8vEV+MKc1CW6/LgoHDFBd2634=
Subject key identifier: 8E:18:CC:E6:59:7F:0A:92:49:28:EE:B9:9A:2B:E6:55:C7:E9:8D:DB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 266F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jhjM5ll_CpJJKO65mivmVcfpjds.roa
Signing time: Fri 22 Aug 2025 08:42:55 +0000
ROA not before: Fri 22 Aug 2025 08:42:55 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 211.76.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9839 (0x266f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:55 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8E18CCE6597F0A924928EEB99A2BE655C7E98DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:bf:6f:a1:fe:28:bc:5d:4e:83:e1:b4:9e:
fb:c7:09:38:d8:f0:95:07:f8:40:eb:7a:68:d7:10:
6d:29:b4:80:20:f4:dc:44:a5:9e:72:88:58:07:b4:
b0:c2:91:1b:c3:ca:a0:14:f2:e6:f0:a5:23:1a:da:
0e:1c:8e:f1:fa:2f:3a:68:eb:b4:a9:26:b5:46:3b:
1e:34:c4:f6:e2:21:6a:1a:2c:97:73:0c:6d:f9:85:
e4:1c:37:d0:e3:ac:69:5a:3b:76:3b:68:5e:66:1d:
49:02:3b:66:76:94:ee:60:73:a9:33:77:5d:59:30:
2f:f2:87:d4:ba:f6:9c:da:65:7c:ba:1f:4c:78:5f:
d2:1a:dd:47:8f:32:8d:db:13:35:a1:46:f8:e5:6a:
1d:1a:eb:b3:69:9a:bb:9b:8f:eb:25:f0:b1:70:3a:
f3:10:93:b8:70:ca:e2:7a:f9:c5:31:3a:39:04:09:
bb:fc:ab:75:39:1a:64:ad:bb:08:3b:ba:f5:6a:19:
d3:9c:55:6f:91:f0:c2:03:f6:ee:8a:6b:fc:17:ce:
da:93:29:58:49:59:5e:f2:4a:9e:e1:fc:d0:36:05:
8f:8b:28:53:c5:57:b4:16:4a:c5:d0:54:89:5b:ee:
d0:44:5d:47:ca:77:12:36:30:5d:12:1e:41:ee:b4:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:CC:E6:59:7F:0A:92:49:28:EE:B9:9A:2B:E6:55:C7:E9:8D:DB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jhjM5ll_CpJJKO65mivmVcfpjds.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9c:1e:c7:28:2a:76:f1:11:65:8e:e3:9c:1d:3c:41:00:ea:
11:b0:7e:5f:a7:78:04:b0:56:57:5f:d3:1f:35:79:98:37:21:
17:ef:8d:38:45:79:60:2d:ac:bb:20:7a:9c:86:a0:ab:18:5e:
2e:db:8e:e1:32:a0:f9:ab:a5:36:8c:de:6d:c0:29:4b:cd:a9:
e3:9f:c8:1f:68:6a:22:bb:b7:b1:dc:ea:2f:87:75:14:2e:c6:
45:67:06:80:70:86:6c:b0:ee:1c:18:fb:4f:ab:b7:01:f6:82:
94:ee:a3:fa:06:cc:d6:05:c5:e0:0e:2a:cc:1a:39:8a:d6:b3:
32:4b:50:05:be:e1:83:ed:7d:ef:f7:d1:5e:b6:76:ed:73:7f:
84:ca:73:73:94:b6:e5:32:43:68:bd:62:fd:b6:94:34:70:52:
f4:75:65:e9:a0:93:0f:18:73:31:ea:98:63:4b:26:ed:cc:87:
79:b9:3e:95:de:fc:46:c8:d5:b1:31:0c:9f:86:7a:30:0b:db:
32:9b:f4:b6:3d:2a:aa:04:55:86:a5:ee:71:b4:ba:84:40:c1:
7a:d0:3c:4e:07:f7:54:91:b4:f9:b6:45:1a:f2:4c:5b:53:bb:
8e:51:23:8c:39:77:3a:de:fc:d3:85:2a:81:46:34:38:80:68:
4d:76:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:37 2025 by rpki-client