
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa
File: mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa (raw, json)
Hash identifier: WLx8c9h9Cixxfa5uhiWmjEG1FPdjEmZmlsOD1AQlHTk=
Subject key identifier: 9A:9F:CE:F5:83:0F:67:D3:D6:5D:20:F2:48:16:BB:1D:E4:BB:22:4B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 25DF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa
Signing time: Fri 22 Aug 2025 08:42:20 +0000
ROA not before: Fri 22 Aug 2025 08:42:20 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 180.218.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9695 (0x25df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:20 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=9A9FCEF5830F67D3D65D20F24816BB1DE4BB224B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:95:6f:56:a4:a8:2d:1f:95:f9:8d:27:c7:
02:86:4c:bf:53:21:0f:0f:6d:09:29:50:26:13:65:
12:10:84:b6:6b:94:44:5e:ad:a3:66:1b:06:42:8f:
21:40:f6:81:ef:45:6b:d2:a9:8c:a2:6c:81:95:31:
d9:cc:ff:c1:70:48:23:82:8b:c6:61:96:8f:22:88:
e8:a5:f4:64:c3:c5:14:7c:e5:04:b2:ef:59:47:34:
c6:a4:4d:4e:52:93:64:51:ed:2d:44:76:f7:6e:a0:
4f:02:e3:24:0e:05:ef:b7:f2:59:56:81:cb:a6:4d:
67:da:9f:d9:da:72:53:0e:cc:3f:b2:89:39:7f:b3:
3e:c0:99:31:50:86:61:e8:85:b3:14:46:ab:f5:17:
3c:5d:9e:37:bd:86:1f:f8:22:ff:6b:fb:6c:2a:63:
fc:fa:7f:fe:01:3c:a1:d5:74:d2:bb:ed:6e:d6:e9:
f0:2f:72:3d:27:fc:e0:57:0e:a2:c0:93:f3:2b:cc:
f9:3f:63:42:12:d2:a8:c7:8f:36:2e:71:0f:2b:d5:
61:16:40:8e:36:40:ec:da:09:cd:8b:52:3e:f8:34:
15:fd:f6:39:29:b5:47:6c:1e:31:eb:d2:ab:6e:73:
c5:c0:a6:49:10:00:20:bf:75:5e:70:3b:4e:a9:d1:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:CE:F5:83:0F:67:D3:D6:5D:20:F2:48:16:BB:1D:E4:BB:22:4B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
09:29:14:8e:41:f5:3a:2a:bd:18:b7:01:cf:88:4a:83:f3:f9:
86:90:f2:2a:f5:c8:b4:dd:2a:d7:35:93:41:22:93:0f:da:38:
9d:0f:e3:ee:71:2b:f0:6f:56:3d:0d:0d:37:c7:f7:51:5d:86:
a6:72:80:6e:d8:58:3c:0d:63:71:34:5f:e5:60:a3:43:e5:f5:
c4:0d:22:2a:10:fa:8d:f0:e5:5e:73:ec:d9:ed:1e:f5:06:54:
48:9c:5f:6c:31:bd:7f:b6:32:0a:95:8f:f4:7a:03:b4:2f:5b:
6a:ae:41:a5:2c:09:84:32:7f:48:40:39:82:80:4a:a5:36:0d:
34:df:4f:85:53:b4:2a:b2:a0:6b:19:db:a9:e4:f2:50:37:9c:
2e:61:ed:89:95:0f:07:e7:17:19:20:2f:e6:e5:ce:66:15:31:
97:49:60:69:6a:35:3b:a3:f4:d6:01:5d:4a:47:a4:61:8a:a3:
b0:b6:3f:56:d8:bd:60:04:25:1f:df:1d:3c:20:84:c2:c6:b2:
b1:df:1c:c7:6d:10:fe:8d:33:db:1a:e4:a0:4c:f5:dc:e2:f4:
a9:18:8d:92:1c:5f:22:88:85:d5:05:52:38:0a:06:59:0e:51:
45:46:b0:b5:62:30:98:4e:e6:09:f2:16:00:8f:49:5c:e3:2a:
5e:eb:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:00 2025 by rpki-client