
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/phrKqip4vF9ys40sYg7b3jzL0IA.roa
File: phrKqip4vF9ys40sYg7b3jzL0IA.roa (raw, json)
Hash identifier: AMWw6yei4p8mKC6XgO0HeLjMRJX/JG2noDDiISR6ffo=
Subject key identifier: A6:1A:CA:AA:2A:78:BC:5F:72:B3:8D:2C:62:0E:DB:DE:3C:CB:D0:80
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 264B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/phrKqip4vF9ys40sYg7b3jzL0IA.roa
Signing time: Fri 22 Aug 2025 08:42:47 +0000
ROA not before: Fri 22 Aug 2025 08:42:47 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 180.218.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9803 (0x264b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:47 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A61ACAAA2A78BC5F72B38D2C620EDBDE3CCBD080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7f:44:cd:76:1b:8e:a2:e0:97:f6:94:60:c4:
8e:07:88:f6:e7:23:42:ba:e4:ea:b0:c2:72:a6:2b:
d6:ed:2d:b5:2b:26:f8:d7:9d:c1:04:1f:24:53:39:
cc:71:26:dd:d6:8c:d1:28:d7:22:ae:7c:a8:a2:a4:
48:0b:a5:f5:e4:3f:4a:0d:c9:04:21:5e:7b:28:31:
ca:0c:cb:ee:be:9b:a9:c7:86:c1:38:69:db:d3:25:
9e:d2:7d:1c:bc:ba:94:b9:16:8e:fa:90:ec:b1:cf:
d0:11:7b:dd:8a:a6:98:ae:d9:7a:a7:be:66:df:cc:
57:9b:53:88:95:61:bf:30:16:46:4a:d0:2f:90:d3:
6c:06:fe:9e:70:44:06:81:7e:87:d8:89:89:37:d3:
f6:64:c9:c6:22:23:eb:c6:44:f4:16:e5:08:db:b2:
18:4e:07:66:d3:84:bc:6e:4f:3e:0d:e7:5a:89:7b:
97:92:30:82:ba:0b:f8:49:67:ee:b6:da:74:d0:4d:
48:bc:67:02:88:25:2c:f7:c9:4d:98:eb:d9:55:71:
74:f4:31:f2:4a:fc:06:d7:54:9a:38:18:63:9a:00:
cd:00:27:74:5c:d6:1a:86:8f:4b:69:f3:d7:02:d6:
88:2c:09:d7:46:58:64:f7:2d:00:8c:07:c2:3c:e4:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:CA:AA:2A:78:BC:5F:72:B3:8D:2C:62:0E:DB:DE:3C:CB:D0:80
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/phrKqip4vF9ys40sYg7b3jzL0IA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
71:94:65:03:28:78:07:6e:d3:3b:25:8c:cf:95:16:80:a2:81:
82:8b:85:2d:1d:a5:54:b8:33:38:06:1c:1e:13:89:e6:d0:06:
63:5c:9b:e2:ef:a2:5c:c1:8d:b1:2d:93:b3:7c:c7:97:4f:22:
d8:d5:96:00:6c:b3:14:45:b4:ff:8c:f8:c5:b5:32:b1:4b:f1:
3b:d3:ce:76:2c:1c:68:77:84:22:03:0d:79:23:20:d2:67:5a:
cc:91:69:8a:cf:6b:58:38:7c:7d:29:59:8e:24:82:29:1d:43:
a5:15:31:30:be:e3:91:64:f5:ad:0b:16:10:91:9a:f3:ef:6f:
3a:39:a5:f2:a6:be:1b:c0:7a:ab:26:cf:12:20:13:e0:b3:36:
bd:0a:60:9e:e3:b2:10:67:2d:c3:dd:f1:4c:31:f7:26:fc:31:
15:dc:f0:58:af:19:12:f4:53:38:fd:7c:03:26:e3:95:cf:e6:
03:b6:9d:43:c2:0d:b3:09:b7:0c:63:1b:c4:52:bd:09:82:6b:
50:70:9c:b7:6d:30:e7:9f:dc:6d:df:e8:67:9c:7a:25:f0:03:
d1:3e:d9:02:79:13:86:ca:5c:12:f8:13:e2:89:1a:07:12:5e:
25:24:fb:b2:36:c1:ef:66:9c:3f:1d:ce:a9:80:a5:c7:56:2a:
38:e6:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:50:42 2025 by rpki-client