
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa
File: ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa (raw, json)
Hash identifier: W94FXYx5cJEaUyS1Ly7iioA9KNBvOit9J1mRLz+5MIQ=
Subject key identifier: A6:D5:53:03:D8:41:6D:D5:9F:35:15:8A:59:A2:37:16:24:46:3A:FE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2733
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa
Signing time: Fri 22 Aug 2025 08:43:39 +0000
ROA not before: Fri 22 Aug 2025 08:43:39 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24165
IP address blocks: 61.64.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10035 (0x2733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:39 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A6D55303D8416DD59F35158A59A2371624463AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:7b:8c:45:04:dd:0e:92:f9:97:3a:02:34:
ac:bb:d9:ad:0a:2f:36:2f:d3:ff:11:81:71:b0:f2:
44:53:f2:59:2f:c5:38:f6:2a:9f:3b:a5:0e:b3:7f:
69:02:8c:42:6f:0b:f7:a8:c0:4f:63:52:8a:07:dd:
ad:ad:c7:5c:5b:e6:b6:70:0f:46:46:b5:4c:6d:24:
0c:14:d3:3c:a6:23:8f:a7:b8:90:83:18:bf:d4:6f:
41:64:8c:38:16:67:51:fe:1f:44:2a:5c:3c:5f:da:
6b:8f:fc:2c:74:fc:16:12:c4:32:1c:d9:a6:23:93:
ec:99:e7:98:68:d2:27:ca:fc:51:0f:e7:6e:48:46:
19:0e:81:4b:70:af:29:18:c0:3c:ff:1d:f6:7c:b0:
b8:4f:73:0e:d2:dd:77:9c:a9:9c:a4:88:e3:c5:ff:
b6:0f:47:57:36:0d:8d:6f:d3:dd:e5:52:0d:96:4e:
ca:48:73:64:13:25:45:b8:4c:4a:c4:fa:e0:b1:27:
a2:3d:31:62:e9:0b:ff:ab:0f:d4:23:ad:0f:db:d7:
7b:6b:64:a5:f6:f4:00:46:27:13:aa:d3:d0:e5:76:
92:d4:f6:c5:aa:97:9a:07:9b:28:66:5d:11:38:ae:
a6:e4:bd:04:4b:ca:c8:b7:eb:ee:a6:98:bf:40:32:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D5:53:03:D8:41:6D:D5:9F:35:15:8A:59:A2:37:16:24:46:3A:FE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:9a:1c:3c:be:ee:12:67:74:45:f4:19:0e:1d:e9:c3:64:fb:
7f:07:cf:98:fd:2d:eb:b8:c1:0b:20:2e:31:bb:1c:b1:28:0d:
4a:9e:9e:b4:fb:27:e6:a1:00:5f:43:57:22:cf:19:51:96:c8:
6c:37:b9:a6:52:fd:2c:a8:90:36:51:2e:a7:f7:cb:0d:6a:a8:
2a:bb:50:a9:06:b2:0e:6b:5f:7c:44:9f:1e:43:e0:a3:ac:3f:
7b:07:a5:b3:8e:0a:2c:36:91:4b:c8:d1:4d:f9:94:c4:9d:b3:
bd:fe:b5:b2:2e:fc:47:47:e9:61:c0:5e:b3:6f:19:af:27:c3:
5b:dd:6d:33:d9:84:46:2a:b9:d2:02:37:19:ec:ee:89:a4:36:
e0:cd:f5:d9:64:a9:cc:56:df:bf:03:9c:69:23:4a:e4:0b:37:
61:ed:33:7c:4d:76:49:a8:cd:fc:3f:27:35:6d:bf:ea:a9:22:
26:59:7e:d2:2a:f5:ed:bd:f9:91:43:8b:58:c2:f9:53:62:5b:
db:53:78:b2:cf:42:aa:27:35:71:b6:7c:c0:66:1f:15:87:6a:
df:31:6a:63:fc:e8:30:94:3d:7e:0a:8b:a9:58:6a:90:66:26:
d6:87:f1:0a:57:89:a0:97:7b:66:71:ce:32:54:8a:c0:24:eb:
c1:27:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:50:50 2025 by rpki-client