
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/spJFxSs9YcK7MrV0OlQzLRLVp-M.roa
File: spJFxSs9YcK7MrV0OlQzLRLVp-M.roa (raw, json)
Hash identifier: QiEGRucEZCD9QObmi4it5z3mizDIQFR5LRhnQDKI2wg=
Subject key identifier: B2:92:45:C5:2B:3D:61:C2:BB:32:B5:74:3A:54:33:2D:12:D5:A7:E3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26CE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/spJFxSs9YcK7MrV0OlQzLRLVp-M.roa
Signing time: Fri 22 Aug 2025 08:43:16 +0000
ROA not before: Fri 22 Aug 2025 08:43:16 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24165
IP address blocks: 45.64.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9934 (0x26ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:16 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B29245C52B3D61C2BB32B5743A54332D12D5A7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:22:1d:ab:a2:f2:bc:25:59:ab:02:8f:41:
34:52:b9:00:ed:4d:eb:cf:cc:34:f4:87:b2:22:e5:
9b:9b:d2:35:fa:ea:31:ef:59:f1:8a:60:93:3c:1e:
41:d2:13:7c:3a:6b:59:0a:de:a0:8b:35:16:cf:ab:
df:43:ed:2b:c3:61:1c:a1:06:e8:3d:39:a3:d4:3c:
ac:e6:f1:1f:5e:85:b1:c8:85:39:e7:60:8e:4f:86:
02:58:b0:4d:c8:a5:c0:17:b1:5d:ea:18:d9:bd:2d:
37:91:ac:8e:6c:d8:92:8c:2e:a0:6f:4d:42:cb:93:
73:46:6f:d1:61:98:2c:80:b3:62:4c:86:d2:6f:69:
8e:12:6a:60:2f:c3:8f:57:40:26:54:0b:68:f0:0a:
1d:af:57:0e:3a:ef:d2:04:84:98:ff:f0:70:81:e6:
ca:03:df:8d:56:1e:ef:84:22:b3:98:35:6a:60:f4:
33:1e:02:c0:ce:a9:9e:f6:10:ce:52:c5:81:70:30:
1d:fc:b7:ab:01:dd:f5:3c:92:f2:f6:f3:fd:b7:d1:
c8:28:44:04:16:9d:a3:9b:69:a8:e5:3d:93:8f:67:
4b:d2:24:ba:18:59:86:9c:a6:b5:97:53:f0:5e:9f:
1e:b9:c3:2c:d6:d6:e9:25:55:67:83:62:c9:75:24:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:92:45:C5:2B:3D:61:C2:BB:32:B5:74:3A:54:33:2D:12:D5:A7:E3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/spJFxSs9YcK7MrV0OlQzLRLVp-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.34.0/24
Signature Algorithm: sha256WithRSAEncryption
03:56:7e:48:b9:b1:a2:66:43:bb:9a:4d:32:de:0b:f4:9e:2f:
9e:43:d5:ee:a1:55:53:c4:94:45:f3:49:19:2a:0c:31:f6:5a:
6b:12:6c:6c:f5:b1:b2:11:17:e3:75:e7:b9:ff:a9:48:41:a9:
e3:8f:f8:a4:36:85:a6:79:ce:0c:c2:ca:af:ab:e5:85:5e:d3:
56:12:d7:6e:32:c7:f8:b3:84:41:77:56:5d:ea:d7:e7:33:ca:
5d:e0:08:57:24:eb:fa:5b:9c:5f:52:ca:8f:90:a7:e6:e7:14:
d3:c6:cc:22:99:ec:22:37:3a:2c:29:a3:57:28:17:24:c2:c9:
d0:d6:4b:91:f3:f9:2a:12:d5:20:af:19:4b:f5:85:c2:a5:60:
91:34:69:99:4f:b9:42:38:7a:ae:7f:2b:97:08:d1:8e:76:3f:
29:77:84:ea:a4:a8:86:48:20:4d:9d:51:eb:dc:f8:60:7b:4d:
77:d5:6d:91:7d:b4:91:44:a0:d8:57:2a:35:d0:0f:2b:5f:d7:
71:02:0a:27:2d:20:55:0a:17:33:52:33:11:a0:ea:93:65:5f:
e8:3d:90:77:8b:38:a3:89:39:25:ba:10:34:8c:ce:10:e7:ca:
ef:36:08:ec:05:cb:fe:c2:dd:a3:e6:2a:62:02:dc:e7:17:19:
4e:8c:7f:fb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQzMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIyOTI0NUM1MkIzRDYx
QzJCQjMyQjU3NDNBNTQzMzJEMTJENUE3RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqGiIdq6LyvCVZqwKPQTRSuQDtTevPzDT0h7Ii5Zub0jX66jHv
WfGKYJM8HkHSE3w6a1kK3qCLNRbPq99D7SvDYRyhBug9OaPUPKzm8R9ehbHIhTnn
YI5PhgJYsE3IpcAXsV3qGNm9LTeRrI5s2JKMLqBvTULLk3NGb9FhmCyAs2JMhtJv
aY4SamAvw49XQCZUC2jwCh2vVw4679IEhJj/8HCB5soD341WHu+EIrOYNWpg9DMe
AsDOqZ72EM5SxYFwMB38t6sB3fU8kvL28/230cgoRAQWnaObaajlPZOPZ0vSJLoY
WYacprWXU/Benx65wyzW1uklVWeDYsl1JBpvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUspJFxSs9YcK7MrV0OlQzLRLVp+MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NwSkZ4U3M5WWNLN01yVjBP
bFF6TFJMVnAtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QCIwDQYJKoZIhvcNAQELBQADggEBAANWfki5saJmQ7uaTTLeC/SeL55D1e6hVVPE
lEXzSRkqDDH2WmsSbGz1sbIRF+N157n/qUhBqeOP+KQ2haZ5zgzCyq+r5YVe01YS
124yx/izhEF3Vl3q1+czyl3gCFck6/pbnF9Syo+Qp+bnFNPGzCKZ7CI3Oiwpo1co
FyTCydDWS5Hz+SoS1SCvGUv1hcKlYJE0aZlPuUI4eq5/K5cI0Y52Pyl3hOqkqIZI
IE2dUevc+GB7TXfVbZF9tJFEoNhXKjXQDytf13ECCictIFUKFzNSMxGg6pNlX+g9
kHeLOKOJOSW6EDSMzhDnyu82COwFy/7C3aPmKmIC3OcXGU6Mf/s=
-----END CERTIFICATE-----
Generated at Sat Oct 25 06:50:47 2025 by rpki-client