
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa
File: uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa (raw, json)
Hash identifier: 02XSBEYfDPVPHEpxuXLBcasHGxEeGCqamkJXxiJJn8k=
Subject key identifier: B9:17:DF:41:24:CA:DD:D1:7F:A8:D9:F8:B9:48:24:99:01:10:D7:13
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 268A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa
Signing time: Fri 22 Aug 2025 08:43:01 +0000
ROA not before: Fri 22 Aug 2025 08:43:01 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4662
IP address blocks: 123.0.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9866 (0x268a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:01 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B917DF4124CADDD17FA8D9F8B94824990110D713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:17:d8:1c:a6:8b:71:e2:0c:75:13:4b:88:
7d:1f:ae:b6:60:0c:85:a5:ad:c8:d1:c6:f2:32:12:
2e:99:5b:59:21:c5:18:2a:c4:38:f2:84:e4:db:d7:
24:31:51:b7:7d:b5:e1:85:eb:f6:9b:ab:58:e1:3b:
39:ff:29:b5:49:af:ba:b9:14:93:33:9e:c2:32:59:
07:1a:d4:9a:7a:9c:b8:e2:02:75:be:f4:b6:06:33:
cf:32:20:04:e4:12:ef:c9:64:66:c0:9e:ee:a8:f6:
d4:d2:cd:85:04:7c:7e:1b:d0:24:a7:9c:e2:e5:98:
20:06:74:fb:15:36:c6:29:ce:de:fe:ca:75:cf:d3:
71:d9:9d:90:f5:9d:f0:a9:6d:90:4d:8c:66:be:61:
e3:f2:af:65:36:f8:38:4a:10:2f:1f:8f:0d:73:13:
96:44:6d:1b:e9:17:d4:9a:60:d6:e1:a2:3e:af:d9:
79:0e:de:54:8f:16:d1:13:5a:e4:72:53:84:ac:e5:
17:0e:31:45:21:1b:f0:ea:06:70:82:b4:bb:7e:a6:
7c:18:f5:62:c8:cf:c9:56:30:85:83:f8:21:e5:43:
bf:cd:69:80:6e:4a:fa:4d:cf:9e:5a:0d:41:a3:89:
49:cf:f1:ef:9a:0e:f1:c0:33:84:f7:ed:67:bc:31:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:DF:41:24:CA:DD:D1:7F:A8:D9:F8:B9:48:24:99:01:10:D7:13
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:43:2e:49:4e:18:12:d3:a3:ab:d1:e9:18:d6:b5:38:41:d7:
35:86:ba:a1:ef:b3:17:bb:41:14:98:36:11:8e:66:63:21:5a:
79:f0:2e:c5:1c:59:75:ad:de:af:c6:be:1c:7c:06:64:3e:07:
1a:08:d3:0e:bf:76:21:b0:d7:3f:98:88:83:e4:10:1e:20:53:
1d:0c:28:5b:e2:e9:4e:05:2f:06:a1:10:ba:ac:77:01:61:d4:
b8:cb:dd:59:27:ea:b7:98:dc:f9:8e:d9:da:7d:3d:5b:21:ec:
b2:7c:1b:76:40:d9:c1:81:b8:1c:ee:61:93:d6:1e:82:ff:f5:
9b:2c:b1:c9:59:ab:a3:14:ba:68:bc:50:29:00:83:4e:23:c0:
2a:b8:31:53:38:1c:79:e8:18:6f:a1:a4:f7:ab:e9:63:53:42:
52:bd:9d:94:b9:8d:c3:6c:ef:0d:ea:6b:be:e5:71:de:9f:db:
bd:2f:4a:c6:b7:26:37:24:ed:e3:d3:cc:fb:40:bd:9f:8e:e2:
17:e4:6d:74:cd:c4:c8:13:6d:e3:8c:91:b8:1f:5f:f9:72:42:
bb:74:c4:44:eb:a6:1e:34:ff:27:8f:67:54:a4:d3:8b:ec:85:
04:6a:57:33:86:08:ed:40:5c:cd:34:02:11:6d:da:d9:8e:55:
85:94:fc:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQzMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI5MTdERjQxMjRDQURE
RDE3RkE4RDlGOEI5NDgyNDk5MDExMEQ3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwWhfYHKaLceIMdRNLiH0frrZgDIWlrcjRxvIyEi6ZW1khxRgq
xDjyhOTb1yQxUbd9teGF6/abq1jhOzn/KbVJr7q5FJMznsIyWQca1Jp6nLjiAnW+
9LYGM88yIATkEu/JZGbAnu6o9tTSzYUEfH4b0CSnnOLlmCAGdPsVNsYpzt7+ynXP
03HZnZD1nfCpbZBNjGa+YePyr2U2+DhKEC8fjw1zE5ZEbRvpF9SaYNbhoj6v2XkO
3lSPFtETWuRyU4Ss5RcOMUUhG/DqBnCCtLt+pnwY9WLIz8lWMIWD+CHlQ7/NaYBu
SvpNz55aDUGjiUnP8e+aDvHAM4T37We8MVLPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuRffQSTK3dF/qNn4uUgkmQEQ1xMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VSZmZRU1RLM2RGX3FObjR1
VWdrbVFFUTF4TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
ACAwDQYJKoZIhvcNAQELBQADggEBAJxDLklOGBLTo6vR6RjWtThB1zWGuqHvsxe7
QRSYNhGOZmMhWnnwLsUcWXWt3q/Gvhx8BmQ+BxoI0w6/diGw1z+YiIPkEB4gUx0M
KFvi6U4FLwahELqsdwFh1LjL3Vkn6reY3PmO2dp9PVsh7LJ8G3ZA2cGBuBzuYZPW
HoL/9ZsssclZq6MUumi8UCkAg04jwCq4MVM4HHnoGG+hpPer6WNTQlK9nZS5jcNs
7w3qa77lcd6f270vSsa3Jjck7ePTzPtAvZ+O4hfkbXTNxMgTbeOMkbgfX/lyQrt0
xETrph40/yePZ1Sk04vshQRqVzOGCO1AXM00AhFt2tmOVYWU/B8=
-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:09 2025 by rpki-client