
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vCE7XOwCMOrkUZFASdwmg6YYGvc.roa
File: vCE7XOwCMOrkUZFASdwmg6YYGvc.roa (raw, json)
Hash identifier: 1AYXJAPTNZS/HmIy+7IC1RsLirBcmEXpLCxt5CF41E4=
Subject key identifier: BC:21:3B:5C:EC:02:30:EA:E4:51:91:40:49:DC:26:83:A6:18:1A:F7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2660
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vCE7XOwCMOrkUZFASdwmg6YYGvc.roa
Signing time: Fri 22 Aug 2025 08:42:52 +0000
ROA not before: Fri 22 Aug 2025 08:42:52 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24163
IP address blocks: 180.218.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9824 (0x2660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:42:52 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BC213B5CEC0230EAE451914049DC2683A6181AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:8f:44:91:4b:cc:ea:0a:74:4d:5a:44:ff:
0d:3f:df:5d:53:8b:88:d8:ac:23:94:2f:55:cc:6a:
41:f4:e0:40:bf:e9:4c:56:39:9d:eb:ef:f9:a2:2b:
1c:a4:66:d3:e4:51:cf:bb:ed:86:b1:aa:06:e9:4a:
6d:19:f9:bb:a9:c0:a0:2a:c1:4b:10:fa:24:e9:1b:
cc:b1:12:d3:80:a6:e9:43:5e:db:cf:fa:21:92:02:
50:99:dc:5f:e0:b2:b7:ae:62:06:0a:1d:e4:36:3c:
6c:ac:cf:d7:82:88:6e:78:2c:e2:d6:c2:99:ec:59:
1f:83:72:26:eb:78:ac:98:a9:34:0c:9c:1a:85:1e:
53:8d:f0:e2:39:c2:be:b4:a3:99:e4:1d:73:93:20:
4a:0e:ac:46:c1:45:4d:c1:4c:e8:9f:9a:c9:ff:06:
7c:76:40:27:61:9a:84:4a:fd:e7:ee:d6:64:06:c3:
11:a3:65:b0:e1:fe:a6:52:7f:d1:e6:45:a1:58:0c:
f5:b7:d0:ca:25:be:b4:97:f7:3c:cb:2f:3c:e4:df:
77:91:5e:cb:70:c8:08:66:b8:ec:27:67:0a:b2:e6:
25:c7:f6:b9:68:a5:f8:b5:b4:63:61:19:23:e2:40:
0f:1d:fb:d9:13:ed:e0:eb:a9:9b:ac:59:a7:80:99:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:3B:5C:EC:02:30:EA:E4:51:91:40:49:DC:26:83:A6:18:1A:F7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vCE7XOwCMOrkUZFASdwmg6YYGvc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.240.0/21
Signature Algorithm: sha256WithRSAEncryption
60:e2:b4:2b:d4:32:d7:b2:dd:2a:18:54:d4:ec:c4:01:2d:c2:
34:67:de:b9:01:d1:db:04:c4:9b:b6:9d:f9:6d:8b:6f:04:9a:
b7:15:5b:6c:91:bc:7c:14:9e:e2:1c:83:c2:e7:ca:1d:fa:53:
71:27:be:02:b1:93:2e:b4:25:17:81:bb:87:60:c6:9f:9a:5c:
7f:e6:ad:1e:a9:22:69:c1:99:1e:71:b5:66:62:93:60:75:7f:
ba:e4:2f:a6:7e:52:d8:f4:34:4e:d2:d3:56:d2:ab:06:4f:89:
b3:de:43:86:23:30:c0:d4:35:27:a1:e9:96:27:18:54:8b:c6:
5f:17:72:90:ea:b5:37:8d:81:ff:6f:c8:78:0f:1d:d6:bc:ac:
c0:f6:15:ba:a7:d6:05:ac:01:40:2d:8a:0d:d2:a3:cb:fd:44:
d9:60:bb:f0:7f:1b:1a:04:53:55:15:bf:16:bf:d5:e0:cd:61:
55:97:59:99:a6:25:28:ee:06:fb:a5:e0:78:eb:5e:8a:04:fc:
91:7d:7a:90:fd:cc:dc:3b:09:b8:6c:1a:8e:b1:d2:a7:f1:80:
2f:e8:cd:14:66:e1:05:eb:70:7b:be:96:5e:3e:64:7e:a0:eb:
7d:bf:92:7f:bc:a3:ee:57:ee:34:ab:1c:c3:87:9c:19:d8:33:
37:18:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:10 2025 by rpki-client