
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_Xty0lEcWaByi954yfl5Z4iIr0.roa
File: v_Xty0lEcWaByi954yfl5Z4iIr0.roa (raw, json)
Hash identifier: RtKdEiVziwyE7QFnTVpgS50BLlF7/DwUg1F6ytDt31Q=
Subject key identifier: BF:F5:ED:CB:49:44:71:66:81:CA:2F:79:E3:27:E5:E5:9E:22:22:BD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 26D3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_Xty0lEcWaByi954yfl5Z4iIr0.roa
Signing time: Fri 22 Aug 2025 08:43:17 +0000
ROA not before: Fri 22 Aug 2025 08:43:17 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 2407:4b00:fd01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9939 (0x26d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:17 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BFF5EDCB4944716681CA2F79E327E5E59E2222BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:98:2d:a8:ba:90:18:5b:bf:21:ed:df:ea:
57:80:b6:29:c0:d0:b5:21:40:e6:c0:49:36:a6:e2:
33:5c:8f:ad:92:a6:c7:17:ea:7c:15:55:72:1a:ba:
74:73:3e:aa:f7:1d:77:4f:1d:2d:3d:b4:62:b7:1d:
a6:76:15:a7:f0:38:41:c5:eb:00:14:e7:22:f3:19:
d8:92:88:03:2f:15:98:3c:e0:de:c0:59:7c:64:ad:
9f:37:8e:90:f4:af:85:1c:ee:ca:f0:03:f7:02:c9:
5d:a5:96:ae:b3:db:6c:f6:7c:a7:38:19:2e:7e:ed:
b8:15:d2:a4:4a:8a:af:c8:a9:f4:6d:e6:a6:62:70:
6a:75:7b:34:67:ad:9c:ad:fa:2e:7a:11:9c:e3:39:
f6:2d:be:b9:99:cf:06:ae:c6:2d:07:bd:f1:a2:a9:
0b:6e:f3:2e:92:63:db:5e:23:3f:2f:56:b9:f1:0c:
c2:69:c5:8a:0d:28:45:40:06:0b:b2:90:69:6f:ea:
54:9b:e2:2b:3d:e2:ee:65:c1:54:a8:92:79:3e:8a:
8b:15:89:44:f9:a2:6e:16:71:6d:7f:99:d7:39:aa:
c0:94:a2:ce:6f:5e:67:b7:c3:b7:84:34:a2:5f:07:
85:2f:ed:69:67:75:19:ce:af:3b:5f:44:ee:63:f1:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:ED:CB:49:44:71:66:81:CA:2F:79:E3:27:E5:E5:9E:22:22:BD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_Xty0lEcWaByi954yfl5Z4iIr0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00:fd01::/48
Signature Algorithm: sha256WithRSAEncryption
9c:73:a2:9e:b6:d3:b2:28:a0:b3:18:e1:03:de:9f:23:dd:5e:
4b:59:c6:97:a9:f9:a0:ac:14:93:84:19:4c:75:2f:fb:06:8e:
26:5b:c4:b1:6a:7a:3c:47:46:f6:75:63:3c:fa:aa:83:42:0c:
57:0e:aa:4f:8e:7f:b0:99:6e:7e:f1:94:41:7f:3f:1f:e0:6f:
1a:eb:62:d8:87:10:bb:25:dc:7b:fc:d1:ed:b9:11:ae:ca:d6:
65:02:11:a2:95:7d:91:b4:cd:82:3f:e5:d4:15:c0:d6:95:45:
45:14:5e:f3:9f:4f:e3:dd:65:54:9a:09:2f:14:ad:df:5e:dc:
05:32:c8:11:1f:89:a8:85:43:4c:b6:d9:b4:8a:cb:a4:07:9e:
8b:05:7d:7b:1d:2e:7b:b4:86:84:fd:f6:07:f8:0b:63:db:c5:
69:82:04:ab:3a:84:29:8a:a0:a0:17:e4:2a:f4:61:b7:d8:a9:
8c:76:4a:71:33:9c:2a:5e:82:e8:f5:07:50:e5:88:b8:2d:f9:
c2:0a:a4:03:5e:bf:d4:82:50:8e:86:9e:41:09:80:c2:db:f6:
d4:6a:9b:93:e5:da:14:3e:bf:1d:da:ec:86:36:5a:6a:8e:33:
26:f5:64:f3:40:d5:88:3c:ad:da:d6:1a:f2:c2:50:f8:ee:6a:
ce:d4:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:38 2025 by rpki-client