$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-MnEcagY35NS5gmC5g_Szk_i9wQ.roa File: -MnEcagY35NS5gmC5g_Szk_i9wQ.roa (raw, json) Hash identifier: XIbXVJ9bAR6fcCk1fNXf9ulmiDmeQ2wYdJObeqRNhVk= Subject key identifier: F8:C9:C4:71:A8:18:DF:93:52:E6:09:82:E6:0F:D2:CE:4F:E2:F7:04 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2605 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-MnEcagY35NS5gmC5g_Szk_i9wQ.roa Signing time: Fri 22 Aug 2025 08:42:30 +0000 ROA not before: Fri 22 Aug 2025 08:42:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 123.0.32.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9733 (0x2605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F8C9C471A818DF9352E60982E60FD2CE4FE2F704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:52:13:01:bc:07:db:59:35:5d:f7:ac:79: 96:f8:cf:f4:11:78:86:df:aa:1c:e4:63:52:8a:48: fd:29:ce:2b:fb:9b:9a:e5:a7:e4:6a:4e:51:8f:cd: 4d:f8:17:5f:43:34:40:29:46:2c:21:fb:74:13:9f: 28:72:4a:65:42:94:d2:4a:a5:89:51:e3:7f:93:ec: 7f:f2:15:b9:48:be:e5:19:37:7e:3a:34:52:65:c8: 07:2d:1d:93:f3:b7:07:13:37:f5:0e:f5:58:5f:63: 32:39:36:2f:3b:f1:f9:ca:f1:67:be:ca:7f:86:a9: 9e:95:ef:c0:7e:c7:22:b6:06:b3:46:a6:0f:9e:44: 9f:2f:ab:2a:6d:3a:de:a8:03:b8:c5:da:d8:74:46: ae:84:0b:e1:62:bf:e5:55:2b:32:a2:37:cd:fc:3c: 23:c9:aa:96:6b:ad:98:f4:d6:e0:07:f1:5f:5c:2b: 0b:0b:68:df:97:ab:c9:ed:ab:7e:2c:86:94:82:89: 1c:8c:4c:1c:bc:c6:a4:ce:6f:5f:38:22:93:8e:1c: f4:22:00:62:c7:18:00:a7:a9:87:96:3d:62:aa:b4: 03:1c:bf:f7:51:a8:81:75:8e:1f:51:7f:d7:07:9b: 67:f5:3d:7e:1f:08:93:e0:7a:7d:4a:2e:87:c6:84: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C9:C4:71:A8:18:DF:93:52:E6:09:82:E6:0F:D2:CE:4F:E2:F7:04 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-MnEcagY35NS5gmC5g_Szk_i9wQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.32.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:76:f3:56:32:aa:d6:61:ed:1b:03:6a:85:4c:64:99:2a:f7: f1:b9:87:bb:b1:d7:c4:3c:b3:e0:73:31:88:5f:0b:3e:25:dd: e9:5c:52:15:76:7c:22:00:e4:7b:60:a6:8c:f6:e1:4c:6e:70: 78:b7:6a:7e:ce:de:4a:2f:53:58:ed:8c:d8:80:87:0d:71:c1: 86:60:f7:5c:5f:80:21:db:13:23:1d:cd:18:fe:19:d1:32:80: 83:68:3f:50:b6:84:f5:15:19:cd:84:5a:a2:6f:e5:17:ab:7d: e9:5d:94:af:f4:a6:8d:bc:53:da:5b:36:a4:70:c9:d4:e8:a4: 6f:e7:9c:57:1c:e4:f3:ec:ac:ab:f6:12:b5:25:00:c0:b3:33: f9:02:9f:04:40:a0:5b:33:9a:ca:c2:70:7f:63:cf:2e:23:d1: 42:d4:86:1e:9a:53:f4:95:80:c3:2a:ec:d7:b1:e7:5f:92:42: 7d:ea:0e:3a:34:24:b8:fc:a7:08:b1:fd:10:5d:31:19:96:5c: 69:42:d7:6d:fa:bb:05:f3:90:c5:62:06:dd:e9:f4:fe:04:c7: 44:6a:fe:d5:3d:21:38:22:d7:8e:93:44:d7:da:bd:3f:5c:17: 47:c1:91:fc:e2:2d:0c:c4:e3:68:21:ed:dc:8e:90:d7:89:9b: 73:bf:cd:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY4QzlDNDcxQTgxOERG OTM1MkU2MDk4MkU2MEZEMkNFNEZFMkY3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDW1ITAbwH21k1XfeseZb4z/QReIbfqhzkY1KKSP0pziv7m5rl p+RqTlGPzU34F19DNEApRiwh+3QTnyhySmVClNJKpYlR43+T7H/yFblIvuUZN346 NFJlyActHZPztwcTN/UO9VhfYzI5Ni878fnK8We+yn+GqZ6V78B+xyK2BrNGpg+e RJ8vqyptOt6oA7jF2th0Rq6EC+Fiv+VVKzKiN838PCPJqpZrrZj01uAH8V9cKwsL aN+Xq8ntq34shpSCiRyMTBy8xqTOb184IpOOHPQiAGLHGACnqYeWPWKqtAMcv/dR qIF1jh9Rf9cHm2f1PX4fCJPgen1KLofGhNf5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+MnEcagY35NS5gmC5g/Szk/i9wQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy1NbkVjYWdZMzVOUzVnbUM1 Z19TemtfaTl3US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 ACAwDQYJKoZIhvcNAQELBQADggEBAAx281YyqtZh7RsDaoVMZJkq9/G5h7ux18Q8 s+BzMYhfCz4l3elcUhV2fCIA5Htgpoz24UxucHi3an7O3kovU1jtjNiAhw1xwYZg 91xfgCHbEyMdzRj+GdEygINoP1C2hPUVGc2EWqJv5RerfeldlK/0po28U9pbNqRw ydTopG/nnFcc5PPsrKv2ErUlAMCzM/kCnwRAoFszmsrCcH9jzy4j0ULUhh6aU/SV gMMq7Nex51+SQn3qDjo0JLj8pwix/RBdMRmWXGlC1236uwXzkMViBt3p9P4Ex0Rq /tU9ITgi146TRNfavT9cF0fBkfziLQzE42gh7dyOkNeJm3O/zWE= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:40 2025 by rpki-client