$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0nS_D1g1Xqe6vADtzmYeeM5Cijw.roa File: 0nS_D1g1Xqe6vADtzmYeeM5Cijw.roa (raw, json) Hash identifier: i9XDCx2/pHxPmRD9CO15WgjI+t8UqxkuYSkHIfEQlHg= Subject key identifier: D2:74:BF:0F:58:35:5E:A7:BA:BC:00:ED:CE:66:1E:78:CE:42:8A:3C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25EE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0nS_D1g1Xqe6vADtzmYeeM5Cijw.roa Signing time: Fri 22 Aug 2025 08:42:24 +0000 ROA not before: Fri 22 Aug 2025 08:42:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4662 IP address blocks: 61.60.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9710 (0x25ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D274BF0F58355EA7BABC00EDCE661E78CE428A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:15:c5:0e:ee:d0:30:05:4f:b9:a7:ab:3c: 32:23:c0:07:4e:ab:78:45:75:ab:fc:2f:b2:11:59: 98:cf:d3:99:34:6b:50:64:ac:be:99:98:43:ec:15: 0d:3d:97:78:4d:8b:42:19:40:bc:c9:1b:d3:d2:22: 70:c2:52:d6:47:94:2a:5a:1e:15:65:20:27:e4:39: 92:7a:54:01:d7:8e:dd:dd:47:e2:27:b8:b1:f5:90: de:4c:97:e6:b5:c1:ff:db:74:cf:f0:1b:09:16:7b: 88:36:d2:17:e6:30:3a:20:fe:ab:00:bf:65:4b:5e: 48:5e:d8:d3:55:a9:9d:64:97:bd:c9:2c:f9:92:4e: 8e:9e:1b:cb:60:0e:3d:cc:ab:de:8c:3e:ff:b0:c1: 30:d7:f1:57:2d:9b:b7:07:c0:7d:c2:de:76:29:6e: 8a:9c:c1:fc:75:50:d2:e3:51:91:8e:41:4a:5e:25: 38:49:d1:0b:4f:08:d7:36:19:4e:ee:d5:0c:43:93: 43:7b:3c:fa:e0:0e:91:b5:94:26:ef:74:e8:7d:d9: d8:f1:7d:6e:90:93:6d:70:7a:48:99:f7:90:2f:d9: a4:7c:8d:3a:47:56:65:a0:34:7e:43:35:06:5b:cf: e2:9d:cd:75:15:01:39:83:1a:ad:df:65:33:02:f6: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:74:BF:0F:58:35:5E:A7:BA:BC:00:ED:CE:66:1E:78:CE:42:8A:3C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0nS_D1g1Xqe6vADtzmYeeM5Cijw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.208.0/20 Signature Algorithm: sha256WithRSAEncryption 83:70:d8:9a:ae:7d:ce:d8:bb:cd:46:31:9a:fb:01:98:a9:a2: b9:cc:06:7f:a9:92:cf:3c:36:24:a6:5a:52:2a:50:84:a0:24: 2f:7b:ea:d1:17:35:a5:fb:23:a7:c6:b8:eb:b7:43:16:35:96: db:fa:14:24:ec:ad:cc:2b:97:df:6b:e1:eb:38:bf:77:ab:87: 91:ca:95:53:4c:bc:f9:bb:99:f0:d1:85:51:ac:25:d9:26:66: 27:5e:0d:2c:7a:81:d9:33:f6:dd:de:8f:10:bb:83:4e:78:0d: 8c:a2:b9:05:c1:23:2d:15:dc:79:fa:bd:66:31:ed:b7:ac:64: 1a:9e:ca:4a:d7:e3:00:89:1b:5d:b2:81:76:ac:ff:58:5d:a9: 2c:fe:ff:c7:fd:7e:56:68:fe:4e:9a:ca:11:91:b0:24:53:fe: 91:c5:6a:d2:71:c0:50:48:3e:4b:71:72:0c:d4:5f:11:a2:65: 6c:db:5a:f8:94:8e:f7:6f:97:f3:90:21:34:60:81:48:72:ac: 73:1f:b0:74:f2:72:58:77:79:6d:39:7c:48:5f:83:10:fa:3f: 73:73:87:83:04:05:c4:35:ca:69:02:fc:e4:c7:40:c9:e9:57: 73:9e:94:ba:72:a0:c1:31:48:ae:5a:22:20:38:c0:68:a0:56: c4:6a:9f:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQyNzRCRjBGNTgzNTVF QTdCQUJDMDBFRENFNjYxRTc4Q0U0MjhBM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYCxXFDu7QMAVPuaerPDIjwAdOq3hFdav8L7IRWZjP05k0a1Bk rL6ZmEPsFQ09l3hNi0IZQLzJG9PSInDCUtZHlCpaHhVlICfkOZJ6VAHXjt3dR+In uLH1kN5Ml+a1wf/bdM/wGwkWe4g20hfmMDog/qsAv2VLXkhe2NNVqZ1kl73JLPmS To6eG8tgDj3Mq96MPv+wwTDX8Vctm7cHwH3C3nYpboqcwfx1UNLjUZGOQUpeJThJ 0QtPCNc2GU7u1QxDk0N7PPrgDpG1lCbvdOh92djxfW6Qk21wekiZ95Av2aR8jTpH VmWgNH5DNQZbz+KdzXUVATmDGq3fZTMC9hFbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0nS/D1g1Xqe6vADtzmYeeM5CijwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBuU19EMWcxWHFlNnZBRHR6 bVllZU01Q2lqdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PNAwDQYJKoZIhvcNAQELBQADggEBAINw2Jqufc7Yu81GMZr7AZipornMBn+pks88 NiSmWlIqUISgJC976tEXNaX7I6fGuOu3QxY1ltv6FCTsrcwrl99r4es4v3erh5HK lVNMvPm7mfDRhVGsJdkmZideDSx6gdkz9t3ejxC7g054DYyiuQXBIy0V3Hn6vWYx 7besZBqeykrX4wCJG12ygXas/1hdqSz+/8f9flZo/k6ayhGRsCRT/pHFatJxwFBI PktxcgzUXxGiZWzbWviUjvdvl/OQITRggUhyrHMfsHTyclh3eW05fEhfgxD6P3Nz h4MEBcQ1ymkC/OTHQMnpV3OelLpyoMExSK5aIiA4wGigVsRqn8w= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:26 2025 by rpki-client