$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/17rPvresQxJjq4BJB6g7SHOVMFQ.roa File: 17rPvresQxJjq4BJB6g7SHOVMFQ.roa (raw, json) Hash identifier: gpM54w2mMv+DKEiQDZMYlgR9uD6jdRlMuFpKoRZX0W0= Subject key identifier: D7:BA:CF:BE:B7:AC:43:12:63:AB:80:49:07:A8:3B:48:73:95:30:54 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 270E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/17rPvresQxJjq4BJB6g7SHOVMFQ.roa Signing time: Fri 22 Aug 2025 08:43:31 +0000 ROA not before: Fri 22 Aug 2025 08:43:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.159.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9998 (0x270e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D7BACFBEB7AC431263AB804907A83B4873953054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:5d:47:67:f3:e2:a5:59:8c:69:d8:8d:8a: 66:c3:38:5b:51:c2:fa:2b:08:c9:b8:ba:23:4f:72: 38:65:73:12:63:91:a5:a4:fe:24:ab:ca:33:d2:05: ca:6c:55:cc:ad:7f:5e:6f:d0:8f:46:eb:f1:50:26: 17:be:cb:8d:87:e1:18:70:44:22:d4:51:c7:f2:17: 50:df:99:d2:27:33:dd:9f:de:d0:0a:e9:5d:a5:35: 08:40:c8:71:97:a2:4b:34:6f:e9:6a:fa:1f:5b:60: cb:75:e6:d9:ee:7e:f9:38:8c:07:10:63:54:8f:1e: 94:54:a7:66:7a:af:51:50:48:35:d7:fc:b9:df:e7: 17:41:bc:96:1c:b3:ee:c9:88:b1:1a:f0:fc:5a:65: 4d:4d:11:cd:9f:2b:68:ac:71:c8:14:12:12:d9:21: 64:bf:c2:9b:ed:af:87:8b:f9:fa:d4:e0:fb:a0:80: 01:fe:32:f6:ac:47:2f:e1:6f:e0:5b:6e:29:99:1c: 48:f8:36:49:73:d4:ba:78:b2:eb:07:79:53:f3:00: 88:28:ca:91:52:27:b7:c8:e9:e2:37:66:3d:ac:de: e9:0e:28:f6:d0:ed:65:df:bc:be:12:78:c1:05:4c: 4e:68:2d:cd:39:23:77:66:90:29:43:56:73:60:03: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:CF:BE:B7:AC:43:12:63:AB:80:49:07:A8:3B:48:73:95:30:54 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/17rPvresQxJjq4BJB6g7SHOVMFQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.224.0/21 Signature Algorithm: sha256WithRSAEncryption 05:93:61:c0:f5:f0:1b:19:d6:cf:8c:71:5e:ea:39:36:e0:b1: 33:6f:5e:b0:de:94:dc:47:e5:a6:5c:99:e3:94:38:fc:16:40: 72:94:c4:30:fd:71:c1:e5:e9:6f:c0:9c:ed:1f:47:98:5e:c1: c8:e5:ab:06:21:3b:4b:18:38:c9:15:41:95:45:19:0f:3b:50: 3d:b9:b8:4b:1e:b3:00:f0:62:da:18:95:f0:22:93:13:3d:80: 2d:0a:f2:f4:f3:28:96:e0:5a:5a:8f:75:56:f1:fc:b0:02:cb: 47:6f:ec:0a:c7:dd:26:25:b6:19:63:a2:a3:e9:18:fc:13:8f: 71:62:d9:0f:62:c3:05:e3:5d:d5:b6:77:57:c9:00:fa:15:04: 7c:5c:b8:fe:45:94:d9:6e:09:51:aa:d0:ae:5e:52:d9:74:67: eb:fa:98:50:a1:d3:37:25:84:11:a4:43:46:38:da:4a:57:0b: 73:c7:fc:70:be:2e:6f:87:c7:2f:76:91:79:d9:b9:74:1e:2b: 4f:33:57:5f:7c:e8:95:6a:c8:87:1b:8e:2f:a1:63:bc:2b:84: 92:20:06:51:0e:9a:c2:6e:cc:24:99:c4:89:43:58:09:a3:7e: 05:9a:17:c7:ac:15:c4:f4:53:f7:64:60:a2:13:95:55:68:8f: 14:33:29:2a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ3QkFDRkJFQjdBQzQz MTI2M0FCODA0OTA3QTgzQjQ4NzM5NTMwNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmBl1HZ/PipVmMadiNimbDOFtRwvorCMm4uiNPcjhlcxJjkaWk /iSryjPSBcpsVcytf15v0I9G6/FQJhe+y42H4RhwRCLUUcfyF1DfmdInM92f3tAK 6V2lNQhAyHGXoks0b+lq+h9bYMt15tnufvk4jAcQY1SPHpRUp2Z6r1FQSDXX/Lnf 5xdBvJYcs+7JiLEa8PxaZU1NEc2fK2isccgUEhLZIWS/wpvtr4eL+frU4PuggAH+ MvasRy/hb+BbbimZHEj4Nklz1Lp4susHeVPzAIgoypFSJ7fI6eI3Zj2s3ukOKPbQ 7WXfvL4SeMEFTE5oLc05I3dmkClDVnNgAx9jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU17rPvresQxJjq4BJB6g7SHOVMFQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzE3clB2cmVzUXhKanE0QkpC Nmc3U0hPVk1GUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n+AwDQYJKoZIhvcNAQELBQADggEBAAWTYcD18BsZ1s+McV7qOTbgsTNvXrDelNxH 5aZcmeOUOPwWQHKUxDD9ccHl6W/AnO0fR5hewcjlqwYhO0sYOMkVQZVFGQ87UD25 uEseswDwYtoYlfAikxM9gC0K8vTzKJbgWlqPdVbx/LACy0dv7ArH3SYlthljoqPp GPwTj3Fi2Q9iwwXjXdW2d1fJAPoVBHxcuP5FlNluCVGq0K5eUtl0Z+v6mFCh0zcl hBGkQ0Y42kpXC3PH/HC+Lm+Hxy92kXnZuXQeK08zV1986JVqyIcbji+hY7wrhJIg BlEOmsJuzCSZxIlDWAmjfgWaF8esFcT0U/dkYKITlVVojxQzKSo= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:24 2025 by rpki-client