$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3P7xEFY01DZojGRWjvipVOLxlrE.roa File: 3P7xEFY01DZojGRWjvipVOLxlrE.roa (raw, json) Hash identifier: XOk8x9aOM/18QmKiYQXcc0dphZ3YyEBqCyyLzSAesoc= Subject key identifier: DC:FE:F1:10:56:34:D4:36:68:8C:64:56:8E:F8:A9:54:E2:F1:96:B1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2718 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3P7xEFY01DZojGRWjvipVOLxlrE.roa Signing time: Fri 22 Aug 2025 08:43:33 +0000 ROA not before: Fri 22 Aug 2025 08:43:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 2407:4b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10008 (0x2718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DCFEF1105634D436688C64568EF8A954E2F196B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:a2:30:8a:8f:ac:05:08:ad:cf:51:e6:0e: 70:e2:85:7b:13:78:83:b9:d4:81:bf:3b:8b:c3:60: 0a:d7:88:b5:76:66:a6:f1:66:93:3f:6e:5f:76:07: c6:85:21:e3:89:6f:05:92:48:28:3c:75:a4:09:8c: d3:83:01:64:1e:97:83:1e:51:e2:8d:5d:9c:eb:db: 66:a1:52:f4:73:b3:1e:ba:71:67:93:86:bb:62:96: a6:62:7a:ae:69:82:1f:ff:b5:32:48:b4:31:ad:b8: b7:11:61:6c:26:ae:df:3e:21:d4:6c:c3:e0:d8:73: 2b:71:13:70:c9:31:3a:3a:79:85:98:47:4f:86:a6: d2:34:b9:e4:77:24:3a:90:06:fe:40:c1:07:2d:3f: 49:93:ef:5f:e2:be:34:89:b9:4a:cd:1f:1d:bd:f0: 2c:c7:04:46:29:fb:da:b0:77:4d:87:aa:ea:77:49: 18:03:b0:42:ef:51:f7:30:e6:c6:ff:3a:0b:b0:0c: c4:f9:7c:78:40:15:8b:b7:1c:8e:7c:55:e3:a2:a7: c1:97:9e:7f:9e:4a:75:a1:4b:9b:87:dc:71:4d:4f: 1d:78:ab:e3:0f:82:e2:6d:69:40:36:79:32:f4:15: cc:57:af:5e:09:c6:18:5e:11:25:52:92:5d:45:f6: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FE:F1:10:56:34:D4:36:68:8C:64:56:8E:F8:A9:54:E2:F1:96:B1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3P7xEFY01DZojGRWjvipVOLxlrE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 1c:80:20:a0:a9:45:c1:ec:3f:9e:ef:3f:1f:2b:8e:a1:51:05: 87:f4:c2:d2:26:91:8d:2c:68:2b:2c:31:09:b1:6b:7e:5d:08: f2:7a:df:5f:99:9c:ea:74:fa:9d:07:72:46:ac:bb:86:27:d0: 6f:e8:b9:a8:af:3a:ab:f5:51:12:f2:16:82:5e:c3:b3:f8:32: e2:e7:b8:67:7a:8e:fd:a2:43:c1:ea:af:f8:e3:9d:af:e9:5d: 3a:de:de:a6:d1:53:d6:fd:fb:af:f6:54:7e:93:c6:12:08:3d: 9b:3f:b8:57:f6:1d:c0:4d:24:cf:5e:ae:b8:b7:f6:7c:fa:6d: 5b:fb:12:db:81:56:e4:bd:95:33:e7:97:6a:e3:0a:af:c0:45: c0:2f:1f:f4:83:8c:b5:ef:07:b5:eb:93:ec:72:ca:f0:42:6a: 4a:f2:ff:de:77:69:97:45:77:7b:84:19:e5:10:fd:a6:fd:12: 5f:b9:61:e0:3b:5c:35:ef:1f:91:ed:a3:fb:a9:4a:13:ee:e2: ae:fb:21:c1:35:d2:13:0c:b9:33:12:54:63:26:e2:91:29:aa: 00:b3:f2:7a:ba:b4:1f:f8:9a:99:72:8e:b1:ae:05:4c:8b:73: e9:2e:61:2a:ca:fa:a7:c2:b7:dc:c8:5e:e9:a0:f9:2f:3f:6b: de:b4:3c:2d -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICJxgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERDRkVGMTEwNTYzNEQ0 MzY2ODhDNjQ1NjhFRjhBOTU0RTJGMTk2QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu/qIwio+sBQitz1HmDnDihXsTeIO51IG/O4vDYArXiLV2Zqbx ZpM/bl92B8aFIeOJbwWSSCg8daQJjNODAWQel4MeUeKNXZzr22ahUvRzsx66cWeT hrtilqZieq5pgh//tTJItDGtuLcRYWwmrt8+IdRsw+DYcytxE3DJMTo6eYWYR0+G ptI0ueR3JDqQBv5AwQctP0mT71/ivjSJuUrNHx298CzHBEYp+9qwd02Hqup3SRgD sELvUfcw5sb/OguwDMT5fHhAFYu3HI58VeOip8GXnn+eSnWhS5uH3HFNTx14q+MP guJtaUA2eTL0FcxXr14JxhheESVSkl1F9pbBAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU3P7xEFY01DZojGRWjvipVOLxlrEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNQN3hFRlkwMURab2pHUldq dmlwVk9MeGxyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B0sAMA0GCSqGSIb3DQEBCwUAA4IBAQAcgCCgqUXB7D+e7z8fK46hUQWH9MLSJpGN LGgrLDEJsWt+XQjyet9fmZzqdPqdB3JGrLuGJ9Bv6Lmorzqr9VES8haCXsOz+DLi 57hneo79okPB6q/4452v6V063t6m0VPW/fuv9lR+k8YSCD2bP7hX9h3ATSTPXq64 t/Z8+m1b+xLbgVbkvZUz55dq4wqvwEXALx/0g4y17we165PscsrwQmpK8v/ed2mX RXd7hBnlEP2m/RJfuWHgO1w17x+R7aP7qUoT7uKu+yHBNdITDLkzElRjJuKRKaoA s/J6urQf+JqZco6xrgVMi3PpLmEqyvqnwrfcyF7poPkvP2vetDwt -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:37 2025 by rpki-client