$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/42UO5Js0wvgLpycesgiKn1KTMsw.roa File: 42UO5Js0wvgLpycesgiKn1KTMsw.roa (raw, json) Hash identifier: 33xhMzWwrQpZlKngYJqtUgFP+pNUseMQcUsVAdjtoDk= Subject key identifier: E3:65:0E:E4:9B:34:C2:F8:0B:A7:27:1E:B2:08:8A:9F:52:93:32:CC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26E7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/42UO5Js0wvgLpycesgiKn1KTMsw.roa Signing time: Fri 22 Aug 2025 08:43:22 +0000 ROA not before: Fri 22 Aug 2025 08:43:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4662 IP address blocks: 211.76.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9959 (0x26e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E3650EE49B34C2F80BA7271EB2088A9F529332CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:ef:9b:30:74:b4:57:96:b9:37:4a:c6:22: fc:48:f2:bc:ef:a8:be:19:a4:3b:db:ea:0d:8d:80: fc:03:d2:d0:ad:bf:55:3a:5d:7f:15:15:14:b2:6d: 9d:25:4c:f6:ef:a5:b0:44:f1:6e:06:cc:2a:ec:2c: cf:7d:72:cc:06:da:ce:cd:77:93:cd:10:b3:26:43: 01:94:0e:bf:47:c0:9c:8f:89:37:f3:76:c7:5c:b5: 18:86:f2:ae:04:87:c6:d5:1a:74:0c:72:7a:c1:8f: 0e:3a:5b:df:c8:4a:68:99:a6:4e:c4:28:d4:ad:76: 2f:20:82:5a:c6:8c:e0:ca:55:02:7b:64:15:5b:70: b2:47:cd:34:b7:0a:b0:67:3e:a2:c5:2e:9c:83:f8: 87:7a:ce:ca:84:40:f3:1e:1f:86:a4:c6:91:6d:3b: b3:79:87:f7:09:62:64:83:1f:f7:5e:cf:27:9a:70: 48:25:76:05:c6:93:b6:e5:dd:e1:18:a3:37:3b:93: ee:03:cf:01:3c:46:0f:67:a6:8b:77:d3:0e:5e:b4: b9:8e:89:0d:e6:11:71:3e:a8:f5:bf:b5:77:45:a4: a1:26:be:b1:a8:01:3d:dd:c8:ed:89:c2:d1:05:2a: cc:95:3a:0c:d3:f7:9b:e7:bf:2b:d3:e8:e4:4e:8a: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:0E:E4:9B:34:C2:F8:0B:A7:27:1E:B2:08:8A:9F:52:93:32:CC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/42UO5Js0wvgLpycesgiKn1KTMsw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 17:26:4d:a7:98:5f:de:90:6d:5b:03:f6:40:c6:df:c9:07:70: 0c:6a:4a:53:60:38:7c:26:4c:98:2f:92:d2:1b:4a:50:76:e6: 1d:b0:1f:a5:53:7f:51:eb:ad:fb:43:33:02:c9:fd:d2:7c:f2: aa:a8:0a:f1:31:6d:7f:29:9e:01:11:80:f2:c8:3d:ca:a2:64: b9:80:67:d6:3b:5f:52:68:6b:19:12:a9:4f:c6:63:7c:3d:9b: 6e:9b:1e:41:e6:03:40:3f:9e:99:63:5d:69:76:8a:33:8c:ae: aa:48:c1:c6:5c:82:f4:fc:06:7e:62:57:83:7d:4f:60:18:da: 43:bb:1c:19:a0:db:1f:24:76:9a:a3:3a:fa:62:79:31:de:75: bd:38:0e:40:24:91:cb:b8:e3:c9:16:f8:20:f9:dd:f7:c2:d6: 84:dd:12:be:30:40:2f:ec:5e:5a:dd:cb:6b:af:78:fe:c1:89: d7:73:b8:ef:c5:1f:10:69:59:06:87:d0:fa:ac:1f:c2:df:d7: 3d:a4:9f:0b:f3:93:a8:26:00:6c:d0:07:f2:cb:ef:b4:84:78: 4d:37:81:b7:4e:44:aa:22:d2:4b:7d:ba:f1:1d:ca:90:77:8c: d8:e6:3e:4c:13:72:7b:dd:95:55:ea:b7:67:dc:d8:16:a3:d1: fa:4d:33:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUzNjUwRUU0OUIzNEMy RjgwQkE3MjcxRUIyMDg4QTlGNTI5MzMyQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiv++bMHS0V5a5N0rGIvxI8rzvqL4ZpDvb6g2NgPwD0tCtv1U6 XX8VFRSybZ0lTPbvpbBE8W4GzCrsLM99cswG2s7Nd5PNELMmQwGUDr9HwJyPiTfz dsdctRiG8q4Eh8bVGnQMcnrBjw46W9/ISmiZpk7EKNStdi8gglrGjODKVQJ7ZBVb cLJHzTS3CrBnPqLFLpyD+Id6zsqEQPMeH4akxpFtO7N5h/cJYmSDH/dezyeacEgl dgXGk7bl3eEYozc7k+4DzwE8Rg9npot30w5etLmOiQ3mEXE+qPW/tXdFpKEmvrGo AT3dyO2JwtEFKsyVOgzT95vnvyvT6OROinOfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU42UO5Js0wvgLpycesgiKn1KTMswwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzQyVU81SnMwd3ZnTHB5Y2Vz Z2lLbjFLVE1zdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXT TCAwDQYJKoZIhvcNAQELBQADggEBABcmTaeYX96QbVsD9kDG38kHcAxqSlNgOHwm TJgvktIbSlB25h2wH6VTf1HrrftDMwLJ/dJ88qqoCvExbX8pngERgPLIPcqiZLmA Z9Y7X1JoaxkSqU/GY3w9m26bHkHmA0A/npljXWl2ijOMrqpIwcZcgvT8Bn5iV4N9 T2AY2kO7HBmg2x8kdpqjOvpieTHedb04DkAkkcu448kW+CD53ffC1oTdEr4wQC/s Xlrdy2uveP7BiddzuO/FHxBpWQaH0PqsH8Lf1z2knwvzk6gmAGzQB/LL77SEeE03 gbdORKoi0kt9uvEdypB3jNjmPkwTcnvdlVXqt2fc2Baj0fpNMwA= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:39 2025 by rpki-client