$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4BfwIIXgxBlZqhl71wjFL75-s3w.roa File: 4BfwIIXgxBlZqhl71wjFL75-s3w.roa (raw, json) Hash identifier: I+kE6vnBuJmLey1OxA/u+SdqK4nVzb28YVs02T2vP+s= Subject key identifier: E0:17:F0:20:85:E0:C4:19:59:AA:19:7B:D7:08:C5:2F:BE:7E:B3:7C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26FE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4BfwIIXgxBlZqhl71wjFL75-s3w.roa Signing time: Fri 22 Aug 2025 08:43:27 +0000 ROA not before: Fri 22 Aug 2025 08:43:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 114.198.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9982 (0x26fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E017F02085E0C41959AA197BD708C52FBE7EB37C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:9e:20:0b:d7:22:2d:45:76:89:e4:ff:6b: 45:eb:f8:2f:5a:01:63:6d:cf:6a:ab:32:f3:1e:3a: 38:ec:08:24:f6:cf:49:8b:36:d2:ac:09:11:c2:66: 4f:d8:29:8b:57:38:36:a4:92:55:9f:1f:2e:c5:33: 8a:91:e8:9e:ef:16:0a:3b:34:41:ec:8a:d7:ff:32: 44:e2:57:d5:37:e9:23:d0:82:b3:ff:f7:91:b3:41: 2c:15:8b:0b:ef:52:75:d2:a6:10:8f:5a:7a:01:39: 32:ab:ff:63:25:ad:4b:98:34:06:89:b9:14:20:38: 89:55:0d:95:d2:36:0b:c4:c6:9c:72:7a:00:00:b2: d3:4d:8c:d5:83:09:c0:59:01:a4:5f:79:6f:11:fa: bf:58:4a:43:df:50:87:20:6f:05:65:07:77:77:13: ba:74:2a:b2:7f:df:cc:68:00:f0:4e:6e:bd:cf:6d: d9:43:86:a4:0c:37:db:7c:50:62:e2:7d:47:0f:9e: 1c:1e:86:c5:c4:c2:69:76:b9:ac:2e:7d:32:f6:88: ab:03:e6:de:4c:1a:3c:01:72:ba:98:61:02:99:b5: fd:63:f8:47:99:20:37:56:25:4a:52:68:49:10:cd: 8d:85:2a:a5:c3:24:e3:77:a9:62:b2:93:dd:76:ee: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:17:F0:20:85:E0:C4:19:59:AA:19:7B:D7:08:C5:2F:BE:7E:B3:7C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4BfwIIXgxBlZqhl71wjFL75-s3w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.160.0/20 Signature Algorithm: sha256WithRSAEncryption 27:06:fe:e2:36:2b:be:be:c1:cf:0b:64:b3:60:2c:66:4c:ea: 22:2a:08:d5:96:cd:51:54:b9:5a:ae:b7:36:37:04:54:e0:e7: fc:14:0a:c6:58:ef:45:bd:16:f0:4a:ae:a9:06:61:cf:cd:4f: 72:09:43:8a:fa:2c:6d:6e:f8:63:3c:a6:d2:1b:cc:38:c4:6e: 88:1b:98:65:61:49:ca:9c:3b:cd:ad:a4:5c:ff:d4:23:8b:5b: 5b:ff:de:7b:00:cd:6d:1e:9a:0a:fc:d1:1f:bd:86:f4:6e:31: 5a:0c:8f:9b:cc:a7:ff:44:b8:d0:e3:06:35:02:26:1e:37:29: d5:f6:ee:0d:74:18:f7:72:db:fd:ab:2a:03:79:7e:80:b3:49: af:5e:f2:0c:6c:8c:1b:a1:52:a6:c9:ad:50:38:d2:52:ed:b2: b6:f6:50:67:fd:f9:c6:bd:9c:50:6d:a6:1d:f2:b3:e2:d7:9e: e2:fd:ce:6d:6b:dd:b7:9a:9b:5e:95:fa:17:7f:88:06:63:aa: 5e:e0:5f:df:0e:39:cc:8f:e1:7a:47:f6:53:b2:8c:d4:5b:c8: 9f:f6:eb:41:5e:cb:90:bb:68:14:31:a8:84:48:85:7c:34:9d: 68:df:6f:c4:57:1b:67:65:3b:0d:35:c8:53:2f:07:9e:47:93: 8f:68:f5:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUwMTdGMDIwODVFMEM0 MTk1OUFBMTk3QkQ3MDhDNTJGQkU3RUIzN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZwJ4gC9ciLUV2ieT/a0Xr+C9aAWNtz2qrMvMeOjjsCCT2z0mL NtKsCRHCZk/YKYtXODakklWfHy7FM4qR6J7vFgo7NEHsitf/MkTiV9U36SPQgrP/ 95GzQSwViwvvUnXSphCPWnoBOTKr/2MlrUuYNAaJuRQgOIlVDZXSNgvExpxyegAA stNNjNWDCcBZAaRfeW8R+r9YSkPfUIcgbwVlB3d3E7p0KrJ/38xoAPBObr3PbdlD hqQMN9t8UGLifUcPnhwehsXEwml2uawufTL2iKsD5t5MGjwBcrqYYQKZtf1j+EeZ IDdWJUpSaEkQzY2FKqXDJON3qWKyk9127jwdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4BfwIIXgxBlZqhl71wjFL75+s3wwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRCZndJSVhneEJsWnFobDcx d2pGTDc1LXMzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xqAwDQYJKoZIhvcNAQELBQADggEBACcG/uI2K76+wc8LZLNgLGZM6iIqCNWWzVFU uVqutzY3BFTg5/wUCsZY70W9FvBKrqkGYc/NT3IJQ4r6LG1u+GM8ptIbzDjEbogb mGVhScqcO82tpFz/1COLW1v/3nsAzW0emgr80R+9hvRuMVoMj5vMp/9EuNDjBjUC Jh43KdX27g10GPdy2/2rKgN5foCzSa9e8gxsjBuhUqbJrVA40lLtsrb2UGf9+ca9 nFBtph3ys+LXnuL9zm1r3beam16V+hd/iAZjql7gX98OOcyP4XpH9lOyjNRbyJ/2 60Fey5C7aBQxqIRIhXw0nWjfb8RXG2dlOw01yFMvB55Hk49o9f8= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:31 2025 by rpki-client