$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/55YcaAc8pxPt6DdXt13TP72wP9c.roa File: 55YcaAc8pxPt6DdXt13TP72wP9c.roa (raw, json) Hash identifier: jkwPKN8mf1iCILelzCNqOcvlEEARDG/U1NasOGeAgDU= Subject key identifier: E7:96:1C:68:07:3C:A7:13:ED:E8:37:57:B7:5D:D3:3F:BD:B0:3F:D7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2722 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/55YcaAc8pxPt6DdXt13TP72wP9c.roa Signing time: Fri 22 Aug 2025 08:43:35 +0000 ROA not before: Fri 22 Aug 2025 08:43:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.159.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10018 (0x2722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E7961C68073CA713EDE83757B75DD33FBDB03FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:ed:b0:ab:e1:e2:fe:d3:30:91:49:57:13: a5:70:ef:13:6b:4c:9e:1f:f3:44:f6:4c:cc:6d:3a: 3f:f8:b9:b7:b0:39:3c:f4:9c:43:76:36:c9:c4:5a: 06:92:b2:08:89:b7:2f:5f:9d:b2:8c:f5:f9:7d:30: 14:90:c6:bb:d3:04:e2:ff:cc:7c:a3:9e:e2:47:ec: fe:7f:d7:0b:5b:07:76:37:01:0e:35:ce:f1:6d:24: 6f:2c:7b:65:87:a0:e5:ea:f8:40:61:dd:f0:54:4a: 23:29:bf:f1:08:c7:8f:ca:f6:da:76:5d:d4:2a:9e: e1:aa:da:b9:52:7e:ee:c9:fa:9d:4a:d4:1f:f4:b1: 3e:65:20:5f:50:82:de:93:48:3c:21:ac:a8:20:f9: 5f:43:92:68:79:a2:00:70:86:c0:f3:da:b3:f0:3a: 38:57:fd:d3:6a:54:1d:0d:3b:b3:99:bd:34:a0:1b: ae:0b:78:26:e2:bb:0f:e9:29:dd:de:e6:89:eb:4c: 11:38:56:18:08:49:5c:9c:bd:f7:87:51:7c:0d:4c: a4:72:6e:91:f2:72:58:38:06:0c:a5:1e:d2:8e:86: 5f:7d:3a:b0:8f:3f:f5:c6:3e:40:06:73:87:ec:82: 81:c0:0b:a4:d0:15:6b:55:bc:e9:ab:3a:a5:54:83: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:96:1C:68:07:3C:A7:13:ED:E8:37:57:B7:5D:D3:3F:BD:B0:3F:D7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/55YcaAc8pxPt6DdXt13TP72wP9c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.40.0/21 Signature Algorithm: sha256WithRSAEncryption 27:e3:3e:e3:e1:02:3b:8e:73:84:46:26:40:bb:96:62:55:af: 23:f2:3a:b1:65:82:f0:f4:e8:93:63:08:4d:61:1b:e9:d9:14: dc:dc:43:40:00:ca:91:9b:b8:0b:41:e6:e2:eb:8d:ac:43:31: 27:0a:05:fe:ed:02:11:9a:8c:14:55:d1:48:7b:56:f8:6d:1f: 8c:23:15:70:01:8e:08:75:d9:15:c3:d9:cd:1c:67:16:96:f1: db:93:c1:1b:95:05:ca:8b:2b:9e:c3:f3:a3:9b:8f:1b:fb:5d: d9:6d:06:b4:e0:58:01:74:3e:dd:8f:64:03:94:5b:6a:cd:cc: bb:7d:dc:42:62:a2:ad:11:45:88:4f:68:58:14:18:50:68:b9: 5a:54:43:9c:32:ca:52:8a:96:94:41:aa:19:30:b7:7f:94:4e: 51:e3:23:df:38:27:c7:4f:af:fc:c2:73:63:65:2b:8f:4a:67: fb:4a:46:d8:9b:5a:9c:73:6b:de:b5:63:5c:2d:86:c4:ae:a1: 8d:33:c4:7a:bd:12:b1:43:e9:e1:cb:31:ab:2e:96:fa:ae:27: b3:ae:fd:af:e0:7b:28:b2:af:b4:43:32:48:f6:91:f3:c3:22: 02:01:87:e2:7b:13:11:4d:ff:67:fa:b9:32:ee:1c:10:8d:13: 3f:c2:0b:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU3OTYxQzY4MDczQ0E3 MTNFREU4Mzc1N0I3NUREMzNGQkRCMDNGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2tu2wq+Hi/tMwkUlXE6Vw7xNrTJ4f80T2TMxtOj/4ubewOTz0 nEN2NsnEWgaSsgiJty9fnbKM9fl9MBSQxrvTBOL/zHyjnuJH7P5/1wtbB3Y3AQ41 zvFtJG8se2WHoOXq+EBh3fBUSiMpv/EIx4/K9tp2XdQqnuGq2rlSfu7J+p1K1B/0 sT5lIF9Qgt6TSDwhrKgg+V9Dkmh5ogBwhsDz2rPwOjhX/dNqVB0NO7OZvTSgG64L eCbiuw/pKd3e5onrTBE4VhgISVycvfeHUXwNTKRybpHyclg4BgylHtKOhl99OrCP P/XGPkAGc4fsgoHAC6TQFWtVvOmrOqVUg96fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU55YcaAc8pxPt6DdXt13TP72wP9cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzU1WWNhQWM4cHhQdDZEZFh0 MTNUUDcyd1A5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nygwDQYJKoZIhvcNAQELBQADggEBACfjPuPhAjuOc4RGJkC7lmJVryPyOrFlgvD0 6JNjCE1hG+nZFNzcQ0AAypGbuAtB5uLrjaxDMScKBf7tAhGajBRV0Uh7VvhtH4wj FXABjgh12RXD2c0cZxaW8duTwRuVBcqLK57D86Objxv7XdltBrTgWAF0Pt2PZAOU W2rNzLt93EJioq0RRYhPaFgUGFBouVpUQ5wyylKKlpRBqhkwt3+UTlHjI984J8dP r/zCc2NlK49KZ/tKRtibWpxza961Y1wthsSuoY0zxHq9ErFD6eHLMasulvquJ7Ou /a/geyiyr7RDMkj2kfPDIgIBh+J7ExFN/2f6uTLuHBCNEz/CC4I= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:48 2025 by rpki-client