$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7bx4C6i9BzC8xK4BqZWkk1LqyKE.roa File: 7bx4C6i9BzC8xK4BqZWkk1LqyKE.roa (raw, json) Hash identifier: w3ZbwJdydeVXa46ewTHOjW1ADAX3qxQV3ZPwtL8sqfo= Subject key identifier: ED:BC:78:0B:A8:BD:07:30:BC:C4:AE:01:A9:95:A4:93:52:EA:C8:A1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2618 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7bx4C6i9BzC8xK4BqZWkk1LqyKE.roa Signing time: Fri 22 Aug 2025 08:42:34 +0000 ROA not before: Fri 22 Aug 2025 08:42:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 211.76.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9752 (0x2618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EDBC780BA8BD0730BCC4AE01A995A49352EAC8A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:37:f2:6e:2f:72:4f:fc:36:f2:b1:62:d3: d3:21:c7:41:c5:37:11:e5:4e:62:06:6d:81:44:11: 38:c3:10:75:e1:c2:3a:78:88:d6:b5:bf:4d:11:3e: ed:45:1a:52:36:d5:ba:38:1d:b7:07:38:84:47:75: 25:31:d4:a8:73:99:bd:f9:30:b6:2f:6a:81:31:27: e6:a1:3a:47:f4:16:fa:f7:d3:cb:b7:37:bf:a8:4d: 85:84:28:24:72:ed:ff:e1:7e:ff:b6:cc:5d:c9:ce: 91:42:91:34:a5:3d:46:6a:a7:ad:ba:1b:eb:51:15: 44:53:d5:fd:71:0d:f1:60:e7:5c:5c:5d:90:f1:f1: 7e:7c:45:1b:31:9b:97:39:c7:b2:62:9f:89:69:68: 50:b3:97:18:92:24:7c:85:a3:ef:eb:98:b0:76:d2: bf:59:49:44:22:7b:51:05:3a:6d:a9:85:f1:09:0c: 72:ad:0b:a5:35:a9:4e:de:f9:ac:91:77:9e:4a:c9: 25:1c:1b:57:b0:ca:33:27:4b:00:66:e3:f0:06:8b: 02:c3:9c:7d:47:1e:9d:35:82:b1:5e:86:70:96:28: 4f:28:c1:9a:c6:06:ec:28:f3:f1:92:60:f1:68:01: f9:68:aa:c0:dc:31:d0:57:e5:14:e5:6e:ce:33:04: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BC:78:0B:A8:BD:07:30:BC:C4:AE:01:A9:95:A4:93:52:EA:C8:A1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7bx4C6i9BzC8xK4BqZWkk1LqyKE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.46.0/23 Signature Algorithm: sha256WithRSAEncryption 53:67:04:ba:56:01:6c:7a:53:cf:94:03:a4:c7:7c:2f:b1:db: ad:96:f3:4f:71:b0:aa:64:a2:fd:6e:11:49:57:ee:4b:0b:c6: f3:d0:7a:af:7d:27:10:e7:db:c9:47:c0:e0:82:50:41:b9:e5: ae:08:87:87:3b:0b:19:68:17:a0:a9:51:d9:79:ac:03:e9:f2: cf:16:07:cb:c4:18:02:f1:3e:cd:55:ed:a0:9d:ce:04:c5:75: 25:f9:7e:9e:3b:1a:25:f9:fd:4e:6f:d5:a6:c8:76:58:1c:25: b3:e4:47:04:49:ad:59:cd:0d:8b:2d:f4:cd:7a:3f:67:c6:48: e2:00:72:ef:50:5d:1c:34:05:dc:0a:9a:e4:2b:d4:bf:77:6d: 2f:61:a5:7b:7e:d8:33:5e:c1:4c:73:48:b0:72:0a:54:8b:a6: 7e:ed:5a:4a:eb:7c:5e:88:83:29:82:b8:3b:81:5f:e7:4c:b5: 2b:8a:d3:38:59:cc:38:b9:87:bd:2d:cd:07:59:1f:33:2c:1e: 59:01:18:2f:14:f4:bd:2e:db:2c:30:0e:6e:db:aa:94:bf:77: ef:50:d7:16:b9:64:d1:f9:7e:ae:33:43:bf:cc:e3:63:41:36: 1b:53:ea:af:c2:f4:8a:f9:2c:9b:f5:cf:14:68:18:c5:45:79: 16:47:2b:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVEQkM3ODBCQThCRDA3 MzBCQ0M0QUUwMUE5OTVBNDkzNTJFQUM4QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8vDfybi9yT/w28rFi09Mhx0HFNxHlTmIGbYFEETjDEHXhwjp4 iNa1v00RPu1FGlI21bo4HbcHOIRHdSUx1Khzmb35MLYvaoExJ+ahOkf0Fvr308u3 N7+oTYWEKCRy7f/hfv+2zF3JzpFCkTSlPUZqp626G+tRFURT1f1xDfFg51xcXZDx 8X58RRsxm5c5x7Jin4lpaFCzlxiSJHyFo+/rmLB20r9ZSUQie1EFOm2phfEJDHKt C6U1qU7e+ayRd55KySUcG1ewyjMnSwBm4/AGiwLDnH1HHp01grFehnCWKE8owZrG Buwo8/GSYPFoAfloqsDcMdBX5RTlbs4zBIMnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7bx4C6i9BzC8xK4BqZWkk1LqyKEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdieDRDNmk5QnpDOHhLNEJx WldrazFMcXlLRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TC4wDQYJKoZIhvcNAQELBQADggEBAFNnBLpWAWx6U8+UA6THfC+x262W809xsKpk ov1uEUlX7ksLxvPQeq99JxDn28lHwOCCUEG55a4Ih4c7CxloF6CpUdl5rAPp8s8W B8vEGALxPs1V7aCdzgTFdSX5fp47GiX5/U5v1abIdlgcJbPkRwRJrVnNDYst9M16 P2fGSOIAcu9QXRw0BdwKmuQr1L93bS9hpXt+2DNewUxzSLByClSLpn7tWkrrfF6I gymCuDuBX+dMtSuK0zhZzDi5h70tzQdZHzMsHlkBGC8U9L0u2ywwDm7bqpS/d+9Q 1xa5ZNH5fq4zQ7/M42NBNhtT6q/C9Ir5LJv1zxRoGMVFeRZHK4Q= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:27 2025 by rpki-client