$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8H3SEuM1PXGIIobcQUOv_eYreik.roa File: 8H3SEuM1PXGIIobcQUOv_eYreik.roa (raw, json) Hash identifier: DWC4el/ORPHedW/Lv0r9GjP0WwGbZwzEkOkm9YnGLKY= Subject key identifier: F0:7D:D2:12:E3:35:3D:71:88:22:86:DC:41:43:AF:FD:E6:2B:7A:29 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2651 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8H3SEuM1PXGIIobcQUOv_eYreik.roa Signing time: Fri 22 Aug 2025 08:42:48 +0000 ROA not before: Fri 22 Aug 2025 08:42:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 122.254.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9809 (0x2651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F07DD212E3353D71882286DC4143AFFDE62B7A29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:25:dc:ec:0f:94:76:04:9b:ca:24:0a:91:bc: 05:6b:b4:15:86:8e:63:16:ec:a9:7a:5e:0e:fd:b3: f8:18:c5:3c:da:75:8b:64:fb:b2:92:7f:43:de:88: 41:ab:f0:77:85:e4:9b:fd:40:71:69:36:bb:6c:b2: d1:f2:b0:d5:bf:0f:8c:cf:60:18:89:48:ce:19:90: 0b:98:a5:eb:db:55:cf:e9:86:74:2f:3d:41:e5:69: 11:dd:ad:5c:a1:55:60:a9:0d:ca:3c:50:3b:8f:08: 01:19:7e:07:00:3e:19:87:42:bb:7f:cb:86:53:ca: 5d:49:b1:61:23:48:02:27:a1:b2:7c:d8:26:87:b9: ca:95:73:e4:66:ea:aa:a5:98:d8:0a:4d:2c:b4:48: 2e:c7:80:bf:d3:35:58:79:e5:7c:1c:0c:69:0e:52: 71:ff:2b:06:26:68:66:fd:2b:2f:c3:97:66:38:29: 3e:ec:38:46:b5:a0:3d:65:c0:53:40:de:6c:7b:67: fb:a2:45:82:4e:ad:48:37:33:8e:83:75:a0:a2:64: d9:85:28:2c:5c:a0:2a:46:8a:86:bf:c1:0f:9e:d3: 0e:03:6f:71:9c:9a:6a:01:7f:6e:46:61:18:59:97: aa:9e:aa:b0:de:fd:b1:3c:b9:fe:43:65:c1:4e:3a: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7D:D2:12:E3:35:3D:71:88:22:86:DC:41:43:AF:FD:E6:2B:7A:29 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8H3SEuM1PXGIIobcQUOv_eYreik.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.40.0/21 Signature Algorithm: sha256WithRSAEncryption 31:d1:86:6f:ef:55:f6:2b:8d:4b:b8:7e:e4:c8:3a:6e:c7:11: be:ed:3c:8c:b0:7d:42:ef:df:d1:ce:44:33:de:a7:88:2a:7c: 04:7f:97:ca:48:b0:72:5a:1c:7f:6e:45:c6:86:bb:c8:b6:52: 0f:cc:59:ed:66:79:33:66:1b:20:ef:05:93:ac:e8:75:03:aa: dd:cf:a6:24:a0:4d:d4:cb:1f:65:0f:a4:8a:e0:af:e5:6d:43: bc:2b:9b:fa:1a:9c:1d:3f:e2:0f:20:b2:12:b7:5f:3f:cf:94: 03:b3:64:41:93:57:09:0a:86:cb:aa:f7:2f:34:cc:09:2a:d4: a6:a2:13:51:9e:2b:7c:d4:66:ff:15:41:a9:e4:de:9f:1a:8b: f3:4b:83:61:b6:f1:a4:bb:39:e8:5f:04:41:50:63:75:5b:cb: 96:b7:62:c9:15:2e:1f:03:e2:57:c6:ed:8b:e0:c1:45:bf:62: 7c:1a:58:eb:9d:50:7f:cd:89:18:ee:e9:43:19:84:e6:cf:b3: 88:8a:64:2d:dc:76:c4:37:4e:80:d5:88:a2:0f:12:33:ea:f0: a8:c8:a8:5b:09:03:8a:b3:f3:23:b4:39:7b:3f:49:94:4e:c3: 0f:0a:23:a8:6f:37:4c:43:30:b7:e5:8e:3f:44:00:08:6f:5e: 9e:e6:d4:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYwN0REMjEyRTMzNTNE NzE4ODIyODZEQzQxNDNBRkZERTYyQjdBMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuJdzsD5R2BJvKJAqRvAVrtBWGjmMW7Kl6Xg79s/gYxTzadYtk +7KSf0PeiEGr8HeF5Jv9QHFpNrtsstHysNW/D4zPYBiJSM4ZkAuYpevbVc/phnQv PUHlaRHdrVyhVWCpDco8UDuPCAEZfgcAPhmHQrt/y4ZTyl1JsWEjSAInobJ82CaH ucqVc+Rm6qqlmNgKTSy0SC7HgL/TNVh55XwcDGkOUnH/KwYmaGb9Ky/Dl2Y4KT7s OEa1oD1lwFNA3mx7Z/uiRYJOrUg3M46DdaCiZNmFKCxcoCpGioa/wQ+e0w4Db3Gc mmoBf25GYRhZl6qeqrDe/bE8uf5DZcFOOuOtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8H3SEuM1PXGIIobcQUOv/eYreikwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhIM1NFdU0xUFhHSUlvYmNR VU92X2VZcmVpay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /igwDQYJKoZIhvcNAQELBQADggEBADHRhm/vVfYrjUu4fuTIOm7HEb7tPIywfULv 39HORDPep4gqfAR/l8pIsHJaHH9uRcaGu8i2Ug/MWe1meTNmGyDvBZOs6HUDqt3P piSgTdTLH2UPpIrgr+VtQ7wrm/oanB0/4g8gshK3Xz/PlAOzZEGTVwkKhsuq9y80 zAkq1KaiE1GeK3zUZv8VQank3p8ai/NLg2G28aS7OehfBEFQY3Vby5a3YskVLh8D 4lfG7YvgwUW/YnwaWOudUH/NiRju6UMZhObPs4iKZC3cdsQ3ToDViKIPEjPq8KjI qFsJA4qz8yO0OXs/SZROww8KI6hvN0xDMLfljj9EAAhvXp7m1Hw= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:49 2025 by rpki-client