$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8u2lD54HxxDLn-nSxbW00ib22Lo.roa File: 8u2lD54HxxDLn-nSxbW00ib22Lo.roa (raw, json) Hash identifier: xnRWWO7uU1d2UjuwqUPILfe+Ao+YC4Nh2Z+hXhAFqQI= Subject key identifier: F2:ED:A5:0F:9E:07:C7:10:CB:9F:E9:D2:C5:B5:B4:D2:26:F6:D8:BA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 264C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8u2lD54HxxDLn-nSxbW00ib22Lo.roa Signing time: Fri 22 Aug 2025 08:42:47 +0000 ROA not before: Fri 22 Aug 2025 08:42:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.159.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9804 (0x264c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F2EDA50F9E07C710CB9FE9D2C5B5B4D226F6D8BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:a5:d2:f8:24:2d:b1:f3:e7:6d:9b:3c:0b: e2:3f:c2:5c:76:3b:a3:70:37:46:fd:bf:b9:e5:f8: ef:cd:ee:14:06:8d:80:bf:c0:0f:9f:86:63:51:2d: b4:bd:66:33:d5:94:26:03:c7:6a:9e:5c:09:9a:d3: 87:c5:14:f2:b5:a3:96:da:2a:f6:03:62:18:d7:d0: 4b:1c:3b:08:49:8a:01:c1:a8:0d:5f:e2:83:76:6d: df:0a:67:77:e2:5c:b0:ce:99:70:c0:7a:9e:1c:5b: 23:e1:a7:c4:5a:d0:7d:9b:65:09:ee:3c:bb:a7:38: 2f:e6:4e:ed:c9:20:6e:fc:7c:85:8f:8a:df:b2:b7: 7c:12:73:bd:e8:8a:19:b6:68:d9:ba:39:44:4f:92: d4:26:c7:5a:11:d6:2a:18:eb:4d:cd:73:93:86:49: 9a:0c:7e:e4:3c:ac:c2:f9:31:19:6a:de:ef:b4:3f: 1f:a9:45:db:0c:47:0b:c8:8e:7f:7e:0a:08:f6:25: f1:98:5b:9c:fc:e3:55:e4:88:d1:e7:c5:3e:3d:e0: 3a:74:dd:85:f2:a4:67:28:d0:dc:36:ab:bf:c2:9a: d7:31:1b:e5:a6:86:7b:8d:96:2c:34:fa:f8:36:99: ca:f4:6c:a4:c0:13:c6:e0:df:66:82:cd:e8:46:e2: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:ED:A5:0F:9E:07:C7:10:CB:9F:E9:D2:C5:B5:B4:D2:26:F6:D8:BA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8u2lD54HxxDLn-nSxbW00ib22Lo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.128.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:5e:b1:fb:4f:16:71:31:f3:30:4e:c7:05:45:c7:b2:96:98: 26:80:9f:18:80:40:a5:99:37:7d:7a:c1:e8:f1:15:45:35:d7: 24:da:19:bc:d1:c9:dc:86:30:f6:53:9e:b3:b4:de:ac:53:e4: f7:da:9f:58:b4:48:bc:4b:4a:17:d3:0e:10:ed:ad:1e:fd:84: 3d:e7:ac:6c:92:86:7d:ef:11:85:09:06:6d:25:ee:f9:15:05: b8:e3:9c:d4:6b:26:fb:3e:08:86:5f:1b:0b:d4:74:17:2f:14: 18:45:04:72:f4:41:bb:14:36:94:53:da:ad:2f:2b:ae:37:95: 54:b1:a4:14:f7:5d:e1:80:f3:e1:a9:6f:19:87:18:ca:46:f5: 55:af:87:97:e2:4f:d8:93:29:d1:70:60:38:b5:79:d6:3a:29: 25:b7:cb:5f:85:00:58:0c:7e:b7:04:b8:32:a6:76:01:3e:d1: ae:b6:c4:55:f9:b1:f3:ac:2b:56:0c:fe:9a:78:c8:7f:c1:f4: c4:0f:5e:32:88:f1:63:a9:fd:b8:a0:a2:b2:b4:cb:15:92:2d: 3d:27:2e:ba:4d:60:04:15:1b:16:03:c6:40:76:07:17:22:1a: 0e:64:79:a1:ae:7a:45:0c:d2:30:72:80:d5:07:c3:b0:c3:6d: c5:05:cd:e8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYyRURBNTBGOUUwN0M3 MTBDQjlGRTlEMkM1QjVCNEQyMjZGNkQ4QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLjaXS+CQtsfPnbZs8C+I/wlx2O6NwN0b9v7nl+O/N7hQGjYC/ wA+fhmNRLbS9ZjPVlCYDx2qeXAma04fFFPK1o5baKvYDYhjX0EscOwhJigHBqA1f 4oN2bd8KZ3fiXLDOmXDAep4cWyPhp8Ra0H2bZQnuPLunOC/mTu3JIG78fIWPit+y t3wSc73oihm2aNm6OURPktQmx1oR1ioY603Nc5OGSZoMfuQ8rML5MRlq3u+0Px+p RdsMRwvIjn9+Cgj2JfGYW5z841XkiNHnxT494Dp03YXypGco0Nw2q7/CmtcxG+Wm hnuNliw0+vg2mcr0bKTAE8bg32aCzehG4mYfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8u2lD54HxxDLn+nSxbW00ib22LowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzh1MmxENTRIeHhETG4tblN4 YlcwMGliMjJMby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n4AwDQYJKoZIhvcNAQELBQADggEBACtesftPFnEx8zBOxwVFx7KWmCaAnxiAQKWZ N316wejxFUU11yTaGbzRydyGMPZTnrO03qxT5Pfan1i0SLxLShfTDhDtrR79hD3n rGyShn3vEYUJBm0l7vkVBbjjnNRrJvs+CIZfGwvUdBcvFBhFBHL0QbsUNpRT2q0v K643lVSxpBT3XeGA8+GpbxmHGMpG9VWvh5fiT9iTKdFwYDi1edY6KSW3y1+FAFgM frcEuDKmdgE+0a62xFX5sfOsK1YM/pp4yH/B9MQPXjKI8WOp/bigorK0yxWSLT0n LrpNYAQVGxYDxkB2BxciGg5keaGuekUM0jBygNUHw7DDbcUFzeg= -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:32 2025 by rpki-client