$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9KmObOCb89ZFCzk4UaN_jkRK9QE.roa File: 9KmObOCb89ZFCzk4UaN_jkRK9QE.roa (raw, json) Hash identifier: xyHgF3VkuRwyjSGIjja5fhJBeNYfYsdCEnIZ1ANfDDM= Subject key identifier: F4:A9:8E:6C:E0:9B:F3:D6:45:0B:39:38:51:A3:7F:8E:44:4A:F5:01 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2686 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9KmObOCb89ZFCzk4UaN_jkRK9QE.roa Signing time: Fri 22 Aug 2025 08:43:00 +0000 ROA not before: Fri 22 Aug 2025 08:43:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 119.77.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9862 (0x2686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F4A98E6CE09BF3D6450B393851A37F8E444AF501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:73:bc:59:76:2a:85:ec:41:e1:89:2b:be: 6e:95:42:f9:96:57:17:cb:3c:2e:d0:64:9c:72:e2: a4:e0:b7:e9:be:f3:83:69:93:3b:7d:f5:bf:e5:96: 2d:3b:16:8e:0b:cb:b6:e8:76:65:80:6d:0d:dc:7a: b7:18:00:6b:f4:96:20:53:a1:d0:7b:8f:ba:73:a5: 90:46:72:09:db:bb:d2:bc:42:6b:db:6f:44:a5:d4: a9:79:e1:1c:4f:5e:17:00:30:32:1e:0e:16:0a:75: f1:7e:79:d6:0a:6a:ad:a3:b1:a4:77:9a:04:6c:a7: af:04:3d:b6:a0:e7:ff:36:8e:92:28:7b:73:8a:0b: 9e:c8:e7:03:a9:af:63:87:a0:f7:4d:72:e3:fe:5a: ba:74:0e:de:60:ba:31:5d:8d:10:8e:7f:fe:11:c8: 24:5c:71:10:02:89:01:ac:d3:a3:d6:57:d3:fd:26: 87:50:42:98:49:19:a0:22:f5:5a:d0:8a:aa:00:b8: 60:e6:3d:ed:42:4a:b3:0b:35:46:59:7c:b0:f5:d0: 18:79:a5:f0:7b:87:48:20:55:18:d2:38:db:f8:35: a7:6b:22:4f:09:39:f2:ef:a1:88:fe:61:df:5e:54: b9:1f:e0:a0:87:4b:f1:a6:d9:7c:82:93:38:75:be: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A9:8E:6C:E0:9B:F3:D6:45:0B:39:38:51:A3:7F:8E:44:4A:F5:01 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9KmObOCb89ZFCzk4UaN_jkRK9QE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.160.0/19 Signature Algorithm: sha256WithRSAEncryption 7c:e1:98:c2:28:71:53:c0:42:e0:4f:58:f6:99:4f:d3:1e:12: 77:07:b5:d7:11:bf:df:e7:e4:30:61:01:d4:26:47:58:99:2a: 75:49:65:65:59:26:c9:f0:33:68:bb:20:f4:8b:25:1f:bd:04: ca:d8:38:24:22:04:ed:ac:df:2a:e0:ec:53:de:c4:e8:61:fe: d1:94:91:6d:2d:6b:78:31:71:0a:36:83:fd:7b:9a:40:e9:1b: a3:ca:0d:ca:21:97:63:95:90:94:35:a2:1d:3d:ed:50:b8:17: 47:29:93:91:b6:fd:a7:79:30:90:a4:d5:0d:e6:0c:0d:4a:f5: 08:f4:e4:a4:c4:c0:67:01:13:d1:0f:1d:38:7f:8e:63:92:00: bd:1d:9f:ff:ea:92:c8:56:dd:8a:50:d1:2f:16:05:1e:c1:e8: 93:de:e1:5e:5b:bf:47:b7:c4:4e:ab:6a:34:70:e8:bf:5d:02: 1c:0a:3a:40:4c:35:bb:86:f1:fe:54:89:ca:dc:2a:d2:d1:98: eb:d9:c6:78:7a:42:63:dc:0c:6a:12:4e:fc:b2:ad:a8:10:14: 07:ce:68:4d:89:5d:79:c7:fa:e3:94:7e:b0:8c:8f:f7:bc:43: 6a:65:d6:6f:cb:30:ad:18:14:6f:b0:75:b2:71:2d:94:00:62: ab:9b:57:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY0QTk4RTZDRTA5QkYz RDY0NTBCMzkzODUxQTM3RjhFNDQ0QUY1MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4VHO8WXYqhexB4Ykrvm6VQvmWVxfLPC7QZJxy4qTgt+m+84Np kzt99b/lli07Fo4Ly7bodmWAbQ3cercYAGv0liBTodB7j7pzpZBGcgnbu9K8Qmvb b0Sl1Kl54RxPXhcAMDIeDhYKdfF+edYKaq2jsaR3mgRsp68EPbag5/82jpIoe3OK C57I5wOpr2OHoPdNcuP+Wrp0Dt5gujFdjRCOf/4RyCRccRACiQGs06PWV9P9JodQ QphJGaAi9VrQiqoAuGDmPe1CSrMLNUZZfLD10Bh5pfB7h0ggVRjSONv4NadrIk8J OfLvoYj+Yd9eVLkf4KCHS/Gm2XyCkzh1vi6FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9KmObOCb89ZFCzk4UaN/jkRK9QEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzlLbU9iT0NiODlaRkN6azRV YU5famtSSzlRRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3 TaAwDQYJKoZIhvcNAQELBQADggEBAHzhmMIocVPAQuBPWPaZT9MeEncHtdcRv9/n 5DBhAdQmR1iZKnVJZWVZJsnwM2i7IPSLJR+9BMrYOCQiBO2s3yrg7FPexOhh/tGU kW0ta3gxcQo2g/17mkDpG6PKDcohl2OVkJQ1oh097VC4F0cpk5G2/ad5MJCk1Q3m DA1K9Qj05KTEwGcBE9EPHTh/jmOSAL0dn//qkshW3YpQ0S8WBR7B6JPe4V5bv0e3 xE6rajRw6L9dAhwKOkBMNbuG8f5UicrcKtLRmOvZxnh6QmPcDGoSTvyyragQFAfO aE2JXXnH+uOUfrCMj/e8Q2pl1m/LMK0YFG+wdbJxLZQAYqubVxM= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:41 2025 by rpki-client