$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A1KV47u_IFThFaBgpB5vzs6OiWg.roa File: A1KV47u_IFThFaBgpB5vzs6OiWg.roa (raw, json) Hash identifier: If1blEp2ktDlHslZBc+QM8XWHqnkNinNlm2HoFf9cTQ= Subject key identifier: 03:52:95:E3:BB:BF:20:54:E1:15:A0:60:A4:1E:6F:CE:CE:8E:89:68 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25D0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A1KV47u_IFThFaBgpB5vzs6OiWg.roa Signing time: Fri 22 Aug 2025 08:42:16 +0000 ROA not before: Fri 22 Aug 2025 08:42:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 211.76.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9680 (0x25d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=035295E3BBBF2054E115A060A41E6FCECE8E8968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:ce:7e:0f:35:ea:6b:72:db:7f:f4:3a:53: dc:4b:ed:25:1f:26:94:f6:d7:fc:9f:09:ae:39:85: 33:13:a5:65:7b:2b:04:84:3f:2b:cb:83:4a:4e:7d: 00:09:59:1b:4b:c2:c5:06:39:1b:58:a8:c0:82:45: bc:a3:8e:e6:f5:9d:fc:e2:1d:7d:dd:90:9e:9b:9d: fe:e6:7e:0e:c6:95:2a:fd:5c:51:c3:ff:b2:b0:c8: 65:88:8c:80:3e:da:c4:c9:90:81:2b:28:65:e3:b6: a3:fa:52:d2:6f:20:14:72:08:c0:f5:a7:17:18:d3: ea:79:c5:24:06:e2:63:32:f6:1c:f8:2b:3c:a2:0f: 93:08:0e:d4:3a:5c:77:ce:64:36:ff:f4:72:f6:ef: 9f:8e:95:3a:06:50:f1:07:08:26:66:4c:7b:86:92: ee:85:7d:48:77:5e:a3:df:07:c5:75:95:01:56:3e: 99:92:44:cd:8e:ec:5a:22:62:72:90:72:75:f6:41: 03:06:fc:12:d8:b2:9b:bb:5a:7c:0a:3e:6b:3b:69: 0c:c6:97:9d:c4:fe:6a:49:7f:ce:6c:1f:77:01:5e: 63:c8:f0:4a:e6:f3:3c:ec:d1:4b:a9:16:b9:8a:ad: bc:db:f1:65:c6:43:33:50:7e:54:54:5d:8d:42:33: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:52:95:E3:BB:BF:20:54:E1:15:A0:60:A4:1E:6F:CE:CE:8E:89:68 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A1KV47u_IFThFaBgpB5vzs6OiWg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.79.0/24 Signature Algorithm: sha256WithRSAEncryption 83:0e:cf:79:7f:af:94:21:fa:79:d0:ca:81:32:70:fd:7a:e9: c4:bf:67:65:2f:15:ee:bc:ac:b4:6b:b4:e0:fe:9a:e4:3d:e1: 2c:5a:30:a0:6d:59:de:6b:e1:a6:b4:e2:39:1b:43:28:29:02: f9:76:6b:cc:d3:7b:f3:cf:d1:f5:5e:05:ba:3e:9d:7c:c7:8c: cb:25:eb:de:cc:73:c9:cf:f6:cb:87:a2:c5:08:87:5c:7e:b6: 58:1c:b7:1c:37:a4:b0:46:d7:fd:2a:81:fc:50:ba:3e:2a:c3: 3a:99:5d:72:f1:22:92:13:de:d2:60:b7:7d:7d:11:ef:8a:5c: bb:3c:fa:38:a6:b9:fe:03:27:a5:55:77:5d:6e:8d:00:36:ad: 8a:f5:df:a5:e7:34:4c:77:c5:c7:32:63:91:e7:60:63:74:f2: 2b:47:d1:1e:4e:a9:0a:02:e4:02:8e:3f:fc:4f:8d:bb:b5:25: 74:e1:10:68:5d:30:47:bf:80:b7:4f:f1:d3:df:3e:ce:ab:40: 4d:ca:db:f4:1c:df:12:04:e7:ad:d9:1c:90:3c:46:6f:bf:98: 0b:c6:80:e8:23:d1:c3:05:8b:92:f6:c5:d3:5f:1e:44:56:7f: b5:3a:59:a5:60:1f:fa:53:b9:51:ee:ce:16:ec:b9:72:e0:4c: 63:94:64:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAzNTI5NUUzQkJCRjIw NTRFMTE1QTA2MEE0MUU2RkNFQ0U4RTg5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVCM5+DzXqa3Lbf/Q6U9xL7SUfJpT21/yfCa45hTMTpWV7KwSE PyvLg0pOfQAJWRtLwsUGORtYqMCCRbyjjub1nfziHX3dkJ6bnf7mfg7GlSr9XFHD /7KwyGWIjIA+2sTJkIErKGXjtqP6UtJvIBRyCMD1pxcY0+p5xSQG4mMy9hz4Kzyi D5MIDtQ6XHfOZDb/9HL275+OlToGUPEHCCZmTHuGku6FfUh3XqPfB8V1lQFWPpmS RM2O7FoiYnKQcnX2QQMG/BLYspu7WnwKPms7aQzGl53E/mpJf85sH3cBXmPI8Erm 8zzs0UupFrmKrbzb8WXGQzNQflRUXY1CM8mHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUA1KV47u/IFThFaBgpB5vzs6OiWgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ExS1Y0N3VfSUZUaEZhQmdw QjV2enM2T2lXZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TE8wDQYJKoZIhvcNAQELBQADggEBAIMOz3l/r5Qh+nnQyoEycP166cS/Z2UvFe68 rLRrtOD+muQ94SxaMKBtWd5r4aa04jkbQygpAvl2a8zTe/PP0fVeBbo+nXzHjMsl 697Mc8nP9suHosUIh1x+tlgctxw3pLBG1/0qgfxQuj4qwzqZXXLxIpIT3tJgt319 Ee+KXLs8+jimuf4DJ6VVd11ujQA2rYr136XnNEx3xccyY5HnYGN08itH0R5OqQoC 5AKOP/xPjbu1JXThEGhdMEe/gLdP8dPfPs6rQE3K2/Qc3xIE563ZHJA8Rm+/mAvG gOgj0cMFi5L2xdNfHkRWf7U6WaVgH/pTuVHuzhbsuXLgTGOUZGY= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:39 2025 by rpki-client