$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ADOOQd08t0VoPGUTZBcjFMH-w8I.roa File: ADOOQd08t0VoPGUTZBcjFMH-w8I.roa (raw, json) Hash identifier: OuEvuqYDtRPX7J9+FyXpax2uT1GkXIq1zW8+3D1VXro= Subject key identifier: 00:33:8E:41:DD:3C:B7:45:68:3C:65:13:64:17:23:14:C1:FE:C3:C2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25D9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ADOOQd08t0VoPGUTZBcjFMH-w8I.roa Signing time: Fri 22 Aug 2025 08:42:19 +0000 ROA not before: Fri 22 Aug 2025 08:42:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9689 (0x25d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=00338E41DD3CB745683C651364172314C1FEC3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:d7:5c:c6:2c:a2:1e:71:32:12:a2:b6:d5: fb:78:43:09:a3:a7:52:57:14:64:d9:29:98:00:c8: a4:93:ac:e3:bf:4c:b3:f9:7a:11:a9:37:fc:fa:ac: 5b:fa:4d:7f:18:80:2e:48:7d:1d:37:da:ae:08:b5: 0c:bf:46:60:5f:f5:31:ec:b7:41:ec:cb:2a:47:59: 42:d0:31:b8:7e:37:a3:91:cd:7a:34:97:98:f3:ac: 5f:13:86:11:3b:aa:2f:df:80:da:79:7b:32:8e:e8: cd:ab:d4:6a:ea:fd:31:77:43:d3:04:cc:00:8f:ac: 0d:78:6e:47:19:3e:d4:89:8d:ab:83:55:1c:09:ed: d3:2d:f5:68:dd:6d:97:9a:d1:4b:bf:b3:10:68:f8: fd:41:ad:5a:6f:a9:70:36:da:0d:eb:14:ed:65:ef: 9f:33:70:e3:ef:be:b3:1f:67:22:f4:bb:e5:7a:b6: c3:5e:85:95:b6:bc:47:90:ea:e2:a7:6a:6b:90:89: 9f:24:71:ac:35:69:33:6c:aa:cb:d9:9d:30:27:a7: f2:8a:0f:97:14:a9:50:bf:ca:c9:02:4b:34:14:b4: 4f:fd:07:bd:89:ab:29:94:9d:57:a0:ff:50:c1:a0: 01:98:19:b2:7c:76:92:36:b3:1d:52:27:bf:32:93: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:8E:41:DD:3C:B7:45:68:3C:65:13:64:17:23:14:C1:FE:C3:C2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ADOOQd08t0VoPGUTZBcjFMH-w8I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.61.0/24 Signature Algorithm: sha256WithRSAEncryption 12:3c:61:de:61:d4:dd:cc:f5:12:16:4a:13:b2:d0:3c:db:ad: da:d9:20:2b:e4:f3:0f:63:a7:25:58:11:aa:bb:b5:ab:37:73: db:79:ba:a5:03:a2:79:28:e0:3a:a0:8a:d3:c3:17:5e:de:01: 44:5a:11:7b:2b:d2:19:4c:6b:ee:d3:e5:17:d0:1e:97:79:93: 2c:8e:bf:02:ca:27:71:3f:1f:61:9f:a5:9c:b1:1d:02:51:87: 9e:39:77:68:1f:e3:25:d8:07:d6:d5:50:7f:da:fd:14:0d:b2: a6:37:d4:41:d6:2f:31:33:1f:08:3f:b1:59:23:3b:df:47:e8: 7d:ff:6c:38:4b:e8:e1:27:f5:83:31:ae:5a:f5:6a:80:f8:0a: 51:2d:3d:0a:40:a9:99:46:4d:69:33:fd:a7:12:09:e7:5f:87: d5:0f:53:06:8e:0c:e6:82:63:51:bc:9b:57:03:72:fe:23:e2: b9:4a:77:08:e2:47:aa:c0:e0:25:d1:64:9b:5e:41:a5:f9:1a: b1:8a:74:1c:33:9f:64:ff:8a:81:9e:a0:7a:7a:d2:30:6a:91: d6:06:71:41:23:4a:97:d6:21:2d:53:7f:80:37:46:83:e5:3c: 5b:0d:b2:37:94:74:5d:2e:88:84:30:a2:bc:19:c8:14:bf:6c: 45:fe:83:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwMzM4RTQxREQzQ0I3 NDU2ODNDNjUxMzY0MTcyMzE0QzFGRUMzQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClcNdcxiyiHnEyEqK21ft4Qwmjp1JXFGTZKZgAyKSTrOO/TLP5 ehGpN/z6rFv6TX8YgC5IfR032q4ItQy/RmBf9THst0HsyypHWULQMbh+N6ORzXo0 l5jzrF8ThhE7qi/fgNp5ezKO6M2r1Grq/TF3Q9MEzACPrA14bkcZPtSJjauDVRwJ 7dMt9WjdbZea0Uu/sxBo+P1BrVpvqXA22g3rFO1l758zcOPvvrMfZyL0u+V6tsNe hZW2vEeQ6uKnamuQiZ8kcaw1aTNsqsvZnTAnp/KKD5cUqVC/yskCSzQUtE/9B72J qymUnVeg/1DBoAGYGbJ8dpI2sx1SJ78ykzlnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUADOOQd08t0VoPGUTZBcjFMH+w8IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FET09RZDA4dDBWb1BHVVRa QmNqRk1ILXc4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx nj0wDQYJKoZIhvcNAQELBQADggEBABI8Yd5h1N3M9RIWShOy0DzbrdrZICvk8w9j pyVYEaq7tas3c9t5uqUDonko4DqgitPDF17eAURaEXsr0hlMa+7T5RfQHpd5kyyO vwLKJ3E/H2GfpZyxHQJRh545d2gf4yXYB9bVUH/a/RQNsqY31EHWLzEzHwg/sVkj O99H6H3/bDhL6OEn9YMxrlr1aoD4ClEtPQpAqZlGTWkz/acSCedfh9UPUwaODOaC Y1G8m1cDcv4j4rlKdwjiR6rA4CXRZJteQaX5GrGKdBwzn2T/ioGeoHp60jBqkdYG cUEjSpfWIS1Tf4A3RoPlPFsNsjeUdF0uiIQworwZyBS/bEX+g8Q= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:40 2025 by rpki-client