$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ap2BS14GjzNW9kh7wC7ZiiACtaQ.roa File: Ap2BS14GjzNW9kh7wC7ZiiACtaQ.roa (raw, json) Hash identifier: 4PMTKe54++k2AhJZHjjD2qp+QRoIwi4zzoRhngqe9Aw= Subject key identifier: 02:9D:81:4B:5E:06:8F:33:56:F6:48:7B:C0:2E:D9:8A:20:02:B5:A4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2683 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ap2BS14GjzNW9kh7wC7ZiiACtaQ.roa Signing time: Fri 22 Aug 2025 08:43:00 +0000 ROA not before: Fri 22 Aug 2025 08:43:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 49.159.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9859 (0x2683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=029D814B5E068F3356F6487BC02ED98A2002B5A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:89:b2:37:56:c7:14:98:95:0a:85:f5:3a: 6b:60:04:d7:d6:75:11:df:24:b9:41:65:6c:47:7e: 81:be:39:49:0b:91:05:70:7d:25:80:37:ce:b4:8a: 3a:4e:2e:1f:d1:9f:00:40:05:30:57:aa:10:a5:e1: 75:21:8c:ed:c6:d6:43:7e:6a:bc:29:67:2e:b2:ad: cf:23:8b:b2:d7:10:96:52:e9:c1:55:20:49:d7:e3: a4:9a:52:10:d9:28:f1:f2:ff:38:f1:b7:d5:18:ab: af:15:cc:43:05:62:6b:78:d2:4f:89:32:f6:84:11: 2f:b2:6a:3a:f8:2a:09:24:1a:33:62:bd:a8:04:8b: 58:d1:f7:19:8c:3e:eb:f0:2c:3d:7a:e8:e9:86:d5: 71:76:60:3f:03:16:65:6e:5d:d9:27:d1:89:b3:d5: 27:4d:cb:d7:f1:67:80:f7:14:9c:2e:be:5c:59:fa: fb:07:db:49:5f:d2:f4:e4:71:a8:a9:61:af:8a:86: 7a:d2:55:24:14:97:fe:1f:5b:8a:09:61:75:11:f8: 20:62:c3:82:ea:98:43:f5:0c:25:b9:b6:fa:6d:c8: d5:91:e9:95:7b:5d:ac:0d:2c:95:1e:e4:29:15:f3: 08:ab:79:08:9f:28:ab:3d:ce:94:6c:f0:2e:3a:d0: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9D:81:4B:5E:06:8F:33:56:F6:48:7B:C0:2E:D9:8A:20:02:B5:A4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ap2BS14GjzNW9kh7wC7ZiiACtaQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.64.0/22 Signature Algorithm: sha256WithRSAEncryption 87:d1:57:20:11:7a:47:7b:f3:34:c2:fd:3a:b0:c4:c4:6c:9b: 94:7c:fb:ae:d1:82:70:fb:42:be:21:4c:f1:74:92:b2:68:10: b1:45:94:d3:97:da:a7:8a:51:e6:07:90:42:d6:07:7b:66:4d: 6e:df:bf:bc:0c:09:78:74:37:5f:2e:d2:2e:d7:1d:f6:e1:09: c7:04:44:00:6d:c8:89:54:45:d7:4e:36:ea:94:39:c7:a4:5e: e8:0a:68:81:90:9e:66:c8:fe:c9:1c:9e:bd:e2:56:74:38:0c: 91:83:ec:ea:d7:38:ac:72:25:f7:41:f8:ce:aa:37:00:ba:92: 88:bf:61:c3:3f:2f:23:0b:b4:08:c0:8e:88:5c:27:35:91:0e: ef:2c:08:be:97:04:a7:6b:85:43:86:1d:d1:7e:dc:ec:53:3a: b6:75:93:c2:d3:68:69:d7:a8:1b:5c:aa:7b:cd:b2:af:18:c9: fb:1b:89:86:4e:6c:0d:fa:72:e6:73:1a:ea:fd:47:d0:ca:eb: 02:dd:c0:d8:67:bc:b3:0a:a1:a1:30:18:e0:f7:bc:7f:40:61: a8:5c:92:a2:ac:c5:75:d4:29:fd:15:3c:eb:bd:df:e8:bd:af: 53:5e:a9:16:4c:1b:74:8f:5e:43:86:8d:da:94:0f:c1:a7:04: 19:ad:0c:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAyOUQ4MTRCNUUwNjhG MzM1NkY2NDg3QkMwMkVEOThBMjAwMkI1QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpA4myN1bHFJiVCoX1OmtgBNfWdRHfJLlBZWxHfoG+OUkLkQVw fSWAN860ijpOLh/RnwBABTBXqhCl4XUhjO3G1kN+arwpZy6yrc8ji7LXEJZS6cFV IEnX46SaUhDZKPHy/zjxt9UYq68VzEMFYmt40k+JMvaEES+yajr4KgkkGjNivagE i1jR9xmMPuvwLD166OmG1XF2YD8DFmVuXdkn0Ymz1SdNy9fxZ4D3FJwuvlxZ+vsH 20lf0vTkcaipYa+KhnrSVSQUl/4fW4oJYXUR+CBiw4LqmEP1DCW5tvptyNWR6ZV7 XawNLJUe5CkV8wireQifKKs9zpRs8C460KR9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAp2BS14GjzNW9kh7wC7ZiiACtaQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FwMkJTMTRHanpOVzlraDd3 QzdaaWlBQ3RhUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n0AwDQYJKoZIhvcNAQELBQADggEBAIfRVyARekd78zTC/TqwxMRsm5R8+67RgnD7 Qr4hTPF0krJoELFFlNOX2qeKUeYHkELWB3tmTW7fv7wMCXh0N18u0i7XHfbhCccE RABtyIlURddONuqUOcekXugKaIGQnmbI/skcnr3iVnQ4DJGD7OrXOKxyJfdB+M6q NwC6koi/YcM/LyMLtAjAjohcJzWRDu8sCL6XBKdrhUOGHdF+3OxTOrZ1k8LTaGnX qBtcqnvNsq8YyfsbiYZObA36cuZzGur9R9DK6wLdwNhnvLMKoaEwGOD3vH9AYahc kqKsxXXUKf0VPOu93+i9r1NeqRZMG3SPXkOGjdqUD8GnBBmtDCw= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:41 2025 by rpki-client