$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AuhcoYGhDNpk1gWxCbxbXNxpkhs.roa File: AuhcoYGhDNpk1gWxCbxbXNxpkhs.roa (raw, json) Hash identifier: 5zvGbZzIu+7oBLnA3fgO0ubBzLilNW+PR1yimRvF67A= Subject key identifier: 02:E8:5C:A1:81:A1:0C:DA:64:D6:05:B1:09:BC:5B:5C:DC:69:92:1B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25D6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AuhcoYGhDNpk1gWxCbxbXNxpkhs.roa Signing time: Fri 22 Aug 2025 08:42:18 +0000 ROA not before: Fri 22 Aug 2025 08:42:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 49.158.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9686 (0x25d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=02E85CA181A10CDA64D605B109BC5B5CDC69921B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:b3:ca:44:4c:a5:31:59:03:95:f0:f4:52: b9:2b:a3:82:f7:57:28:b1:9b:11:c0:d6:2e:61:7f: 3f:5a:5e:bc:e7:03:eb:99:6e:6c:50:80:e3:f6:b5: f9:87:2f:c2:0f:ce:af:0d:61:2d:6f:ea:35:5d:ef: de:ad:73:ce:96:50:5a:00:6d:3d:8b:01:2c:75:68: 29:a1:7d:92:8f:69:6e:91:99:ac:15:dc:54:52:29: 02:88:05:3c:21:42:cd:0a:65:24:11:71:3a:3d:49: 23:94:be:dc:d5:39:8d:30:14:f6:32:e0:54:7f:3a: b0:f9:87:12:4f:70:55:f0:c9:63:b2:77:72:4b:54: 2f:7f:86:06:3c:2d:e3:c5:5b:e8:ad:18:32:89:2c: ad:20:fb:32:fc:f0:27:5d:55:82:87:5b:95:47:7a: 93:52:f1:f0:c0:ad:42:13:96:58:17:59:36:cd:4e: df:24:c2:7b:6c:af:39:ee:64:5f:4d:19:71:69:b1: 73:12:e7:8b:a2:56:a7:41:ad:a7:a8:b6:aa:2f:3d: ab:e3:f3:bf:c5:8e:e1:41:1b:04:07:d0:3c:ac:85: 56:95:db:37:69:bd:5b:24:01:74:d4:01:63:ba:b6: 19:0c:33:45:a0:5d:70:ac:f8:33:af:ce:65:38:57: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E8:5C:A1:81:A1:0C:DA:64:D6:05:B1:09:BC:5B:5C:DC:69:92:1B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AuhcoYGhDNpk1gWxCbxbXNxpkhs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/15 Signature Algorithm: sha256WithRSAEncryption 4a:54:20:04:5d:af:fc:ff:6d:93:64:80:e3:06:2f:75:54:11: cf:a0:a4:96:da:25:77:d5:b2:94:7b:3e:ba:40:7a:e5:7f:62: 2c:41:14:f9:cd:76:de:b6:e8:4b:83:ce:0f:46:de:a3:a0:99: 92:2f:dc:32:d9:15:1a:89:e6:68:b2:92:47:72:a9:88:1c:90: 94:0a:a5:83:fe:ad:71:89:4f:c8:15:f6:bc:4b:2d:50:34:ca: 6a:a3:cd:e5:4b:bb:63:21:79:4d:bc:66:de:93:8a:e1:dd:92: 76:af:d5:fc:2f:59:c7:28:be:af:95:a3:f0:a7:a0:21:25:77: bb:2a:29:fb:9e:cd:15:00:cf:9a:d5:1c:79:c3:96:ee:f3:05: 85:ac:d9:f1:18:c4:0c:4e:ca:e1:dc:f0:bd:ce:dd:21:15:1a: d8:83:10:f9:46:14:dc:75:e7:f5:9f:bd:79:48:99:3e:95:5c: 8a:a8:16:09:53:51:d3:ba:26:82:00:11:73:da:0f:0d:7f:d8: 85:7c:63:37:b0:b9:51:e5:c3:b0:59:e0:e6:9c:a7:a1:79:74: 71:11:ad:eb:58:4b:56:3a:58:64:13:3c:e0:0a:db:49:df:03: e4:11:e5:9d:87:ba:ff:b2:97:36:63:c3:de:24:a8:00:b8:0d: d8:5e:e6:c4 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICJdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAyRTg1Q0ExODFBMTBD REE2NEQ2MDVCMTA5QkM1QjVDREM2OTkyMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfmbPKREylMVkDlfD0Urkro4L3VyixmxHA1i5hfz9aXrznA+uZ bmxQgOP2tfmHL8IPzq8NYS1v6jVd796tc86WUFoAbT2LASx1aCmhfZKPaW6RmawV 3FRSKQKIBTwhQs0KZSQRcTo9SSOUvtzVOY0wFPYy4FR/OrD5hxJPcFXwyWOyd3JL VC9/hgY8LePFW+itGDKJLK0g+zL88CddVYKHW5VHepNS8fDArUITllgXWTbNTt8k wntsrznuZF9NGXFpsXMS54uiVqdBraeotqovPavj87/FjuFBGwQH0DyshVaV2zdp vVskAXTUAWO6thkMM0WgXXCs+DOvzmU4V1hfAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUAuhcoYGhDNpk1gWxCbxbXNxpkhswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0F1aGNvWUdoRE5wazFnV3hD YnhiWE54cGtocy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEx njANBgkqhkiG9w0BAQsFAAOCAQEASlQgBF2v/P9tk2SA4wYvdVQRz6Ckltold9Wy lHs+ukB65X9iLEEU+c123rboS4POD0beo6CZki/cMtkVGonmaLKSR3KpiByQlAql g/6tcYlPyBX2vEstUDTKaqPN5Uu7YyF5Tbxm3pOK4d2Sdq/V/C9Zxyi+r5Wj8Keg ISV3uyop+57NFQDPmtUcecOW7vMFhazZ8RjEDE7K4dzwvc7dIRUa2IMQ+UYU3HXn 9Z+9eUiZPpVciqgWCVNR07omggARc9oPDX/YhXxjN7C5UeXDsFng5pynoXl0cRGt 61hLVjpYZBM84ArbSd8D5BHlnYe6/7KXNmPD3iSoALgN2F7mxA== -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:34 2025 by rpki-client