$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BToEzXPf0FBG6YMcKGFcN4g-ueY.roa File: BToEzXPf0FBG6YMcKGFcN4g-ueY.roa (raw, json) Hash identifier: ojwfcbLsqAcsbr5y5R0n2FDul6lkyN6KPtFnYIXs1Ww= Subject key identifier: 05:3A:04:CD:73:DF:D0:50:46:E9:83:1C:28:61:5C:37:88:3E:B9:E6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25DE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BToEzXPf0FBG6YMcKGFcN4g-ueY.roa Signing time: Fri 22 Aug 2025 08:42:20 +0000 ROA not before: Fri 22 Aug 2025 08:42:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 61.61.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9694 (0x25de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=053A04CD73DFD05046E9831C28615C37883EB9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:02:e3:11:18:5f:70:ab:5f:66:86:14:2d: ad:73:65:75:be:47:04:67:ad:67:49:2d:e9:ca:9d: 63:b7:21:35:99:59:58:c9:57:86:b6:59:cd:00:c4: f9:0a:d8:ca:d4:c1:6d:d4:49:99:39:8e:ce:27:f6: c5:dd:c1:8d:b8:5a:65:e5:49:ac:c8:42:30:6c:b9: 3e:50:a0:cb:c7:66:15:ce:e0:c8:c9:27:3d:03:61: f0:73:57:0a:02:3a:0c:43:c2:1b:f5:88:e3:54:e7: e8:a6:b1:38:dd:d9:a0:25:0e:06:d7:30:34:e8:0d: 8f:b1:83:74:16:c9:09:54:eb:91:dc:46:d2:1e:c4: 13:15:89:47:ca:68:e1:f7:5f:4d:b5:c9:41:8d:b6: ba:92:b6:4c:1d:2f:9e:39:02:90:14:cf:df:d9:91: 8e:4d:6a:ea:0d:84:ea:67:75:cc:07:4e:09:d1:7f: 42:67:91:27:60:9b:cd:e5:ed:9e:f8:5c:21:cb:3a: 98:1d:f5:28:0a:08:33:e6:3c:5a:7d:a8:64:aa:e4: 37:e5:d9:e8:ea:6a:ec:26:3c:e9:12:82:bf:78:58: 94:c2:af:a1:f3:e3:18:55:63:25:97:b7:f6:66:fa: dd:9b:2d:e2:43:20:be:06:7a:fe:8b:8e:18:7c:7a: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3A:04:CD:73:DF:D0:50:46:E9:83:1C:28:61:5C:37:88:3E:B9:E6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BToEzXPf0FBG6YMcKGFcN4g-ueY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.236.0/22 Signature Algorithm: sha256WithRSAEncryption 58:24:f2:c2:03:5f:0d:d6:b4:f2:f1:6f:d7:1c:9b:99:f0:7c: c2:46:62:77:2a:94:85:16:cf:92:2c:ab:d0:f4:03:af:6f:4f: 7b:c2:bd:fe:74:66:66:0a:ac:e2:96:4a:6c:6f:37:b3:1b:13: 0c:4c:45:48:6a:a9:c9:57:8b:bb:04:0c:6c:ed:73:f4:89:35: cd:c1:b0:40:2e:bd:63:f6:2f:78:ff:d2:52:6e:9a:ef:0b:d5: 70:df:4d:15:b3:c3:70:50:b1:c6:d3:b1:c0:03:e8:21:84:3b: 4c:2a:98:92:a5:47:aa:22:db:1b:b6:0f:64:a0:93:59:c4:e0: a6:85:b0:48:71:c6:a2:ee:0b:5f:13:43:a3:38:e4:a3:46:c7: ed:f6:8e:99:b7:d9:21:ed:9b:a5:3f:92:90:a7:7d:40:65:ad: e4:f3:41:1e:94:45:27:df:67:3a:a2:b8:38:dc:91:84:e0:a1: 59:8d:15:39:37:88:6f:5a:29:38:00:f9:65:57:12:91:32:5d: 3f:8d:94:ab:3d:43:3f:39:b3:e0:48:02:59:85:ba:8f:58:6e: c2:58:c6:1d:8c:5f:51:27:c1:9f:d7:89:23:2a:6a:6c:6e:c9: 48:af:19:8b:c5:aa:66:88:89:cc:e8:c5:3d:b9:3f:88:81:6f: 0d:ac:d1:3b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1M0EwNENENzNERkQw NTA0NkU5ODMxQzI4NjE1QzM3ODgzRUI5RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgXgLjERhfcKtfZoYULa1zZXW+RwRnrWdJLenKnWO3ITWZWVjJ V4a2Wc0AxPkK2MrUwW3USZk5js4n9sXdwY24WmXlSazIQjBsuT5QoMvHZhXO4MjJ Jz0DYfBzVwoCOgxDwhv1iONU5+imsTjd2aAlDgbXMDToDY+xg3QWyQlU65HcRtIe xBMViUfKaOH3X021yUGNtrqStkwdL545ApAUz9/ZkY5NauoNhOpndcwHTgnRf0Jn kSdgm83l7Z74XCHLOpgd9SgKCDPmPFp9qGSq5Dfl2ejqauwmPOkSgr94WJTCr6Hz 4xhVYyWXt/Zm+t2bLeJDIL4Gev6Ljhh8enudAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBToEzXPf0FBG6YMcKGFcN4g+ueYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JUb0V6WFBmMEZCRzZZTWNL R0ZjTjRnLXVlWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PewwDQYJKoZIhvcNAQELBQADggEBAFgk8sIDXw3WtPLxb9ccm5nwfMJGYncqlIUW z5Isq9D0A69vT3vCvf50ZmYKrOKWSmxvN7MbEwxMRUhqqclXi7sEDGztc/SJNc3B sEAuvWP2L3j/0lJumu8L1XDfTRWzw3BQscbTscAD6CGEO0wqmJKlR6oi2xu2D2Sg k1nE4KaFsEhxxqLuC18TQ6M45KNGx+32jpm32SHtm6U/kpCnfUBlreTzQR6URSff ZzqiuDjckYTgoVmNFTk3iG9aKTgA+WVXEpEyXT+NlKs9Qz85s+BIAlmFuo9YbsJY xh2MX1EnwZ/XiSMqamxuyUivGYvFqmaIiczoxT25P4iBbw2s0Ts= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:35 2025 by rpki-client