$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa File: E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa (raw, json) Hash identifier: ziu6iE6w4rhFkEqx+wBozZhPAe9MRv6ToYCLr4MxNtc= Subject key identifier: 13:4C:F7:64:9D:12:A4:A0:89:46:05:75:80:50:4E:6A:47:CD:7D:FB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 266D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa Signing time: Fri 22 Aug 2025 08:42:54 +0000 ROA not before: Fri 22 Aug 2025 08:42:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 122.254.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9837 (0x266d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=134CF7649D12A4A08946057580504E6A47CD7DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:67:2e:53:76:81:74:4e:1a:95:d0:b8:b9: 41:ba:20:8f:16:fe:a2:da:eb:58:dc:79:41:b6:32: 82:a8:c3:c1:69:09:05:27:57:be:86:b4:7f:a0:d9: 29:52:9f:41:f7:e2:2b:89:3d:88:44:65:06:df:c7: f1:82:fd:3e:55:d9:b4:0d:9d:64:43:13:c1:8d:31: af:7c:98:67:c6:a9:ab:37:77:4f:0c:5d:ed:d5:1b: b0:5a:22:e3:d5:b4:a6:4f:bd:15:e7:66:9a:0f:99: 75:e3:ac:85:1b:1d:a5:d6:97:f1:fa:24:48:8d:aa: a8:5c:8e:58:75:53:7f:3f:e2:a5:60:3f:7d:29:93: 7c:f4:06:2e:4e:9f:e7:09:4e:44:f3:84:2b:55:5d: de:80:91:a4:f8:95:a0:c2:41:83:f6:ab:73:5b:1c: bb:29:a6:e9:d9:89:ae:25:8a:0b:6a:81:38:5c:4a: c7:d7:46:a7:14:80:b0:1c:de:0a:a9:0e:b4:61:ab: 05:9a:d5:67:80:ae:60:e0:50:1c:e0:7c:43:3b:78: 69:af:d7:63:4f:42:6b:47:a1:0e:3d:69:8a:79:42: 7c:4e:ee:2c:5d:8c:05:f3:8a:32:d3:12:38:00:b9: 70:0b:8c:f9:88:29:3c:cf:f7:e3:85:96:9b:b3:36: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4C:F7:64:9D:12:A4:A0:89:46:05:75:80:50:4E:6A:47:CD:7D:FB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E0z3ZJ0SpKCJRgV1gFBOakfNffs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.8.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:2c:57:20:65:10:47:f4:9b:b7:bf:b3:5b:d5:02:df:89:7b: c8:0c:20:74:dc:00:6e:5c:b5:92:c4:f3:7a:66:0a:90:67:cd: f6:eb:96:b9:24:dd:bc:6b:31:83:7a:6b:f4:50:25:53:f4:28: 93:ab:82:15:55:24:c3:99:72:63:4e:61:0d:b4:10:d3:f3:f3: 23:34:ba:7b:6d:d8:81:d0:f0:b1:b0:be:85:c0:49:72:43:f3: d7:16:c9:4c:56:c1:ae:65:dd:e2:b3:85:d2:5f:8f:00:ed:1f: 06:43:9c:91:bd:1a:0d:79:9c:d4:7f:4c:4b:d6:9c:63:29:a2: af:7f:b9:67:cb:e1:65:59:e9:a4:ac:d0:99:b5:38:a1:91:cf: 62:9e:40:41:63:01:90:a5:c8:df:24:a6:f2:81:61:8e:de:06: 36:67:24:24:fa:48:02:44:d4:4e:45:e4:19:91:f8:71:df:c2: 39:73:79:88:0b:be:68:37:bd:df:2e:0b:68:9b:11:44:47:7d: 40:16:74:2e:ae:de:45:36:87:47:a0:11:cf:c2:08:b3:57:3c: b8:bb:69:77:af:48:f9:1c:ab:37:f2:6e:29:7e:4b:79:96:d5: 71:3b:68:3d:26:d2:6f:05:ec:45:5b:b9:e3:10:73:da:ca:d6: 63:ed:6e:f7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEzNENGNzY0OUQxMkE0 QTA4OTQ2MDU3NTgwNTA0RTZBNDdDRDdERkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUZmcuU3aBdE4aldC4uUG6II8W/qLa61jceUG2MoKow8FpCQUn V76GtH+g2SlSn0H34iuJPYhEZQbfx/GC/T5V2bQNnWRDE8GNMa98mGfGqas3d08M Xe3VG7BaIuPVtKZPvRXnZpoPmXXjrIUbHaXWl/H6JEiNqqhcjlh1U38/4qVgP30p k3z0Bi5On+cJTkTzhCtVXd6AkaT4laDCQYP2q3NbHLsppunZia4ligtqgThcSsfX RqcUgLAc3gqpDrRhqwWa1WeArmDgUBzgfEM7eGmv12NPQmtHoQ49aYp5QnxO7ixd jAXzijLTEjgAuXALjPmIKTzP9+OFlpuzNo77AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUE0z3ZJ0SpKCJRgV1gFBOakfNffswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0UwejNaSjBTcEtDSlJnVjFn RkJPYWtmTmZmcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /ggwDQYJKoZIhvcNAQELBQADggEBAA0sVyBlEEf0m7e/s1vVAt+Je8gMIHTcAG5c tZLE83pmCpBnzfbrlrkk3bxrMYN6a/RQJVP0KJOrghVVJMOZcmNOYQ20ENPz8yM0 untt2IHQ8LGwvoXASXJD89cWyUxWwa5l3eKzhdJfjwDtHwZDnJG9Gg15nNR/TEvW nGMpoq9/uWfL4WVZ6aSs0Jm1OKGRz2KeQEFjAZClyN8kpvKBYY7eBjZnJCT6SAJE 1E5F5BmR+HHfwjlzeYgLvmg3vd8uC2ibEURHfUAWdC6u3kU2h0egEc/CCLNXPLi7 aXevSPkcqzfybil+S3mW1XE7aD0m0m8F7EVbueMQc9rK1mPtbvc= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:48 2025 by rpki-client