$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ek0upjH6A2JVMpPl4q3SGTKtdrs.roa File: Ek0upjH6A2JVMpPl4q3SGTKtdrs.roa (raw, json) Hash identifier: 3JvcEwORaZDfg98vxWLWqzGyR8ucNLaQYWmQMa6CF+k= Subject key identifier: 12:4D:2E:A6:31:FA:03:62:55:32:93:E5:E2:AD:D2:19:32:AD:76:BB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2705 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ek0upjH6A2JVMpPl4q3SGTKtdrs.roa Signing time: Fri 22 Aug 2025 08:43:30 +0000 ROA not before: Fri 22 Aug 2025 08:43:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9989 (0x2705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=124D2EA631FA0362553293E5E2ADD21932AD76BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:47:50:a2:84:7e:a3:5e:d7:78:f4:9c:5d: a5:72:55:fc:38:eb:4e:82:60:4b:0a:66:cd:4c:de: 61:72:eb:cf:d8:4c:22:66:09:8e:e5:14:cf:4d:a0: f7:db:5f:c8:8c:e0:91:e4:6f:10:30:1c:fd:21:53: da:28:f3:70:b9:67:5b:36:cb:41:ee:0f:6f:9e:23: b3:f6:ae:e8:64:74:c8:12:2d:87:63:95:92:22:9e: fa:b6:89:33:63:a2:53:08:c0:4c:ea:7e:10:f2:b5: 9d:1c:64:54:a3:b5:a7:9a:a3:38:d2:1c:d1:41:85: 48:ee:e5:c1:3f:c2:09:fd:68:17:2b:75:f9:6f:6e: 92:69:e9:1f:5a:8f:f6:d6:e3:41:98:84:aa:87:24: 6a:fa:3b:10:25:d6:e1:6a:4c:fb:28:63:07:c6:26: e2:00:8b:8b:a4:37:55:14:ca:45:fd:5d:48:9f:94: 72:db:f1:40:47:17:4e:d5:31:86:ba:cf:89:93:17: 8f:76:63:ed:43:8c:b4:5e:56:f8:de:bc:a2:fe:9f: 09:46:13:4e:49:ec:90:a9:52:1a:78:68:56:42:ec: b5:a1:5c:8a:20:72:6b:d1:16:60:83:da:57:7e:47: 80:d9:0a:a6:0f:f7:7e:27:5e:31:35:76:da:03:57: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4D:2E:A6:31:FA:03:62:55:32:93:E5:E2:AD:D2:19:32:AD:76:BB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ek0upjH6A2JVMpPl4q3SGTKtdrs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:5e:86:66:7a:48:fd:e2:f0:c4:a3:97:fb:0d:ae:85:b8:9e: 06:33:81:64:6f:d2:94:22:ca:16:99:01:34:e2:a2:d5:ed:da: b6:51:00:37:15:07:86:53:46:ba:45:3d:54:41:b5:a9:26:ef: f7:6e:ba:0b:64:86:62:da:20:ea:10:35:32:fe:7b:3d:11:41: 55:c7:57:f4:e1:e5:ea:38:a1:40:d1:5d:d6:11:a1:41:4b:56: d5:3d:2d:b4:ba:85:a3:15:c9:c5:66:03:48:b3:8b:fd:cd:b1: 43:d7:b2:46:dd:76:41:44:f0:de:a9:c8:f2:9c:61:27:01:7f: 18:86:c6:6f:6f:74:7d:a0:87:2c:4b:53:b7:fa:eb:8a:5c:db: 66:b9:fa:b7:5f:c4:6b:af:ca:30:fc:6e:33:6e:c2:09:79:e4: 05:36:4e:d2:76:fb:84:2b:c9:f1:22:a9:1d:a9:b4:bf:1e:f3: 9e:24:5d:7f:d4:f0:a0:69:50:06:2a:42:c5:56:b6:df:6f:b6: c4:93:69:8e:10:30:2c:7d:6e:62:96:b0:02:4d:fe:ce:38:6b: e4:47:d4:b1:99:b5:f3:bd:4a:04:fd:06:87:e0:6a:32:10:67: 01:4b:3d:13:34:e2:6e:59:43:ed:c3:6f:b3:e2:11:0f:95:13: a6:96:c5:ae -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICJwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEyNEQyRUE2MzFGQTAz NjI1NTMyOTNFNUUyQUREMjE5MzJBRDc2QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0jEdQooR+o17XePScXaVyVfw4606CYEsKZs1M3mFy68/YTCJm CY7lFM9NoPfbX8iM4JHkbxAwHP0hU9oo83C5Z1s2y0HuD2+eI7P2ruhkdMgSLYdj lZIinvq2iTNjolMIwEzqfhDytZ0cZFSjtaeaozjSHNFBhUju5cE/wgn9aBcrdflv bpJp6R9aj/bW40GYhKqHJGr6OxAl1uFqTPsoYwfGJuIAi4ukN1UUykX9XUiflHLb 8UBHF07VMYa6z4mTF492Y+1DjLReVvjevKL+nwlGE05J7JCpUhp4aFZC7LWhXIog cmvRFmCD2ld+R4DZCqYP934nXjE1dtoDVwQXAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUEk0upjH6A2JVMpPl4q3SGTKtdrswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VrMHVwakg2QTJKVk1wUGw0 cTNTR1RLdGRycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx njANBgkqhkiG9w0BAQsFAAOCAQEAl16GZnpI/eLwxKOX+w2uhbieBjOBZG/SlCLK FpkBNOKi1e3atlEANxUHhlNGukU9VEG1qSbv9266C2SGYtog6hA1Mv57PRFBVcdX 9OHl6jihQNFd1hGhQUtW1T0ttLqFoxXJxWYDSLOL/c2xQ9eyRt12QUTw3qnI8pxh JwF/GIbGb290faCHLEtTt/rrilzbZrn6t1/Ea6/KMPxuM27CCXnkBTZO0nb7hCvJ 8SKpHam0vx7zniRdf9TwoGlQBipCxVa232+2xJNpjhAwLH1uYpawAk3+zjhr5EfU sZm1871KBP0Gh+BqMhBnAUs9EzTibllD7cNvs+IRD5UTppbFrg== -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:03 2025 by rpki-client