$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ez4ukfHFgEFRcpZrWeYL19x0_BY.roa File: Ez4ukfHFgEFRcpZrWeYL19x0_BY.roa (raw, json) Hash identifier: G3LEvfZv5NwwRFKyirUsgbF/6PFlwv58npC9c5WOJy4= Subject key identifier: 13:3E:2E:91:F1:C5:80:41:51:72:96:6B:59:E6:0B:D7:DC:74:FC:16 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26FB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ez4ukfHFgEFRcpZrWeYL19x0_BY.roa Signing time: Fri 22 Aug 2025 08:43:26 +0000 ROA not before: Fri 22 Aug 2025 08:43:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9979 (0x26fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=133E2E91F1C580415172966B59E60BD7DC74FC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:ff:ad:22:8d:bd:08:72:c0:f8:5c:2f:de: 99:d8:a5:07:ba:89:ae:81:23:42:4b:54:27:90:ff: 76:9d:e3:d0:15:12:e9:5b:53:fb:0b:d8:f5:3c:84: bb:5c:93:9a:ae:5a:eb:52:7c:e8:3b:e1:fd:48:5d: 6f:f7:f2:96:e5:60:1b:72:15:a3:cf:64:e3:89:22: 13:8f:45:70:1e:09:83:5d:75:6f:21:1f:83:eb:99: f3:08:0a:83:44:cc:09:6b:b1:f2:4a:0c:3f:51:81: 52:20:05:3b:1e:4e:42:0f:64:98:6d:42:52:f1:4f: 56:c3:1a:77:ef:ef:81:ba:9a:c7:0c:29:2f:07:02: d8:ae:07:e3:a0:90:c3:93:00:06:e3:95:2c:f6:aa: 29:06:a7:ee:4c:b3:1d:fc:c3:7c:01:ef:4e:40:e2: e8:dc:98:5f:d4:6d:cb:f2:8a:22:66:07:cc:d9:45: 41:ac:6e:34:7b:5c:2b:96:93:0c:fa:1d:60:66:e5: c1:3d:f0:a8:95:9f:cb:cd:c9:5a:3b:aa:7c:dc:fa: e3:bb:a5:19:53:d2:2a:3a:ac:b4:90:b6:89:25:1e: 51:c1:97:df:76:50:1d:82:37:e0:02:8e:73:66:41: eb:13:ac:8a:15:9a:ff:7a:d4:02:0c:5d:6a:02:ca: 1f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3E:2E:91:F1:C5:80:41:51:72:96:6B:59:E6:0B:D7:DC:74:FC:16 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ez4ukfHFgEFRcpZrWeYL19x0_BY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.160.0/21 Signature Algorithm: sha256WithRSAEncryption 97:0b:52:98:9e:72:7d:48:5f:f1:fe:cd:6b:b0:f9:ac:6c:5f: 2d:7c:54:7d:df:b3:f1:7f:01:72:a4:70:73:9e:b4:23:ff:97: 47:d0:7e:2d:3d:b7:76:82:19:1e:91:94:04:fc:30:8c:b8:7a: 6c:7e:20:ea:8f:3a:ea:7b:0f:e7:81:a6:a0:e6:bb:5e:25:ab: e4:cf:46:27:23:98:29:8e:01:72:d9:e5:16:13:52:0f:43:e4: cf:16:a6:a0:57:ef:cb:d0:0f:81:7f:d0:17:ad:2b:ce:22:27: 9c:50:a5:21:d2:17:8a:ea:a7:d9:d9:44:c3:2f:dc:0d:e2:0f: 1a:70:48:f2:f3:1a:ac:e4:44:3e:a5:06:9b:54:8b:bd:f3:64: d0:f1:0b:22:2c:bf:1a:13:50:a3:3c:11:7f:77:d6:a9:3b:7c: 9c:cb:1d:50:87:84:d0:f3:3a:bc:3f:bb:5a:f8:ab:4d:0f:cd: 0c:d1:80:cf:47:2b:85:64:c2:35:53:44:bd:09:6d:d0:55:ea: 4a:9e:45:59:69:9d:fa:9c:b6:a5:2a:f8:88:ff:62:96:70:1f: fa:95:27:e8:95:6b:1e:c1:06:fc:a8:a9:ad:64:36:fd:de:c3: 6d:9d:ac:c1:87:1e:8c:29:4d:32:b1:7b:00:96:f2:23:b8:92: 9a:e2:2e:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEzM0UyRTkxRjFDNTgw NDE1MTcyOTY2QjU5RTYwQkQ3REM3NEZDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1/P+tIo29CHLA+Fwv3pnYpQe6ia6BI0JLVCeQ/3ad49AVEulb U/sL2PU8hLtck5quWutSfOg74f1IXW/38pblYBtyFaPPZOOJIhOPRXAeCYNddW8h H4PrmfMICoNEzAlrsfJKDD9RgVIgBTseTkIPZJhtQlLxT1bDGnfv74G6mscMKS8H AtiuB+OgkMOTAAbjlSz2qikGp+5Msx38w3wB705A4ujcmF/UbcvyiiJmB8zZRUGs bjR7XCuWkwz6HWBm5cE98KiVn8vNyVo7qnzc+uO7pRlT0io6rLSQtoklHlHBl992 UB2CN+ACjnNmQesTrIoVmv961AIMXWoCyh8fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEz4ukfHFgEFRcpZrWeYL19x0/BYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0V6NHVrZkhGZ0VGUmNwWnJX ZVlMMTl4MF9CWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nqAwDQYJKoZIhvcNAQELBQADggEBAJcLUpiecn1IX/H+zWuw+axsXy18VH3fs/F/ AXKkcHOetCP/l0fQfi09t3aCGR6RlAT8MIy4emx+IOqPOup7D+eBpqDmu14lq+TP RicjmCmOAXLZ5RYTUg9D5M8WpqBX78vQD4F/0BetK84iJ5xQpSHSF4rqp9nZRMMv 3A3iDxpwSPLzGqzkRD6lBptUi73zZNDxCyIsvxoTUKM8EX931qk7fJzLHVCHhNDz Orw/u1r4q00PzQzRgM9HK4VkwjVTRL0JbdBV6kqeRVlpnfqctqUq+Ij/YpZwH/qV J+iVax7BBvyoqa1kNv3ew22drMGHHowpTTKxewCW8iO4kpriLpQ= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:39 2025 by rpki-client