$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FMc9kqWtC4ax9BYqGLbor3Szrvk.roa File: FMc9kqWtC4ax9BYqGLbor3Szrvk.roa (raw, json) Hash identifier: l3hZHWrqP1j3hrOhlMywTEzHU90+Iv5q3pGSDNUAFuc= Subject key identifier: 14:C7:3D:92:A5:AD:0B:86:B1:F4:16:2A:18:B6:E8:AF:74:B3:AE:F9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26E3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FMc9kqWtC4ax9BYqGLbor3Szrvk.roa Signing time: Fri 22 Aug 2025 08:43:21 +0000 ROA not before: Fri 22 Aug 2025 08:43:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 61.61.213.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9955 (0x26e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=14C73D92A5AD0B86B1F4162A18B6E8AF74B3AEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6c:db:b6:14:c6:5a:79:04:78:3f:20:56:fe: 43:79:a0:9e:20:f4:69:13:52:bc:23:d7:5c:9e:46: 76:67:d1:95:71:ee:6c:5f:8f:1b:6a:0e:86:d7:f5: 1d:6a:b6:6d:7a:22:96:d6:ee:ec:c4:b5:05:bb:19: 32:3d:98:e4:96:72:2f:15:56:23:d7:29:ac:71:b5: 93:c4:4b:96:63:8e:56:bb:0b:f0:b3:09:30:ab:c2: 18:51:2d:7e:35:9d:ca:b0:6c:8b:8b:c3:4d:67:da: f5:d3:91:74:88:00:5e:f5:c6:55:6c:72:3d:d3:e2: 87:b0:f0:81:ea:34:e4:9e:93:f0:76:f5:e1:a2:0c: 99:a9:9f:27:dd:28:45:ce:6d:c2:6e:e6:dd:52:19: 9e:c4:ec:2d:08:47:34:b3:09:7b:0e:f9:1a:bd:70: 42:c3:b7:5c:3e:ec:2e:02:26:14:23:ed:03:07:96: d3:60:7d:c6:53:7a:01:d9:dd:ee:df:15:30:b0:91: ef:70:00:5a:5f:35:5c:3d:53:0a:45:6b:ea:45:f9: a6:81:65:39:9a:39:95:f7:1f:9f:48:2c:8e:43:d5: c5:3c:5c:35:b6:91:3d:d7:46:64:fc:b3:3c:09:53: 66:6f:94:60:39:02:e1:11:51:38:82:05:2a:e8:0d: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:3D:92:A5:AD:0B:86:B1:F4:16:2A:18:B6:E8:AF:74:B3:AE:F9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FMc9kqWtC4ax9BYqGLbor3Szrvk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.213.0/25 Signature Algorithm: sha256WithRSAEncryption 52:d2:c0:22:9b:ed:7a:53:01:42:43:75:e8:e7:4c:f8:aa:39: 56:ac:0c:24:f7:17:84:09:28:64:cf:ae:a8:f0:18:57:2d:34: 6e:f4:14:c6:ce:36:6c:7a:b4:57:95:0c:07:44:d9:b7:4e:ed: 22:fe:59:aa:c9:9c:5d:57:a4:b0:0d:fa:7d:e5:95:39:83:6d: fd:97:95:58:ad:53:2a:22:f1:37:2a:14:2b:97:ce:26:24:10: cb:e3:8f:54:37:23:9c:15:8e:23:2f:91:ce:bf:ac:94:7e:95: e4:e4:9a:26:6e:7a:f9:6f:eb:0e:ef:f3:d8:22:94:9a:0a:d4: d1:f6:37:e6:81:68:5f:4d:e0:c8:09:8f:ad:dd:a0:01:65:0e: 25:b6:71:1a:a6:8b:2c:7f:7d:16:4c:ce:4d:57:f5:5b:35:90: 8f:99:aa:fa:c1:8c:fb:23:82:99:41:d7:24:61:cf:88:05:e9: 79:4f:88:73:d7:b8:fe:fc:3a:e9:9e:bc:93:75:a2:89:d3:62: 1c:14:f4:69:b7:c2:8d:29:10:c6:cc:8f:59:3b:0b:23:28:79: 77:0e:88:07:8d:e6:34:fb:c7:70:54:fa:a3:ef:00:6d:b9:65: d6:22:da:81:58:0f:3b:84:0a:d1:14:d0:5d:6a:30:46:72:79: 98:e6:f8:43 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICJuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE0QzczRDkyQTVBRDBC ODZCMUY0MTYyQTE4QjZFOEFGNzRCM0FFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkbNu2FMZaeQR4PyBW/kN5oJ4g9GkTUrwj11yeRnZn0ZVx7mxf jxtqDobX9R1qtm16IpbW7uzEtQW7GTI9mOSWci8VViPXKaxxtZPES5Zjjla7C/Cz CTCrwhhRLX41ncqwbIuLw01n2vXTkXSIAF71xlVscj3T4oew8IHqNOSek/B29eGi DJmpnyfdKEXObcJu5t1SGZ7E7C0IRzSzCXsO+Rq9cELDt1w+7C4CJhQj7QMHltNg fcZTegHZ3e7fFTCwke9wAFpfNVw9UwpFa+pF+aaBZTmaOZX3H59ILI5D1cU8XDW2 kT3XRmT8szwJU2ZvlGA5AuERUTiCBSroDaXzAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUFMc9kqWtC4ax9BYqGLbor3SzrvkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZNYzlrcVd0QzRheDlCWXFH TGJvcjNTenJ2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQc9 PdUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS0sAim+16UwFCQ3Xo50z4qjlWrAwk9xeE CShkz66o8BhXLTRu9BTGzjZserRXlQwHRNm3Tu0i/lmqyZxdV6SwDfp95ZU5g239 l5VYrVMqIvE3KhQrl84mJBDL449UNyOcFY4jL5HOv6yUfpXk5Jombnr5b+sO7/PY IpSaCtTR9jfmgWhfTeDICY+t3aABZQ4ltnEapossf30WTM5NV/VbNZCPmar6wYz7 I4KZQdckYc+IBel5T4hz17j+/DrpnryTdaKJ02IcFPRpt8KNKRDGzI9ZOwsjKHl3 DogHjeY0+8dwVPqj7wBtuWXWItqBWA87hArRFNBdajBGcnmY5vhD -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:39 2025 by rpki-client