$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H4WkqDraMBOAZITq0XuvJgvCV54.roa File: H4WkqDraMBOAZITq0XuvJgvCV54.roa (raw, json) Hash identifier: cW7Aa4sKlO5hL5AOLym86WRxEUeDNC4I0qQ7I70GunM= Subject key identifier: 1F:85:A4:A8:3A:DA:30:13:80:64:84:EA:D1:7B:AF:26:0B:C2:57:9E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25FB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H4WkqDraMBOAZITq0XuvJgvCV54.roa Signing time: Fri 22 Aug 2025 08:42:27 +0000 ROA not before: Fri 22 Aug 2025 08:42:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 119.77.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9723 (0x25fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1F85A4A83ADA3013806484EAD17BAF260BC2579E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:01:09:6b:0b:64:7c:bd:ed:42:a3:3b:7f:b5: 66:3f:60:9c:b8:ec:e3:3b:e0:25:60:f8:64:a8:6e: 1b:4c:af:ac:5f:fe:b2:bd:d7:39:6a:3d:db:a4:19: 1e:cc:2a:c4:b7:6d:84:74:e3:76:68:70:b6:ea:f9: 96:ef:ca:91:c2:90:ca:7e:06:b3:4c:1a:18:89:7d: 19:01:46:4c:3c:bb:59:42:92:ca:5d:a6:24:fd:ea: 37:27:0d:6d:61:47:a5:88:47:e0:76:9d:3e:fd:90: 15:a9:8a:5b:9b:70:80:1e:56:52:26:42:b1:46:01: 9d:21:1f:71:e9:b6:50:d5:e5:8e:36:5d:2c:18:7b: 4c:c3:0f:b8:8a:61:e1:2f:d8:34:97:0d:d2:f7:29: 82:f9:b7:fb:fa:e4:d4:58:42:5c:95:8f:e1:10:44: f9:3d:b0:c2:fe:eb:d7:82:06:a5:33:06:d6:fa:55: 0e:9f:ff:be:15:c9:1b:2a:1b:e4:51:08:8a:f0:a5: 65:c4:36:0f:3f:c2:03:81:a3:7b:ed:a0:a8:97:15: f8:be:c1:34:71:2f:3c:6a:6a:e8:86:4c:9e:aa:b0: 9d:b7:39:49:c5:bf:8d:2d:a0:01:7b:2d:2f:9a:4c: b3:ff:18:75:4a:82:79:cd:36:a4:9a:31:45:a9:23: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:A4:A8:3A:DA:30:13:80:64:84:EA:D1:7B:AF:26:0B:C2:57:9E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H4WkqDraMBOAZITq0XuvJgvCV54.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.136.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:7b:f4:da:e9:51:f0:1c:30:cc:33:63:d1:66:87:b6:8c:69: 83:20:5b:46:f4:bb:7b:77:a6:e8:cd:30:48:6b:b4:e4:82:f3: 8b:c4:ab:70:2e:65:11:2e:cf:c1:99:4b:f1:4c:a4:54:39:d2: 48:b4:2d:6c:eb:05:15:75:32:c8:3f:45:70:3a:28:76:13:37: f1:8d:bb:88:28:a4:e0:07:bb:2d:74:e6:2b:58:65:43:36:c9: fe:ef:79:16:bd:b1:09:a7:d0:d4:1b:9a:97:ed:82:ec:fb:25: 38:1f:de:8f:38:7b:b2:cc:46:79:4d:06:b8:18:8e:8d:6e:0e: 42:ed:b7:41:d7:fb:6e:31:25:6d:91:23:56:d7:1b:9d:ea:59: 62:59:be:1b:21:d3:11:99:12:b8:f3:a2:d6:8a:f6:cd:4d:94: 4d:9f:d1:4f:a5:a5:4b:ee:58:8f:45:81:1b:db:4e:0d:b5:52: 8a:f9:a1:04:f9:0d:00:33:21:26:0a:1d:13:c0:9b:c9:fc:c4: d1:aa:66:5a:42:53:ff:7e:36:fe:88:e8:8f:73:4e:31:8e:ae: 2a:88:be:13:4b:e1:2a:ce:0d:b9:e1:8b:4d:3d:38:0c:af:66: 69:27:eb:e9:a2:58:32:3e:0c:0d:66:38:0c:60:0c:4b:84:79: 53:3d:8f:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGODVBNEE4M0FEQTMw MTM4MDY0ODRFQUQxN0JBRjI2MEJDMjU3OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1AQlrC2R8ve1Cozt/tWY/YJy47OM74CVg+GSobhtMr6xf/rK9 1zlqPdukGR7MKsS3bYR043ZocLbq+ZbvypHCkMp+BrNMGhiJfRkBRkw8u1lCkspd piT96jcnDW1hR6WIR+B2nT79kBWpilubcIAeVlImQrFGAZ0hH3HptlDV5Y42XSwY e0zDD7iKYeEv2DSXDdL3KYL5t/v65NRYQlyVj+EQRPk9sML+69eCBqUzBtb6VQ6f /74VyRsqG+RRCIrwpWXENg8/wgOBo3vtoKiXFfi+wTRxLzxqauiGTJ6qsJ23OUnF v40toAF7LS+aTLP/GHVKgnnNNqSaMUWpIzmBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUH4WkqDraMBOAZITq0XuvJgvCV54wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0g0V2txRHJhTUJPQVpJVHEw WHV2Smd2Q1Y1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3 TYgwDQYJKoZIhvcNAQELBQADggEBACp79NrpUfAcMMwzY9Fmh7aMaYMgW0b0u3t3 pujNMEhrtOSC84vEq3AuZREuz8GZS/FMpFQ50ki0LWzrBRV1Msg/RXA6KHYTN/GN u4gopOAHuy105itYZUM2yf7veRa9sQmn0NQbmpftguz7JTgf3o84e7LMRnlNBrgY jo1uDkLtt0HX+24xJW2RI1bXG53qWWJZvhsh0xGZErjzotaK9s1NlE2f0U+lpUvu WI9FgRvbTg21Uor5oQT5DQAzISYKHRPAm8n8xNGqZlpCU/9+Nv6I6I9zTjGOriqI vhNL4SrODbnhi009OAyvZmkn6+miWDI+DA1mOAxgDEuEeVM9j9c= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:34 2025 by rpki-client