$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IAXpPY8MX5gqzC8NZxF5ntVF26s.roa File: IAXpPY8MX5gqzC8NZxF5ntVF26s.roa (raw, json) Hash identifier: bhPm4JR7CzkoSsG9eWzUD9yFoA4yEh3QJymNCc15mHg= Subject key identifier: 20:05:E9:3D:8F:0C:5F:98:2A:CC:2F:0D:67:11:79:9E:D5:45:DB:AB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2699 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IAXpPY8MX5gqzC8NZxF5ntVF26s.roa Signing time: Fri 22 Aug 2025 08:43:05 +0000 ROA not before: Fri 22 Aug 2025 08:43:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 180.218.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9881 (0x2699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2005E93D8F0C5F982ACC2F0D6711799ED545DBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:08:41:d5:04:b0:1a:b3:23:05:17:3b:d4: a0:b3:55:73:e5:6a:c7:56:3c:a5:9e:1c:5f:20:7f: 2c:6b:5e:78:ee:67:f5:73:ae:c8:8a:6f:d0:94:3e: 23:d6:9c:d8:d9:b0:2f:e4:99:af:a0:49:13:bd:e0: a6:96:e3:ac:3d:64:0a:5e:43:5c:1e:4a:6c:08:e9: 4b:c8:3c:fb:62:ff:91:02:e6:1e:14:fb:cf:03:4a: 78:60:27:a0:88:b4:f5:35:eb:85:03:86:71:8e:c0: 58:47:17:08:e9:6a:56:ae:f9:83:c7:c2:d7:aa:5f: 6b:5a:8f:d2:86:b6:1d:6b:cd:5b:dd:65:97:c8:70: 6f:d4:3a:f9:4a:cb:29:00:20:77:c2:87:3f:6c:7d: d3:03:ed:2b:5a:3a:6d:44:6e:5f:6d:cf:3f:d9:f5: c9:01:9f:81:e5:1b:bd:bf:2a:2d:7f:03:20:22:3d: 9a:11:96:98:26:4e:29:cf:7e:0d:42:65:17:41:18: c1:ff:74:d6:46:8f:8d:a4:1a:45:d5:7f:d9:60:15: 11:51:15:e3:06:21:9a:cb:f2:61:d8:1b:44:d5:69: 78:06:63:00:5c:05:33:ae:c3:53:d2:a8:75:5b:ef: 43:d3:41:1d:0a:6f:aa:0d:cc:87:04:2a:0d:80:a2: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:05:E9:3D:8F:0C:5F:98:2A:CC:2F:0D:67:11:79:9E:D5:45:DB:AB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IAXpPY8MX5gqzC8NZxF5ntVF26s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:6d:1f:33:5c:6d:60:a9:a7:22:99:3c:33:d2:9d:6d:64:19: 14:d7:ac:d9:be:26:44:97:23:96:e6:d8:0e:52:63:56:e0:5e: 2e:dc:64:d2:9d:ae:99:40:61:4d:a0:aa:8e:90:aa:dc:f0:d8: 79:44:3b:09:d1:5e:4b:17:4c:e3:8d:b3:3d:d4:9b:d3:7e:53: 02:f9:c9:d2:5e:d8:25:ee:3e:68:1a:ee:3c:62:b9:a6:a5:b1: ef:8b:b3:6f:a0:c3:2d:1b:1f:dd:ed:9e:64:98:e5:b9:04:4d: 19:e3:ed:bc:92:94:94:c4:20:05:74:13:7b:1e:d8:6a:3a:4f: 44:22:5d:c1:f0:42:40:7d:8f:f3:23:40:1c:3f:5f:9f:de:16: 63:cd:e6:a1:7e:04:36:22:ab:10:f7:0d:e9:ee:56:5d:1d:73: 2e:c2:65:1b:91:6f:66:b3:14:f1:83:9c:16:0d:9e:f4:53:4b: c8:4d:59:5b:45:39:3f:9d:c0:8b:4d:f9:bb:39:a6:bd:c9:58: 22:76:38:70:ad:66:e2:2b:33:85:5c:5d:53:f7:85:a2:d4:b3: 88:31:34:e1:3d:08:1a:9f:b7:c1:3d:89:88:08:5a:96:f1:65: d3:86:5b:90:4e:90:f9:43:3a:b7:c7:4a:5a:4d:20:fa:4d:eb: 5f:cd:b0:67 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICJpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwMDVFOTNEOEYwQzVG OTgyQUNDMkYwRDY3MTE3OTlFRDU0NURCQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOgghB1QSwGrMjBRc71KCzVXPlasdWPKWeHF8gfyxrXnjuZ/Vz rsiKb9CUPiPWnNjZsC/kma+gSRO94KaW46w9ZApeQ1weSmwI6UvIPPti/5EC5h4U +88DSnhgJ6CItPU164UDhnGOwFhHFwjpalau+YPHwteqX2taj9KGth1rzVvdZZfI cG/UOvlKyykAIHfChz9sfdMD7StaOm1Ebl9tzz/Z9ckBn4HlG72/Ki1/AyAiPZoR lpgmTinPfg1CZRdBGMH/dNZGj42kGkXVf9lgFRFRFeMGIZrL8mHYG0TVaXgGYwBc BTOuw1PSqHVb70PTQR0Kb6oNzIcEKg2AoiEbAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUIAXpPY8MX5gqzC8NZxF5ntVF26swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lBWHBQWThNWDVncXpDOE5a eEY1bnRWRjI2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC0 2jANBgkqhkiG9w0BAQsFAAOCAQEAYG0fM1xtYKmnIpk8M9KdbWQZFNes2b4mRJcj lubYDlJjVuBeLtxk0p2umUBhTaCqjpCq3PDYeUQ7CdFeSxdM442zPdSb035TAvnJ 0l7YJe4+aBruPGK5pqWx74uzb6DDLRsf3e2eZJjluQRNGePtvJKUlMQgBXQTex7Y ajpPRCJdwfBCQH2P8yNAHD9fn94WY83moX4ENiKrEPcN6e5WXR1zLsJlG5FvZrMU 8YOcFg2e9FNLyE1ZW0U5P53Ai035uzmmvclYInY4cK1m4iszhVxdU/eFotSziDE0 4T0IGp+3wT2JiAhalvFl04ZbkE6Q+UM6t8dKWk0g+k3rX82wZw== -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:38 2025 by rpki-client