$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/InkG-pjI0LAtEeFuO-Hy0kHu_fA.roa File: InkG-pjI0LAtEeFuO-Hy0kHu_fA.roa (raw, json) Hash identifier: tOk/NPvRo1ONiwAqyy1Xa/xOgnU3dzTcp3kmZAUxRhE= Subject key identifier: 22:79:06:FA:98:C8:D0:B0:2D:11:E1:6E:3B:E1:F2:D2:41:EE:FD:F0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 271E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/InkG-pjI0LAtEeFuO-Hy0kHu_fA.roa Signing time: Fri 22 Aug 2025 08:43:34 +0000 ROA not before: Fri 22 Aug 2025 08:43:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 180.218.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10014 (0x271e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=227906FA98C8D0B02D11E16E3BE1F2D241EEFDF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:7f:f4:ab:a2:fc:43:8f:a2:07:5e:1b:e9: ee:22:02:2b:4f:e3:4a:ec:b5:29:b4:b0:0d:f6:c7: 4c:4d:25:c5:d0:c9:cf:7b:a0:15:d8:42:f1:87:26: ea:b0:54:b6:71:ff:e8:18:8e:af:5e:31:f5:16:b1: 11:a4:9f:e9:ec:27:fb:92:1e:a2:e6:1d:db:b5:98: e1:a3:26:1d:43:ca:fb:76:6c:15:44:4a:f6:53:94: ca:66:65:57:1d:07:76:82:a7:4b:9f:49:5f:df:46: 68:ff:8b:b2:1d:02:19:15:e9:1e:df:14:5c:de:37: 13:77:df:4b:05:05:1e:56:36:61:9f:e4:9a:1b:a8: 13:88:6e:94:b0:4b:75:b4:23:77:4c:dc:a4:4d:18: e5:f4:e2:29:9e:6e:f8:3c:3d:84:17:ce:50:20:55: b4:08:8a:64:80:5d:04:95:41:d3:2c:a3:67:81:b9: 84:d3:c5:bb:4d:ee:39:37:ea:a4:cb:70:f6:7b:47: 63:e1:0a:a6:f6:8d:1b:60:5c:ca:81:6d:d9:a4:89: bc:b9:09:99:51:a5:47:be:e6:97:73:f3:fd:1c:d4: 0a:71:37:45:cf:6f:1a:a1:e1:8b:c0:ba:1a:11:3f: 0d:0f:8c:07:b8:59:fd:84:ef:b0:04:3b:fb:cb:51: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:79:06:FA:98:C8:D0:B0:2D:11:E1:6E:3B:E1:F2:D2:41:EE:FD:F0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/InkG-pjI0LAtEeFuO-Hy0kHu_fA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.112.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:07:24:c6:27:e9:b8:05:4c:97:35:63:c9:02:f6:67:78:ee: 8d:9f:a1:e0:a3:53:ac:71:d4:77:b0:35:03:a3:eb:84:b6:9f: ae:f2:98:bd:b0:c0:ba:7b:3d:4f:56:e9:c7:23:3c:61:00:53: 06:29:27:c1:0f:7d:c4:85:62:87:5f:78:4a:d8:31:78:f5:6e: 5d:e3:03:95:66:cb:df:b4:db:e0:d4:e9:9f:1b:7e:9b:60:52: 25:ef:84:d1:a2:6a:27:bf:dc:ad:aa:3b:a9:59:e7:15:8c:7a: bf:35:ec:6e:ed:b1:89:a5:00:2b:51:22:48:c8:5b:13:8e:d7: f1:32:58:ea:2c:54:b9:97:3a:1b:ae:ab:a4:8a:a3:f7:c9:60: ad:4c:3a:97:37:81:92:7f:b5:18:96:0f:55:96:4c:57:8b:fa: 36:1e:ce:40:23:53:8a:e4:7a:25:93:1f:0f:77:ab:6c:ec:5a: 0e:68:56:7b:e1:1e:d8:0d:1a:17:6e:f8:9f:3f:5e:4f:1b:fe: c3:b1:61:cd:b4:c6:53:07:ac:63:b6:91:8a:41:5d:01:bb:43: 2e:93:69:7d:d0:12:40:ce:17:56:ce:5a:32:eb:87:03:ef:72: 18:bf:80:8f:e3:3e:f8:dd:29:3f:2d:da:cb:66:b9:b1:98:2f: c9:70:c7:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyNzkwNkZBOThDOEQw QjAyRDExRTE2RTNCRTFGMkQyNDFFRUZERjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmeX/0q6L8Q4+iB14b6e4iAitP40rstSm0sA32x0xNJcXQyc97 oBXYQvGHJuqwVLZx/+gYjq9eMfUWsRGkn+nsJ/uSHqLmHdu1mOGjJh1Dyvt2bBVE SvZTlMpmZVcdB3aCp0ufSV/fRmj/i7IdAhkV6R7fFFzeNxN330sFBR5WNmGf5Job qBOIbpSwS3W0I3dM3KRNGOX04imebvg8PYQXzlAgVbQIimSAXQSVQdMso2eBuYTT xbtN7jk36qTLcPZ7R2PhCqb2jRtgXMqBbdmkiby5CZlRpUe+5pdz8/0c1ApxN0XP bxqh4YvAuhoRPw0PjAe4Wf2E77AEO/vLUfaFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUInkG+pjI0LAtEeFuO+Hy0kHu/fAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lua0ctcGpJMExBdEVlRnVP LUh5MGtIdV9mQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2nAwDQYJKoZIhvcNAQELBQADggEBABoHJMYn6bgFTJc1Y8kC9md47o2foeCjU6xx 1HewNQOj64S2n67ymL2wwLp7PU9W6ccjPGEAUwYpJ8EPfcSFYodfeErYMXj1bl3j A5Vmy9+02+DU6Z8bfptgUiXvhNGiaie/3K2qO6lZ5xWMer817G7tsYmlACtRIkjI WxOO1/EyWOosVLmXOhuuq6SKo/fJYK1MOpc3gZJ/tRiWD1WWTFeL+jYezkAjU4rk eiWTHw93q2zsWg5oVnvhHtgNGhdu+J8/Xk8b/sOxYc20xlMHrGO2kYpBXQG7Qy6T aX3QEkDOF1bOWjLrhwPvchi/gI/jPvjdKT8t2stmubGYL8lwxws= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:30 2025 by rpki-client