$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IxtxJju_7Oqz00aL_3NmAdNpImE.roa File: IxtxJju_7Oqz00aL_3NmAdNpImE.roa (raw, json) Hash identifier: UuHtxdR3ceOZ/bxXTD1+m5BTAL/UKjs8UeoGzyEo/YI= Subject key identifier: 23:1B:71:26:3B:BF:EC:EA:B3:D3:46:8B:FF:73:66:01:D3:69:22:61 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2663 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IxtxJju_7Oqz00aL_3NmAdNpImE.roa Signing time: Fri 22 Aug 2025 08:42:53 +0000 ROA not before: Fri 22 Aug 2025 08:42:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 61.64.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9827 (0x2663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=231B71263BBFECEAB3D3468BFF736601D3692261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:dc:59:5a:83:bd:dc:e0:92:5d:b5:ab:a7: c0:e4:c8:e6:cf:dd:da:c9:b8:66:61:2f:6d:8e:ff: f4:6f:a3:4f:78:c1:4c:cc:91:2e:12:83:d7:3d:23: a0:c3:54:97:ff:4b:ed:36:57:40:18:c0:cf:95:3c: 60:50:b1:c0:6a:60:aa:7b:62:88:44:8f:23:6c:b7: ba:05:d7:ee:c3:a2:a6:37:76:77:3d:22:8a:93:82: bf:90:06:40:e0:51:20:1e:b7:3b:ca:12:97:40:a9: f4:d2:86:bc:74:e1:46:d8:34:f3:2e:e4:01:33:da: 67:92:6f:6a:27:57:d3:a1:b0:ec:25:a8:b5:27:94: 86:1d:11:f9:b1:43:3c:a7:5f:f8:4c:90:5b:b1:5f: c7:ca:d8:9a:65:8a:6e:e1:3f:bf:c4:31:14:91:a0: af:79:5a:aa:ed:fe:97:4c:78:9e:1d:0f:75:06:02: 6c:db:ad:d7:83:a2:a7:2b:ca:a1:ff:82:f9:18:4b: 0c:96:c7:05:4f:90:c7:ba:d2:41:17:3c:b8:2a:d4: b3:fc:05:75:00:cd:61:e7:d4:dd:8e:62:16:c5:26: bb:8a:39:53:3e:df:bc:34:0a:17:cb:f5:1f:e4:fc: c6:d0:ba:2d:25:1c:85:37:a8:43:00:23:68:72:da: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1B:71:26:3B:BF:EC:EA:B3:D3:46:8B:FF:73:66:01:D3:69:22:61 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IxtxJju_7Oqz00aL_3NmAdNpImE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.0.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:59:5b:24:cf:e3:1c:94:2c:a5:18:92:ed:b6:91:4d:fb:2d: 38:8e:ff:8c:76:ff:a5:35:30:75:41:e1:04:20:94:e1:c5:4f: 3b:e4:3a:3a:20:71:85:ca:2b:ff:ba:0a:b8:f0:1e:d9:e4:74: 58:db:5f:94:14:58:7a:9f:5a:7b:d2:0c:53:6a:f9:f4:97:e9: 3d:bc:88:6f:a8:97:f7:90:25:c8:26:a2:7b:2d:89:a0:64:17: 7b:0c:4e:4b:cc:8d:35:40:33:57:80:d6:1c:d9:4d:76:89:19: 94:4a:45:96:3b:be:22:58:6c:14:c0:59:28:12:a9:f7:e9:38: 35:a7:63:70:56:4d:49:f0:dd:9a:90:3e:cd:24:33:34:3f:1f: 76:f0:a6:1c:3f:cb:e5:a1:d4:ea:f8:11:17:53:74:35:06:21: 28:6b:71:ee:53:d4:c9:17:ee:cc:8f:53:88:08:e1:96:7c:31: 94:83:cc:9c:ba:42:09:82:03:07:aa:67:07:5e:93:33:63:10: 71:b1:ac:e7:8f:b0:c8:de:7b:3d:34:71:e9:d1:1b:86:c9:5d: 4a:6c:9e:78:dd:99:fc:24:70:15:c9:5e:03:13:de:5e:8d:c7: 25:ea:be:4c:2a:8d:80:b6:61:4a:7a:24:0c:a2:aa:04:8d:e6: 86:5c:0d:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzMUI3MTI2M0JCRkVD RUFCM0QzNDY4QkZGNzM2NjAxRDM2OTIyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+htxZWoO93OCSXbWrp8DkyObP3drJuGZhL22O//Rvo094wUzM kS4Sg9c9I6DDVJf/S+02V0AYwM+VPGBQscBqYKp7YohEjyNst7oF1+7DoqY3dnc9 IoqTgr+QBkDgUSAetzvKEpdAqfTShrx04UbYNPMu5AEz2meSb2onV9OhsOwlqLUn lIYdEfmxQzynX/hMkFuxX8fK2Jplim7hP7/EMRSRoK95Wqrt/pdMeJ4dD3UGAmzb rdeDoqcryqH/gvkYSwyWxwVPkMe60kEXPLgq1LP8BXUAzWHn1N2OYhbFJruKOVM+ 37w0ChfL9R/k/MbQui0lHIU3qEMAI2hy2kAzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIxtxJju/7Oqz00aL/3NmAdNpImEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0l4dHhKanVfN09xejAwYUxf M05tQWROcEltRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QAAwDQYJKoZIhvcNAQELBQADggEBABtZWyTP4xyULKUYku22kU37LTiO/4x2/6U1 MHVB4QQglOHFTzvkOjogcYXKK/+6CrjwHtnkdFjbX5QUWHqfWnvSDFNq+fSX6T28 iG+ol/eQJcgmonstiaBkF3sMTkvMjTVAM1eA1hzZTXaJGZRKRZY7viJYbBTAWSgS qffpODWnY3BWTUnw3ZqQPs0kMzQ/H3bwphw/y+Wh1Or4ERdTdDUGIShrce5T1MkX 7syPU4gI4ZZ8MZSDzJy6QgmCAweqZwdekzNjEHGxrOePsMjeez00cenRG4bJXUps nnjdmfwkcBXJXgMT3l6NxyXqvkwqjYC2YUp6JAyiqgSN5oZcDUg= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:31 2025 by rpki-client