$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KHUIprquiYWfXW5MaQSOjgjdsw4.roa File: KHUIprquiYWfXW5MaQSOjgjdsw4.roa (raw, json) Hash identifier: b9MddERBQEGCsPYfl/Pk1jvJt1I1yKca+ZD3uXR1bLM= Subject key identifier: 28:75:08:A6:BA:AE:89:85:9F:5D:6E:4C:69:04:8E:8E:08:DD:B3:0E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2674 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KHUIprquiYWfXW5MaQSOjgjdsw4.roa Signing time: Fri 22 Aug 2025 08:42:56 +0000 ROA not before: Fri 22 Aug 2025 08:42:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 180.218.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9844 (0x2674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=287508A6BAAE89859F5D6E4C69048E8E08DDB30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:73:5c:b7:eb:6b:f8:25:68:63:0c:b2:fb:21: b3:7e:ce:42:15:8b:ee:15:a8:b9:cc:86:a9:8a:63: 60:ff:d8:09:c1:de:6e:97:68:5a:38:70:bc:f6:53: 46:76:4a:7c:f1:e5:93:f9:69:8c:58:51:cb:35:f2: c1:1e:3d:91:fb:f7:82:bb:29:e1:6f:39:2a:2d:1d: 5a:90:7c:b5:91:71:16:5c:4b:95:98:19:87:94:04: ae:d3:89:38:b6:5c:cd:aa:0f:5f:22:0a:b2:49:86: 84:f2:7b:d6:c0:6d:3d:88:38:61:b3:8e:29:fc:9c: 3f:8b:18:7a:98:d1:5e:8a:86:5b:09:48:f8:34:d2: b6:46:f5:24:8b:76:b3:28:60:34:45:70:e2:63:d4: 48:13:e5:74:a0:26:73:2b:3d:b9:c2:4c:5f:1e:d2: 07:49:0d:82:7e:90:7a:c0:c1:31:79:36:5a:f4:7a: 40:f0:9b:15:99:7f:03:d0:02:ea:97:1f:5b:f9:4e: c7:67:37:fd:3f:cd:9d:a0:b2:d4:d5:53:a9:ae:89: 9d:ee:d6:cb:02:52:f2:28:bd:50:96:92:75:66:90: b7:ff:01:6c:7b:4b:ed:38:45:76:aa:5e:be:47:8f: 38:6b:a0:68:f3:64:44:4c:91:56:9d:e5:d6:08:be: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:08:A6:BA:AE:89:85:9F:5D:6E:4C:69:04:8E:8E:08:DD:B3:0E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KHUIprquiYWfXW5MaQSOjgjdsw4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.104.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:53:86:82:97:14:68:50:d0:ce:dd:5a:15:96:1a:73:37:41: 76:79:74:9f:5f:e6:9d:32:54:af:86:3c:30:7f:8b:fb:03:a7: dd:f0:07:9c:24:07:34:de:0c:5e:9d:68:15:00:65:19:2f:0a: 9c:ba:a3:29:2e:ab:82:42:3c:3f:67:10:51:7c:87:ec:d1:7d: 49:e9:58:d7:15:ca:13:b2:a7:ff:4d:e6:be:03:25:5d:58:92: 20:d5:94:84:97:b8:0b:d0:8b:4e:d2:de:d4:c5:5d:75:56:91: 3e:6b:fc:36:49:3d:92:4c:27:1d:70:71:0f:8e:ed:e9:74:22: 20:00:95:b4:da:bd:ba:3c:7a:14:37:2e:d4:f4:37:87:a8:69: 30:d0:53:f6:bf:9f:b3:89:99:75:4c:09:87:c3:a8:23:94:a5: 8a:ad:df:21:12:05:ba:cb:19:be:fb:be:cc:52:25:f5:40:ea: 6b:8c:90:36:11:49:a5:1e:ed:b2:8a:69:60:53:99:60:fc:b9: 1b:fa:fe:68:0f:89:3f:67:35:a8:93:23:8f:d7:4e:9b:4a:33: 56:6d:05:8f:bc:27:d0:be:fc:c4:34:8e:8e:a1:ab:e9:3e:66: d3:f1:6d:64:cb:b4:8b:64:7c:37:1f:51:e9:78:ea:92:01:dd: 04:5a:d4:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4NzUwOEE2QkFBRTg5 ODU5RjVENkU0QzY5MDQ4RThFMDhEREIzMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtc1y362v4JWhjDLL7IbN+zkIVi+4VqLnMhqmKY2D/2AnB3m6X aFo4cLz2U0Z2Snzx5ZP5aYxYUcs18sEePZH794K7KeFvOSotHVqQfLWRcRZcS5WY GYeUBK7TiTi2XM2qD18iCrJJhoTye9bAbT2IOGGzjin8nD+LGHqY0V6KhlsJSPg0 0rZG9SSLdrMoYDRFcOJj1EgT5XSgJnMrPbnCTF8e0gdJDYJ+kHrAwTF5Nlr0ekDw mxWZfwPQAuqXH1v5TsdnN/0/zZ2gstTVU6muiZ3u1ssCUvIovVCWknVmkLf/AWx7 S+04RXaqXr5HjzhroGjzZERMkVad5dYIvtO1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKHUIprquiYWfXW5MaQSOjgjdsw4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tIVUlwcnF1aVlXZlhXNU1h UVNPamdqZHN3NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2mgwDQYJKoZIhvcNAQELBQADggEBAHxThoKXFGhQ0M7dWhWWGnM3QXZ5dJ9f5p0y VK+GPDB/i/sDp93wB5wkBzTeDF6daBUAZRkvCpy6oykuq4JCPD9nEFF8h+zRfUnp WNcVyhOyp/9N5r4DJV1YkiDVlISXuAvQi07S3tTFXXVWkT5r/DZJPZJMJx1wcQ+O 7el0IiAAlbTavbo8ehQ3LtT0N4eoaTDQU/a/n7OJmXVMCYfDqCOUpYqt3yESBbrL Gb77vsxSJfVA6muMkDYRSaUe7bKKaWBTmWD8uRv6/mgPiT9nNaiTI4/XTptKM1Zt BY+8J9C+/MQ0jo6hq+k+ZtPxbWTLtItkfDcfUel46pIB3QRa1M0= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:42 2025 by rpki-client