$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pre9TEcycxguTE59wX_hqoem7KE.roa File: Pre9TEcycxguTE59wX_hqoem7KE.roa (raw, json) Hash identifier: tLhROa01ymP+akPfZqKzdYAgPdIrIZ4DpHEzUvaExPk= Subject key identifier: 3E:B7:BD:4C:47:32:73:18:2E:4C:4E:7D:C1:7F:E1:AA:87:A6:EC:A1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2634 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pre9TEcycxguTE59wX_hqoem7KE.roa Signing time: Fri 22 Aug 2025 08:42:41 +0000 ROA not before: Fri 22 Aug 2025 08:42:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 119.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9780 (0x2634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3EB7BD4C473273182E4C4E7DC17FE1AA87A6ECA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:ee:cd:4c:37:9e:d3:60:58:53:78:27:ab: c1:c6:b5:48:df:24:1a:00:6a:a7:bc:39:77:18:3f: 18:92:93:9a:8d:bf:5f:89:a6:b4:fc:39:7c:04:81: fd:4a:fe:63:f5:aa:01:dc:f2:7a:32:33:82:83:09: 38:e4:f3:bb:2f:50:c4:c5:a2:bb:b4:82:01:8b:f2: 2e:d8:72:7c:49:f1:8a:ec:0b:0c:6f:ea:86:d0:ba: 8c:99:ad:93:c7:88:1f:66:18:39:22:24:93:e6:fb: 0d:5a:92:8a:71:f1:96:49:0f:fb:60:d2:87:ac:cd: 50:75:c0:e2:73:84:61:ec:15:9f:47:cb:fb:39:e7: cc:8b:bb:03:75:94:b6:23:4a:eb:07:41:08:65:c8: 74:75:d8:21:62:1f:6d:0a:93:45:a4:79:1d:f8:a9: ba:fd:f2:7a:8e:61:4e:3e:71:6c:78:a5:dc:5e:17: 2a:04:75:99:b3:e4:9e:9e:b3:08:3a:54:0e:d5:fd: 31:27:58:19:0e:73:a3:90:7d:2a:99:8f:f5:d5:fe: e4:21:c1:8e:d2:ea:34:09:de:81:d5:3f:d4:ef:29: 8f:46:24:fd:04:9d:40:c5:a7:d5:8b:35:70:1d:32: 7b:04:cc:fa:dd:be:f8:ef:44:6a:7f:2d:a7:fb:26: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:BD:4C:47:32:73:18:2E:4C:4E:7D:C1:7F:E1:AA:87:A6:EC:A1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pre9TEcycxguTE59wX_hqoem7KE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 03:f0:32:b9:9b:40:8d:38:1a:af:f4:73:da:43:56:9c:2c:2d: cc:b7:84:b7:dc:e8:98:da:c8:14:5e:c7:a4:f4:c5:4d:0f:d7: fd:96:ee:49:86:9b:e7:5d:07:32:56:e4:2f:c5:6a:07:8c:82: e8:6d:7e:0c:55:72:47:b1:ff:a8:9f:ff:9b:1e:8e:3e:4f:ea: 92:ba:5f:91:83:fd:4c:18:f6:f6:41:e0:87:cd:09:46:c4:28: 00:7d:0f:13:54:c2:8b:8b:2d:e1:48:76:ae:6f:0b:1f:63:fd: c9:b7:02:7f:80:ff:d7:18:86:cc:26:4b:2b:99:c7:b2:de:c0: 6c:3c:8f:36:31:20:dc:f0:ce:fc:96:c0:3d:af:f5:2b:25:7c: 01:6e:8a:b3:bc:b8:c6:14:9f:6b:b4:3a:9b:d8:fb:2c:c4:c7: 8f:9d:cd:61:b8:83:1e:b0:99:45:ca:51:74:54:9b:b8:1f:53: 28:2c:ac:0d:34:e4:fb:8d:ab:fc:1c:b0:86:f2:18:d7:1a:8a: bd:47:e2:0d:a1:b3:55:53:2d:ec:2b:81:ca:4b:da:d1:71:b7: f8:e7:f5:41:10:f2:eb:87:06:c1:de:d0:76:27:60:f4:03:f7: 73:84:a9:1f:7d:af:fc:25:fd:51:35:f6:8e:e5:56:ed:ec:51: 07:de:d6:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFQjdCRDRDNDczMjcz MTgyRTRDNEU3REMxN0ZFMUFBODdBNkVDQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4tu7NTDee02BYU3gnq8HGtUjfJBoAaqe8OXcYPxiSk5qNv1+J prT8OXwEgf1K/mP1qgHc8noyM4KDCTjk87svUMTForu0ggGL8i7YcnxJ8YrsCwxv 6obQuoyZrZPHiB9mGDkiJJPm+w1akopx8ZZJD/tg0oeszVB1wOJzhGHsFZ9Hy/s5 58yLuwN1lLYjSusHQQhlyHR12CFiH20Kk0WkeR34qbr98nqOYU4+cWx4pdxeFyoE dZmz5J6eswg6VA7V/TEnWBkOc6OQfSqZj/XV/uQhwY7S6jQJ3oHVP9TvKY9GJP0E nUDFp9WLNXAdMnsEzPrdvvjvRGp/Laf7JhDbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPre9TEcycxguTE59wX/hqoem7KEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ByZTlURWN5Y3hndVRFNTl3 WF9ocW9lbTdLRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 TYAwDQYJKoZIhvcNAQELBQADggEBAAPwMrmbQI04Gq/0c9pDVpwsLcy3hLfc6Jja yBRex6T0xU0P1/2W7kmGm+ddBzJW5C/FageMguhtfgxVckex/6if/5sejj5P6pK6 X5GD/UwY9vZB4IfNCUbEKAB9DxNUwouLLeFIdq5vCx9j/cm3An+A/9cYhswmSyuZ x7LewGw8jzYxINzwzvyWwD2v9SslfAFuirO8uMYUn2u0OpvY+yzEx4+dzWG4gx6w mUXKUXRUm7gfUygsrA005PuNq/wcsIbyGNcair1H4g2hs1VTLewrgcpL2tFxt/jn 9UEQ8uuHBsHe0HYnYPQD93OEqR99r/wl/VE19o7lVu3sUQfe1qA= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:34 2025 by rpki-client