$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QrRpNU2iDH4GJFRr2K0xk1BDtWg.roa File: QrRpNU2iDH4GJFRr2K0xk1BDtWg.roa (raw, json) Hash identifier: yRtcosjRChjjanJtAQng2cvFD0Rze7CcJggQEEF1k/Q= Subject key identifier: 42:B4:69:35:4D:A2:0C:7E:06:24:54:6B:D8:AD:31:93:50:43:B5:68 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 266B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QrRpNU2iDH4GJFRr2K0xk1BDtWg.roa Signing time: Fri 22 Aug 2025 08:42:54 +0000 ROA not before: Fri 22 Aug 2025 08:42:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 122.254.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9835 (0x266b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=42B469354DA20C7E0624546BD8AD31935043B568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:f5:45:b0:84:4b:c8:1b:03:5f:fd:ff:03: 97:04:12:70:d2:82:90:8d:94:ef:f5:fb:e2:7c:fc: 9a:f0:1e:d5:20:08:88:b1:36:df:28:79:2b:ba:66: 93:21:64:5f:f8:b5:c6:15:bc:c8:55:e6:44:84:d7: 03:98:8c:66:1d:7d:d9:8c:e0:a2:68:23:96:77:9d: 5e:ed:9b:dd:81:60:2a:0f:c0:6c:ba:85:9d:b2:ca: 2a:53:81:3d:96:65:46:6b:3b:9b:65:ce:f3:5e:da: 57:d8:88:da:76:92:6a:3f:18:8a:34:5a:81:6f:ce: e3:a4:ba:b7:0a:46:02:3a:e9:1b:13:7a:f1:b7:c8: 41:23:3b:86:f0:bf:33:74:bd:b6:82:1a:de:09:3d: 6d:7f:08:e2:bd:3c:66:5e:bb:a4:21:ee:a9:e5:6e: 27:0b:f5:c4:b6:3a:b9:28:98:fd:6b:dd:b0:52:e6: 5e:43:0d:23:4f:f2:24:19:65:83:6c:f6:1c:df:6b: 97:24:1c:ab:9a:ce:c2:5f:90:e4:7c:0a:6f:64:24: fa:b6:1a:23:c0:f0:9a:59:f9:3a:bc:0c:36:45:2b: 28:a5:fd:37:ed:9d:97:83:18:0b:f3:f4:79:27:d0: 22:a5:e0:c6:7a:23:fc:dc:81:e5:41:e9:bf:8e:b4: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B4:69:35:4D:A2:0C:7E:06:24:54:6B:D8:AD:31:93:50:43:B5:68 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QrRpNU2iDH4GJFRr2K0xk1BDtWg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.16.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:9f:b5:72:36:41:5b:99:42:91:d4:16:a5:a4:a9:0d:e2:61: dc:91:f1:28:55:22:29:53:75:c9:f4:51:f2:2b:d5:f9:6d:62: 5d:ac:bf:c9:e2:84:d8:ea:e1:1f:13:79:4b:f7:62:45:00:c5: f0:00:3d:f3:7b:bb:bd:39:55:1a:81:74:44:51:da:53:bd:a1: 67:47:85:f2:a8:ac:1a:6f:fb:e3:ff:99:f6:64:2d:59:59:7d: 7e:4e:27:c3:0b:3a:aa:8d:8c:e3:06:7b:5b:34:c5:7c:ee:d5: df:08:20:dd:9e:6d:74:c0:f2:a3:3b:0b:85:f0:27:87:53:5b: ad:55:a0:2b:f3:0b:2e:f2:16:9a:1b:30:9b:8d:cc:63:2b:c1: 39:e8:0d:43:9f:2b:86:06:4d:b8:5f:7b:5c:27:4f:7e:51:a0: 33:1f:d0:19:b8:df:68:f4:85:ee:9a:57:bc:fe:d9:4e:f8:9f: 71:f8:a6:d8:13:2c:11:fa:3b:bb:4e:fe:67:f9:75:db:a0:20: b0:ce:ad:a4:05:5b:c9:08:de:04:55:93:2f:f5:9e:78:a1:72: 87:80:11:a8:39:65:6e:ec:81:3e:56:9a:57:50:25:ef:1e:ad: 20:21:87:f6:57:d4:5d:da:30:1f:59:84:28:14:90:1b:6e:18: dc:a6:c3:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQyQjQ2OTM1NERBMjBD N0UwNjI0NTQ2QkQ4QUQzMTkzNTA0M0I1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR+vVFsIRLyBsDX/3/A5cEEnDSgpCNlO/1++J8/JrwHtUgCIix Nt8oeSu6ZpMhZF/4tcYVvMhV5kSE1wOYjGYdfdmM4KJoI5Z3nV7tm92BYCoPwGy6 hZ2yyipTgT2WZUZrO5tlzvNe2lfYiNp2kmo/GIo0WoFvzuOkurcKRgI66RsTevG3 yEEjO4bwvzN0vbaCGt4JPW1/COK9PGZeu6Qh7qnlbicL9cS2OrkomP1r3bBS5l5D DSNP8iQZZYNs9hzfa5ckHKuazsJfkOR8Cm9kJPq2GiPA8JpZ+Tq8DDZFKyil/Tft nZeDGAvz9Hkn0CKl4MZ6I/zcgeVB6b+OtANRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQrRpNU2iDH4GJFRr2K0xk1BDtWgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FyUnBOVTJpREg0R0pGUnIy SzB4azFCRHRXZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /hAwDQYJKoZIhvcNAQELBQADggEBAAuftXI2QVuZQpHUFqWkqQ3iYdyR8ShVIilT dcn0UfIr1fltYl2sv8nihNjq4R8TeUv3YkUAxfAAPfN7u705VRqBdERR2lO9oWdH hfKorBpv++P/mfZkLVlZfX5OJ8MLOqqNjOMGe1s0xXzu1d8IIN2ebXTA8qM7C4Xw J4dTW61VoCvzCy7yFpobMJuNzGMrwTnoDUOfK4YGTbhfe1wnT35RoDMf0Bm432j0 he6aV7z+2U74n3H4ptgTLBH6O7tO/mf5ddugILDOraQFW8kI3gRVky/1nnihcoeA Eag5ZW7sgT5WmldQJe8erSAhh/ZX1F3aMB9ZhCgUkBtuGNymwz4= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:41 2025 by rpki-client