$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Qx1Qew4M2zyLdUEOkG2V_-GfodQ.roa File: Qx1Qew4M2zyLdUEOkG2V_-GfodQ.roa (raw, json) Hash identifier: 1VAVsXqMFFcu2xLrMrQhwS0sayCfqS8mwOEnwt/Qz70= Subject key identifier: 43:1D:50:7B:0E:0C:DB:3C:8B:75:41:0E:90:6D:95:FF:E1:9F:A1:D4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26B8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Qx1Qew4M2zyLdUEOkG2V_-GfodQ.roa Signing time: Fri 22 Aug 2025 08:43:11 +0000 ROA not before: Fri 22 Aug 2025 08:43:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9912 (0x26b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=431D507B0E0CDB3C8B75410E906D95FFE19FA1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:e4:73:b7:e7:99:a6:63:2d:35:37:a9:26: 23:ba:92:c3:45:5a:44:da:67:87:1f:70:f8:e9:82: 83:1d:8d:89:34:0f:99:d2:41:45:ac:30:a1:a3:6c: eb:b5:66:87:a5:66:73:7a:55:52:f7:f3:26:c2:1b: bc:6f:2e:69:04:48:8e:54:8c:1d:49:b5:47:e3:4d: 26:cb:dc:f1:5a:a6:68:99:a5:6b:7f:06:e7:c8:68: e9:c6:8e:a7:46:f7:47:79:70:84:b0:73:ca:a4:0c: 1f:e0:14:f1:70:f1:06:49:85:2f:92:cb:66:78:78: fd:94:92:7f:90:4e:44:a3:3e:9c:9d:28:87:3c:3a: 32:05:2d:86:1a:c6:d6:09:6a:30:bb:f9:06:ca:f4: ef:1a:82:f8:3c:7e:d8:be:27:b3:20:71:bc:c4:28: 1c:58:12:52:47:2e:21:99:85:e0:3b:bf:64:c9:b5: 75:b0:07:81:81:3e:1c:c3:20:c4:74:1e:45:c1:c0: 73:24:fe:c5:88:a3:d4:47:27:c0:ba:f7:fd:18:64: fd:af:0a:a0:ca:2e:35:8c:43:27:18:c1:23:ab:46: 3a:fa:d6:83:b7:b7:58:5c:f7:33:ee:23:cd:ad:05: dd:59:cd:77:08:10:ce:54:bf:76:71:75:00:d5:26: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1D:50:7B:0E:0C:DB:3C:8B:75:41:0E:90:6D:95:FF:E1:9F:A1:D4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Qx1Qew4M2zyLdUEOkG2V_-GfodQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.80.0/24 Signature Algorithm: sha256WithRSAEncryption 01:07:1a:61:36:53:cb:d5:95:6e:57:de:40:5d:eb:7c:a2:a5: a4:83:e1:6f:29:f2:17:24:40:0f:2b:b3:4f:dd:1a:ec:27:a9: e7:72:d1:9d:b5:2b:59:dc:7e:05:eb:6f:b2:7f:1f:dc:e7:1e: b7:0d:c9:38:d5:49:61:3f:86:f2:35:e8:0d:1f:8d:ae:8e:95: 4e:4c:a5:4a:ff:7e:db:3a:16:b0:ed:6d:f0:5a:a9:f0:76:ae: fb:83:4c:0a:db:39:39:98:97:c3:48:2c:68:df:80:54:c1:0e: 32:12:2c:ba:06:eb:73:1e:62:12:d9:3b:c6:99:9c:fc:b0:74: 86:d2:b1:c7:5d:51:7b:3d:32:85:c1:83:7e:4f:6f:8f:24:b7: d2:d4:ea:15:e0:c1:95:89:f4:2f:51:d6:7d:63:8a:0d:c1:3e: 40:21:68:5e:68:7f:b5:24:a1:ca:0b:df:f7:1f:f9:ba:98:22: b3:5f:0c:39:ce:98:45:7d:76:62:c4:2b:4b:28:b6:2b:02:38: 31:bf:5f:4d:a9:3a:bb:12:49:af:db:af:8e:c3:2a:61:35:eb: 29:00:7d:cd:e9:a7:9d:c5:6a:6d:be:0e:da:6f:8a:c5:3b:d7: 3d:75:13:f7:c2:0a:86:7e:db:15:c8:eb:60:14:e9:17:2a:7b: 56:d3:59:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQzMUQ1MDdCMEUwQ0RC M0M4Qjc1NDEwRTkwNkQ5NUZGRTE5RkExRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtWORzt+eZpmMtNTepJiO6ksNFWkTaZ4cfcPjpgoMdjYk0D5nS QUWsMKGjbOu1ZoelZnN6VVL38ybCG7xvLmkESI5UjB1JtUfjTSbL3PFapmiZpWt/ BufIaOnGjqdG90d5cISwc8qkDB/gFPFw8QZJhS+Sy2Z4eP2Ukn+QTkSjPpydKIc8 OjIFLYYaxtYJajC7+QbK9O8agvg8fti+J7MgcbzEKBxYElJHLiGZheA7v2TJtXWw B4GBPhzDIMR0HkXBwHMk/sWIo9RHJ8C69/0YZP2vCqDKLjWMQycYwSOrRjr61oO3 t1hc9zPuI82tBd1ZzXcIEM5Uv3ZxdQDVJk8HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQx1Qew4M2zyLdUEOkG2V/+GfodQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1F4MVFldzRNMnp5TGRVRU9r RzJWXy1HZm9kUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx nlAwDQYJKoZIhvcNAQELBQADggEBAAEHGmE2U8vVlW5X3kBd63yipaSD4W8p8hck QA8rs0/dGuwnqedy0Z21K1ncfgXrb7J/H9znHrcNyTjVSWE/hvI16A0fja6OlU5M pUr/fts6FrDtbfBaqfB2rvuDTArbOTmYl8NILGjfgFTBDjISLLoG63MeYhLZO8aZ nPywdIbSscddUXs9MoXBg35Pb48kt9LU6hXgwZWJ9C9R1n1jig3BPkAhaF5of7Uk ocoL3/cf+bqYIrNfDDnOmEV9dmLEK0sotisCODG/X02pOrsSSa/br47DKmE16ykA fc3pp53Fam2+DtpvisU71z11E/fCCoZ+2xXI62AU6Rcqe1bTWdA= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:40 2025 by rpki-client