$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RPQ5e_NGffnzbwC5GLQ4s7RC3Bs.roa File: RPQ5e_NGffnzbwC5GLQ4s7RC3Bs.roa (raw, json) Hash identifier: X409ZBQuBzlOwzhwJ9ebWVOk7BEdF5HR/TF3/tiXGJU= Subject key identifier: 44:F4:39:7B:F3:46:7D:F9:F3:6F:00:B9:18:B4:38:B3:B4:42:DC:1B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2649 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RPQ5e_NGffnzbwC5GLQ4s7RC3Bs.roa Signing time: Fri 22 Aug 2025 08:42:47 +0000 ROA not before: Fri 22 Aug 2025 08:42:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 61.60.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9801 (0x2649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=44F4397BF3467DF9F36F00B918B438B3B442DC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:8b:fd:73:f4:c9:0d:6f:7f:6a:5e:41:ab: 38:89:4f:ce:bc:30:ab:69:24:54:b7:64:8a:69:31: 52:14:4e:c9:cd:2f:c9:6c:4e:1d:47:19:28:d0:72: 79:2b:b2:bc:88:43:9c:53:f6:5e:51:1e:97:aa:80: 4b:ba:a7:6a:fb:6a:da:4a:cd:2d:d1:d1:0f:90:89: 7d:a2:9c:69:d6:f4:54:76:cc:ad:b7:8f:ef:9e:04: 4a:75:cd:36:0f:4d:13:54:a4:d7:7d:b9:fe:e3:62: e1:bc:5b:e8:4e:ff:be:25:e9:1b:74:c1:6a:5b:a0: 8a:c7:3a:9f:04:f0:fe:32:52:e8:cd:96:57:36:9f: ac:4f:30:64:d5:d9:ff:34:f5:ed:e2:c1:92:ee:31: c1:37:1c:5c:b4:f9:0d:87:3a:4e:c3:c4:cc:fe:62: 8b:bf:3a:49:2b:37:88:30:46:ae:f6:5f:13:cf:f8: fa:d0:65:25:54:bf:b6:04:69:01:ce:ff:6c:68:eb: f1:22:28:25:a0:52:69:f7:34:93:36:29:a4:2e:d0: 1d:87:a2:ad:6c:7c:97:fb:a8:49:eb:5b:ee:38:7e: d8:bf:9b:27:c4:47:57:05:2c:e9:c7:60:68:a0:2e: 59:30:ed:70:fd:e0:30:72:34:76:38:e8:4f:1f:2b: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F4:39:7B:F3:46:7D:F9:F3:6F:00:B9:18:B4:38:B3:B4:42:DC:1B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RPQ5e_NGffnzbwC5GLQ4s7RC3Bs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.214.0/23 Signature Algorithm: sha256WithRSAEncryption 99:da:d2:a1:02:e3:51:46:bc:6f:87:d4:26:1c:c0:98:21:15: eb:df:7a:94:b0:bf:f0:7b:91:94:22:f5:81:73:b3:70:37:25: 62:28:6f:67:fc:1a:65:25:c3:63:9c:ad:8b:22:1f:0c:e9:be: ba:ab:31:4e:bb:83:3f:4c:f7:b9:61:ac:b1:ab:44:53:eb:c2: 0e:79:de:53:1f:59:fb:0a:72:4d:0d:75:0a:a5:9c:f2:3f:db: 92:aa:42:03:b1:60:88:2b:26:34:3e:78:9e:98:b4:04:22:be: 46:20:32:1a:fd:3d:72:bf:56:3b:55:e4:5d:29:c7:f5:e6:b0: 82:d2:76:ed:d3:7b:2d:a6:cc:88:18:4e:bf:79:19:8e:d9:b5: f8:c6:a1:d9:74:28:7c:e2:bf:0f:f8:cc:0f:6c:89:d4:5f:cf: c7:c5:e2:bc:82:2e:39:13:91:35:1e:f0:cb:bc:d7:fa:17:06: c9:3d:1c:62:a7:26:78:60:59:3d:e4:ba:3e:d0:39:18:4f:13: 1f:90:7d:17:d6:65:81:a6:a4:5a:82:94:37:88:41:67:1e:d0: 82:66:f2:b4:46:37:8e:e6:18:bb:5d:ee:df:d8:a8:7b:ed:23: 1c:c2:4d:ef:d0:61:3c:47:fa:e0:2b:3e:1a:d6:8e:88:85:4d: 7b:22:34:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ0RjQzOTdCRjM0NjdE RjlGMzZGMDBCOTE4QjQzOEIzQjQ0MkRDMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeoIv9c/TJDW9/al5BqziJT868MKtpJFS3ZIppMVIUTsnNL8ls Th1HGSjQcnkrsryIQ5xT9l5RHpeqgEu6p2r7atpKzS3R0Q+QiX2inGnW9FR2zK23 j++eBEp1zTYPTRNUpNd9uf7jYuG8W+hO/74l6Rt0wWpboIrHOp8E8P4yUujNllc2 n6xPMGTV2f809e3iwZLuMcE3HFy0+Q2HOk7DxMz+You/OkkrN4gwRq72XxPP+PrQ ZSVUv7YEaQHO/2xo6/EiKCWgUmn3NJM2KaQu0B2Hoq1sfJf7qEnrW+44fti/myfE R1cFLOnHYGigLlkw7XD94DByNHY46E8fKx1pAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURPQ5e/NGffnzbwC5GLQ4s7RC3BswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1JQUTVlX05HZmZuemJ3QzVH TFE0czdSQzNCcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE9 PNYwDQYJKoZIhvcNAQELBQADggEBAJna0qEC41FGvG+H1CYcwJghFevfepSwv/B7 kZQi9YFzs3A3JWIob2f8GmUlw2OcrYsiHwzpvrqrMU67gz9M97lhrLGrRFPrwg55 3lMfWfsKck0NdQqlnPI/25KqQgOxYIgrJjQ+eJ6YtAQivkYgMhr9PXK/VjtV5F0p x/XmsILSdu3Tey2mzIgYTr95GY7ZtfjGodl0KHzivw/4zA9sidRfz8fF4ryCLjkT kTUe8Mu81/oXBsk9HGKnJnhgWT3kuj7QORhPEx+QfRfWZYGmpFqClDeIQWce0IJm 8rRGN47mGLtd7t/YqHvtIxzCTe/QYTxH+uArPhrWjoiFTXsiNKg= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:42 2025 by rpki-client