$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SG7HjEEMiBcLM2OOMslLMkwK_dU.roa File: SG7HjEEMiBcLM2OOMslLMkwK_dU.roa (raw, json) Hash identifier: yHrknMipPLfDqQ49ssc9fRBScm176OzeU0ohHpnL4Pc= Subject key identifier: 48:6E:C7:8C:41:0C:88:17:0B:33:63:8E:32:C9:4B:32:4C:0A:FD:D5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 262B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SG7HjEEMiBcLM2OOMslLMkwK_dU.roa Signing time: Fri 22 Aug 2025 08:42:39 +0000 ROA not before: Fri 22 Aug 2025 08:42:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 124.6.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9771 (0x262b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=486EC78C410C88170B33638E32C94B324C0AFDD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:2c:c8:c1:b8:e0:1f:61:c3:fa:67:ae:00: f6:1b:27:74:e6:0b:f7:8e:bf:42:81:d7:af:02:54: ae:7d:fd:bf:ee:32:e4:ca:c9:af:9b:48:85:b4:6c: 54:ba:82:53:58:f9:da:20:bc:89:8a:a7:73:cf:e1: 9c:df:cf:a1:de:ba:48:59:da:b0:59:10:6f:b4:69: 9e:8a:eb:2e:7b:d6:68:55:52:46:fc:93:df:70:16: c3:fe:9a:e9:e0:4a:fd:f9:67:15:82:0a:c3:93:77: 96:32:56:bc:5a:b2:6f:7b:ef:04:54:59:01:05:87: 48:cc:9c:5c:5d:fa:42:aa:c8:ab:25:1c:15:b9:9a: 5f:ac:79:0f:5d:ca:b5:fb:19:b8:e9:8f:c0:6e:9b: 16:bc:24:04:50:30:5c:35:1a:6f:b6:82:07:55:b1: 9e:d7:4b:7d:49:e9:5d:c2:a8:81:00:1e:2f:12:e1: 5d:87:e3:f5:d7:65:0f:3a:4f:ce:ac:20:f2:a5:40: 2a:bb:e6:75:7d:14:59:2d:92:ae:37:6b:a9:a0:8e: ba:66:81:9c:3f:89:cc:a3:72:7a:cf:e6:15:67:49: 50:9b:a6:94:e7:dd:d6:b8:69:fc:33:a1:90:88:64: 88:23:4d:f5:b4:1f:a0:f6:18:0c:83:69:e9:12:c8: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6E:C7:8C:41:0C:88:17:0B:33:63:8E:32:C9:4B:32:4C:0A:FD:D5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SG7HjEEMiBcLM2OOMslLMkwK_dU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.8.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:ab:c4:8a:f7:a3:f4:01:c6:de:ef:8a:58:4b:d6:4b:a9:33: 0d:b1:08:20:bd:20:a5:96:f6:7e:30:15:39:6b:c0:f0:fb:26: fa:5c:e7:49:c0:4c:79:86:b4:dc:4d:e2:5d:48:a5:ae:ff:3b: 03:8f:9c:a3:65:ee:fb:d3:1e:db:6a:59:c9:12:71:15:a7:98: 4d:67:c5:54:fe:dd:68:58:c0:50:2b:fd:86:80:f0:84:73:81: fc:3c:b9:c8:23:ee:ad:e8:7c:62:81:b9:0d:eb:18:94:4e:6c: 60:b3:d6:4e:19:9a:0b:cd:3f:04:84:ca:dd:fb:ae:10:a8:01: c9:ab:a1:f3:df:71:84:09:c0:b8:c9:de:0e:7e:ea:b0:c8:c7: 09:b6:e1:45:c4:e6:27:be:09:28:f6:23:75:41:a0:1f:37:53: 46:9d:8a:65:4b:79:76:c5:ca:d7:78:f5:e8:0a:70:5f:b7:46: cd:5c:bb:f3:eb:0e:03:46:a2:d3:69:de:62:f3:3f:e6:8d:ae: d7:1f:63:66:bd:be:ad:64:01:84:f1:a6:74:ce:a2:04:c7:37: f0:f5:dc:bb:bd:b7:bb:10:2d:ee:8c:3b:6e:ae:72:e1:79:e7: 07:1d:10:ce:6e:92:89:e8:90:4c:03:fd:e9:5c:0a:c2:66:09: aa:f6:b1:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ4NkVDNzhDNDEwQzg4 MTcwQjMzNjM4RTMyQzk0QjMyNEMwQUZERDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIeizIwbjgH2HD+meuAPYbJ3TmC/eOv0KB168CVK59/b/uMuTK ya+bSIW0bFS6glNY+dogvImKp3PP4Zzfz6HeukhZ2rBZEG+0aZ6K6y571mhVUkb8 k99wFsP+mungSv35ZxWCCsOTd5YyVrxasm977wRUWQEFh0jMnFxd+kKqyKslHBW5 ml+seQ9dyrX7Gbjpj8Bumxa8JARQMFw1Gm+2ggdVsZ7XS31J6V3CqIEAHi8S4V2H 4/XXZQ86T86sIPKlQCq75nV9FFktkq43a6mgjrpmgZw/icyjcnrP5hVnSVCbppTn 3da4afwzoZCIZIgjTfW0H6D2GAyDaekSyEFPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSG7HjEEMiBcLM2OOMslLMkwK/dUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NHN0hqRUVNaUJjTE0yT09N c2xMTWt3S19kVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN8 BggwDQYJKoZIhvcNAQELBQADggEBAH6rxIr3o/QBxt7vilhL1kupMw2xCCC9IKWW 9n4wFTlrwPD7Jvpc50nATHmGtNxN4l1Ipa7/OwOPnKNl7vvTHttqWckScRWnmE1n xVT+3WhYwFAr/YaA8IRzgfw8ucgj7q3ofGKBuQ3rGJRObGCz1k4ZmgvNPwSEyt37 rhCoAcmrofPfcYQJwLjJ3g5+6rDIxwm24UXE5ie+CSj2I3VBoB83U0adimVLeXbF ytd49egKcF+3Rs1cu/PrDgNGotNp3mLzP+aNrtcfY2a9vq1kAYTxpnTOogTHN/D1 3Lu9t7sQLe6MO26ucuF55wcdEM5ukonokEwD/elcCsJmCar2sUs= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:37 2025 by rpki-client