$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U7NcvCUag6ykqeoZKvHPitiNink.roa File: U7NcvCUag6ykqeoZKvHPitiNink.roa (raw, json) Hash identifier: aiwxOe2Nn2sTDJ3TTA6lmxCUnzrEc1yo2F4F0E/DSvc= Subject key identifier: 53:B3:5C:BC:25:1A:83:AC:A4:A9:EA:19:2A:F1:CF:8A:D8:8D:8A:79 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26D1 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U7NcvCUag6ykqeoZKvHPitiNink.roa Signing time: Fri 22 Aug 2025 08:43:17 +0000 ROA not before: Fri 22 Aug 2025 08:43:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 122.254.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9937 (0x26d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=53B35CBC251A83ACA4A9EA192AF1CF8AD88D8A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:af:06:d8:96:7d:90:aa:53:56:6b:23:01: 52:ed:62:fc:03:49:5b:23:7a:8f:c4:85:57:0c:61: 60:4c:37:30:49:1b:66:5a:aa:9f:d8:cf:cc:43:e5: 93:85:59:d0:9d:93:df:e0:f0:e1:51:87:df:53:66: 22:1a:fd:3b:41:da:96:25:32:db:ba:19:51:e4:ee: 6e:d9:04:eb:fe:7f:20:14:58:c1:32:a6:0e:2d:76: 1c:3c:84:39:28:fa:55:f5:b0:d5:e2:ee:ba:86:20: 71:d1:3a:33:eb:01:1d:0f:39:52:f1:f9:1b:49:ec: 4a:4f:dc:97:43:63:24:8d:ff:dc:91:15:be:26:57: 31:de:ef:86:ab:d1:ee:5c:c0:f7:38:58:af:d2:54: a0:fa:cf:ea:18:4f:a5:bf:0a:c0:7b:57:f9:25:59: 7b:ec:15:cd:89:29:bf:50:00:7d:f5:dd:57:fb:f0: ce:f9:2c:47:72:29:70:e4:22:2d:16:a3:29:98:f4: 36:31:22:6e:99:fe:ec:92:6e:85:65:5b:b9:56:b7: 9f:3e:e9:e9:34:53:26:4e:54:08:b6:20:31:4d:43: 96:d7:58:d1:9a:56:c0:62:1a:c5:f3:55:21:1c:25: 48:6b:b1:ee:7c:af:ab:53:a8:a7:e3:c1:c9:d4:b3: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B3:5C:BC:25:1A:83:AC:A4:A9:EA:19:2A:F1:CF:8A:D8:8D:8A:79 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U7NcvCUag6ykqeoZKvHPitiNink.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.0.0/18 Signature Algorithm: sha256WithRSAEncryption 68:af:d3:2b:a5:99:ca:38:62:33:70:c8:e9:e7:e6:5e:30:a6: c0:cf:40:63:c0:36:69:f9:a5:e7:37:55:3e:8f:3b:af:af:59: 44:89:90:ee:c2:79:bf:2e:22:26:47:a6:18:bf:d0:6e:5f:d6: 8e:45:7d:11:e4:a4:6d:a4:ad:5a:b1:bf:41:56:1e:ad:59:3e: 20:2b:6a:08:88:98:dd:20:64:7b:44:2a:59:f5:72:de:f7:18: 29:53:47:d5:43:85:80:40:b6:85:7a:5e:aa:88:43:f8:3c:b2: 44:3c:99:70:86:a2:81:72:9f:30:df:33:1b:57:08:00:90:7a: 47:3b:c4:26:2d:e7:66:cd:ab:2a:00:a0:d4:cd:fe:7e:e0:e0: f4:d4:70:e5:88:a0:93:1e:80:b2:3a:97:79:a9:7c:0c:40:6a: 0b:8d:2b:e8:25:d0:41:96:b3:e9:db:13:9b:57:9c:e8:59:95: 5d:6a:41:37:7d:d4:c5:13:ab:a8:15:70:2b:8b:55:b3:2f:d7: ea:c8:e4:29:4a:41:b4:5a:1b:69:8c:3e:a2:a4:bd:7b:1b:8d: a7:6f:28:8f:09:c1:d2:0e:22:3a:26:c9:5d:52:b8:7d:ad:8e: 67:62:e8:fb:4d:b7:76:34:03:6b:cc:f8:51:9f:1c:fc:7c:a3: 0f:1b:ce:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUzQjM1Q0JDMjUxQTgz QUNBNEE5RUExOTJBRjFDRjhBRDg4RDhBNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC75a8G2JZ9kKpTVmsjAVLtYvwDSVsjeo/EhVcMYWBMNzBJG2Za qp/Yz8xD5ZOFWdCdk9/g8OFRh99TZiIa/TtB2pYlMtu6GVHk7m7ZBOv+fyAUWMEy pg4tdhw8hDko+lX1sNXi7rqGIHHROjPrAR0POVLx+RtJ7EpP3JdDYySN/9yRFb4m VzHe74ar0e5cwPc4WK/SVKD6z+oYT6W/CsB7V/klWXvsFc2JKb9QAH313Vf78M75 LEdyKXDkIi0WoymY9DYxIm6Z/uySboVlW7lWt58+6ek0UyZOVAi2IDFNQ5bXWNGa VsBiGsXzVSEcJUhrse58r6tTqKfjwcnUs939AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUU7NcvCUag6ykqeoZKvHPitiNinkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1U3TmN2Q1VhZzZ5a3Flb1pL dkhQaXRpTmluay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 /gAwDQYJKoZIhvcNAQELBQADggEBAGiv0yulmco4YjNwyOnn5l4wpsDPQGPANmn5 pec3VT6PO6+vWUSJkO7Ceb8uIiZHphi/0G5f1o5FfRHkpG2krVqxv0FWHq1ZPiAr agiImN0gZHtEKln1ct73GClTR9VDhYBAtoV6XqqIQ/g8skQ8mXCGooFynzDfMxtX CACQekc7xCYt52bNqyoAoNTN/n7g4PTUcOWIoJMegLI6l3mpfAxAaguNK+gl0EGW s+nbE5tXnOhZlV1qQTd91MUTq6gVcCuLVbMv1+rI5ClKQbRaG2mMPqKkvXsbjadv KI8JwdIOIjomyV1SuH2tjmdi6PtNt3Y0A2vM+FGfHPx8ow8bzm4= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:29 2025 by rpki-client