$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VO84EQ6hTJoXA36YZM0XUmxFcME.roa File: VO84EQ6hTJoXA36YZM0XUmxFcME.roa (raw, json) Hash identifier: XEXqOYV9jv49HkiJjF+Gc0r4QKxX+YZsrzT0lRUPnws= Subject key identifier: 54:EF:38:11:0E:A1:4C:9A:17:03:7E:98:64:CD:17:52:6C:45:70:C1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2668 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VO84EQ6hTJoXA36YZM0XUmxFcME.roa Signing time: Fri 22 Aug 2025 08:42:54 +0000 ROA not before: Fri 22 Aug 2025 08:42:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9832 (0x2668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=54EF38110EA14C9A17037E9864CD17526C4570C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:bc:ef:6e:de:99:80:b4:93:52:e6:00:0c: a0:d5:21:0b:5a:d5:ca:ff:3e:46:e2:03:c4:a5:53: b3:61:18:dc:e6:ef:af:bb:69:ce:5b:50:3f:7e:c9: 68:93:3d:9e:7a:21:51:57:85:0f:b0:c4:3b:af:84: 41:b2:75:25:73:7d:08:1a:ec:fc:f0:42:3c:2c:5f: ab:c7:7c:16:97:36:45:87:54:ec:ff:67:c1:dd:ca: 87:2c:c1:9f:a3:18:90:51:0d:39:59:7f:54:6f:a5: 28:ab:29:54:9f:4e:92:96:1a:cb:96:5a:2f:9d:94: c5:86:16:10:64:09:e8:36:ea:ef:d0:96:41:30:b9: 05:37:1a:d9:9c:8a:db:2c:99:56:9e:f7:71:ee:a3: 57:6c:ec:d3:54:e3:40:aa:a4:6b:4c:05:ce:dd:c8: 37:63:e0:75:a1:8b:2b:86:1a:7c:38:14:92:ae:a4: 1b:cc:fa:75:da:4c:01:f8:f1:d8:6a:f6:f8:a0:a1: b5:b0:05:bd:27:ad:f5:93:ef:c9:5b:bd:c8:bf:c3: c7:51:85:54:03:72:8c:30:78:39:2e:c8:89:48:f0: 9f:7c:57:f6:8e:56:2a:72:de:c8:c5:3d:1f:79:48: 4d:f9:9c:a4:5b:83:5a:ef:62:e6:94:c3:21:11:05: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EF:38:11:0E:A1:4C:9A:17:03:7E:98:64:CD:17:52:6C:45:70:C1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VO84EQ6hTJoXA36YZM0XUmxFcME.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.16.0/21 Signature Algorithm: sha256WithRSAEncryption 38:f2:3e:68:ce:ad:33:2d:83:f9:fa:89:63:a8:5e:1e:51:df: 83:aa:3c:85:55:cc:4f:e6:6b:a7:12:aa:80:c7:50:9c:30:07: 29:37:8b:ce:69:55:d7:2f:be:f6:f8:e5:e8:27:2e:6d:21:a4: 14:1e:22:3a:de:28:30:05:14:cc:e3:29:32:35:7b:b3:90:7f: dc:cb:fa:7e:a6:17:cc:a9:43:32:d0:18:20:70:8b:e4:97:a5: 72:ca:5c:9e:38:da:ab:4a:a4:90:0b:17:f2:ad:1f:41:d9:fa: ac:98:44:d5:0a:7b:20:d2:bc:38:ee:ca:93:61:4f:0a:d2:fd: 94:c6:51:e5:8c:c2:1f:b0:49:22:7c:b9:f9:0d:bc:43:41:04: 1d:78:8d:c5:b0:df:b9:52:0e:3e:73:32:96:2a:00:40:d3:33: b3:53:ce:d8:2d:4e:c7:d6:d6:7d:21:4b:77:88:a7:78:28:0a: b9:8c:55:c1:f0:61:39:4a:e4:29:f3:17:69:66:44:6a:c9:21: 1a:9b:d3:3c:c6:90:15:76:92:e6:67:4c:8e:5b:6c:2d:ff:d5: 99:0b:71:80:a7:30:a0:05:d1:90:2a:3a:26:c2:b5:56:d0:e7: a9:a5:b3:d4:c7:1c:a3:7d:61:4e:0e:7d:12:24:1f:6f:26:ac: 77:7b:db:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU0RUYzODExMEVBMTRD OUExNzAzN0U5ODY0Q0QxNzUyNkM0NTcwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVibzvbt6ZgLSTUuYADKDVIQta1cr/PkbiA8SlU7NhGNzm76+7 ac5bUD9+yWiTPZ56IVFXhQ+wxDuvhEGydSVzfQga7PzwQjwsX6vHfBaXNkWHVOz/ Z8HdyocswZ+jGJBRDTlZf1RvpSirKVSfTpKWGsuWWi+dlMWGFhBkCeg26u/QlkEw uQU3GtmcitssmVae93Huo1ds7NNU40CqpGtMBc7dyDdj4HWhiyuGGnw4FJKupBvM +nXaTAH48dhq9vigobWwBb0nrfWT78lbvci/w8dRhVQDcowweDkuyIlI8J98V/aO Vipy3sjFPR95SE35nKRbg1rvYuaUwyERBW/pAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVO84EQ6hTJoXA36YZM0XUmxFcMEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZPODRFUTZoVEpvWEEzNlla TTBYVW14RmNNRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nhAwDQYJKoZIhvcNAQELBQADggEBADjyPmjOrTMtg/n6iWOoXh5R34OqPIVVzE/m a6cSqoDHUJwwByk3i85pVdcvvvb45egnLm0hpBQeIjreKDAFFMzjKTI1e7OQf9zL +n6mF8ypQzLQGCBwi+SXpXLKXJ442qtKpJALF/KtH0HZ+qyYRNUKeyDSvDjuypNh TwrS/ZTGUeWMwh+wSSJ8ufkNvENBBB14jcWw37lSDj5zMpYqAEDTM7NTztgtTsfW 1n0hS3eIp3goCrmMVcHwYTlK5CnzF2lmRGrJIRqb0zzGkBV2kuZnTI5bbC3/1ZkL cYCnMKAF0ZAqOibCtVbQ56mls9THHKN9YU4OfRIkH28mrHd724w= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:43 2025 by rpki-client