$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xvlo4vRfWgO6cRfs6PCx9D9Y6xA.roa File: Xvlo4vRfWgO6cRfs6PCx9D9Y6xA.roa (raw, json) Hash identifier: mJQjcD85IdNYZCGztySVenRCIE9/dlOBNmKdXTY/D3c= Subject key identifier: 5E:F9:68:E2:F4:5F:5A:03:BA:71:17:EC:E8:F0:B1:F4:3F:58:EB:10 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26EC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xvlo4vRfWgO6cRfs6PCx9D9Y6xA.roa Signing time: Fri 22 Aug 2025 08:43:23 +0000 ROA not before: Fri 22 Aug 2025 08:43:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 122.100.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9964 (0x26ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5EF968E2F45F5A03BA7117ECE8F0B1F43F58EB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:61:d4:51:b1:1b:03:22:ae:06:18:fe:f4: a8:03:b0:14:c3:5b:80:30:60:4b:10:0a:3c:5d:23: 96:8d:c1:ec:dd:bd:d7:bd:6f:53:d3:3e:86:4d:2a: 39:8b:1c:4f:9f:89:29:cd:ae:03:9f:88:58:2c:e0: bc:82:1b:e7:4b:4d:c4:de:fe:5e:1c:fb:4b:63:35: 8b:c8:2c:28:8b:f2:c2:b6:3d:08:e7:f5:35:8f:79: 4f:c0:60:81:1c:fe:83:be:a8:e8:9d:9f:9a:dd:02: 5c:24:86:48:9e:82:f1:71:5d:95:6d:71:b4:c6:17: 74:2d:4a:87:a7:2b:3a:d2:ec:f4:a2:86:44:32:98: e3:32:6e:2f:4e:ad:c8:9b:85:22:db:b8:04:6e:e0: 95:70:00:f0:42:bd:b9:3a:d0:79:75:e4:bf:83:f9: 58:78:7e:82:31:72:fe:c4:d0:18:99:8b:9f:bb:50: 58:48:c6:a1:5d:ee:80:e5:84:62:3a:c2:8a:96:e1: 3f:4c:28:56:0e:72:b2:5f:83:ca:47:fb:5a:50:3d: 6b:4e:6c:7b:69:55:2d:68:d5:d4:a8:d4:dc:e0:19: 23:e8:92:87:53:e2:4a:fa:38:98:94:2a:c1:4f:5f: 91:e0:89:91:f9:69:7a:02:78:81:bc:ff:39:94:5b: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F9:68:E2:F4:5F:5A:03:BA:71:17:EC:E8:F0:B1:F4:3F:58:EB:10 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xvlo4vRfWgO6cRfs6PCx9D9Y6xA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.112.0/21 Signature Algorithm: sha256WithRSAEncryption 33:89:25:24:c4:d2:c1:5c:e2:9d:36:47:5f:2c:0a:54:0a:65: a6:63:ae:60:b6:c6:79:1e:0c:1d:46:7e:78:d9:ac:53:7f:0d: 3e:06:ef:9e:7e:07:40:c1:40:83:48:4a:af:0c:6e:14:af:b6: 6a:9e:62:73:09:8c:2c:fa:a0:5c:f0:f9:8f:1c:16:65:cd:c9: b0:85:4a:af:fa:07:50:7d:c7:a1:6a:d6:34:e9:fa:05:b4:d3: bf:4f:df:80:9b:f2:7d:e4:f7:23:64:c4:29:0c:e4:01:1d:4e: 42:70:84:42:b0:71:86:d6:27:af:fe:52:23:1c:35:82:d3:40: 0c:64:4e:6d:c7:18:8d:cb:23:8d:f5:5b:87:7c:54:98:d9:5e: c9:3c:c4:1b:c1:ed:37:6b:ca:a3:bf:fb:78:df:3e:f7:ca:6e: f7:2b:d7:ed:90:2e:32:f5:ac:38:54:d4:22:35:ad:dc:7e:82: 77:d6:d4:16:d4:57:71:36:d8:31:d1:72:11:fe:e1:91:91:a2: 48:c3:e8:55:ed:ce:25:ba:2e:77:1a:e8:84:42:6c:ef:02:36: e6:f4:0c:51:72:ca:3a:60:82:62:0e:50:41:d7:c6:43:1b:47: 98:c7:94:d2:0d:f5:a5:52:7a:28:4b:43:52:dd:d6:54:73:0f: 13:a8:e5:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVFRjk2OEUyRjQ1RjVB MDNCQTcxMTdFQ0U4RjBCMUY0M0Y1OEVCMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP8WHUUbEbAyKuBhj+9KgDsBTDW4AwYEsQCjxdI5aNwezdvde9 b1PTPoZNKjmLHE+fiSnNrgOfiFgs4LyCG+dLTcTe/l4c+0tjNYvILCiL8sK2PQjn 9TWPeU/AYIEc/oO+qOidn5rdAlwkhkiegvFxXZVtcbTGF3QtSoenKzrS7PSihkQy mOMybi9OrcibhSLbuARu4JVwAPBCvbk60Hl15L+D+Vh4foIxcv7E0BiZi5+7UFhI xqFd7oDlhGI6woqW4T9MKFYOcrJfg8pH+1pQPWtObHtpVS1o1dSo1NzgGSPokodT 4kr6OJiUKsFPX5HgiZH5aXoCeIG8/zmUWwh/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXvlo4vRfWgO6cRfs6PCx9D9Y6xAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1h2bG80dlJmV2dPNmNSZnM2 UEN4OUQ5WTZ4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 ZHAwDQYJKoZIhvcNAQELBQADggEBADOJJSTE0sFc4p02R18sClQKZaZjrmC2xnke DB1GfnjZrFN/DT4G755+B0DBQINISq8MbhSvtmqeYnMJjCz6oFzw+Y8cFmXNybCF Sq/6B1B9x6Fq1jTp+gW0079P34Cb8n3k9yNkxCkM5AEdTkJwhEKwcYbWJ6/+UiMc NYLTQAxkTm3HGI3LI431W4d8VJjZXsk8xBvB7TdryqO/+3jfPvfKbvcr1+2QLjL1 rDhU1CI1rdx+gnfW1BbUV3E22DHRchH+4ZGRokjD6FXtziW6Lnca6IRCbO8CNub0 DFFyyjpggmIOUEHXxkMbR5jHlNIN9aVSeihLQ1Ld1lRzDxOo5Tg= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:37 2025 by rpki-client