$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XwtjOZHYkfhHXyCsLBtKCbmc364.roa File: XwtjOZHYkfhHXyCsLBtKCbmc364.roa (raw, json) Hash identifier: sNg1uHikq+W2VEF5Ld2RHQOzBDeif63V+cvmJxlvFZ0= Subject key identifier: 5F:0B:63:39:91:D8:91:F8:47:5F:20:AC:2C:1B:4A:09:B9:9C:DF:AE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26D9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XwtjOZHYkfhHXyCsLBtKCbmc364.roa Signing time: Fri 22 Aug 2025 08:43:19 +0000 ROA not before: Fri 22 Aug 2025 08:43:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 114.198.176.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9945 (0x26d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F0B633991D891F8475F20AC2C1B4A09B99CDFAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:b7:70:2b:69:1d:f5:cc:ea:32:3e:b3:26: c3:2d:05:b9:f5:41:45:e5:56:0c:70:d9:2e:5c:5a: 96:7e:36:c4:43:da:91:77:1c:88:43:26:b0:36:db: 33:1b:54:b0:a7:f6:6b:e0:e3:6a:e2:65:74:89:08: d8:a3:1a:c2:ae:0c:0a:72:ad:40:51:ad:6c:f1:d3: 1b:ee:17:8a:e2:92:23:e9:09:a1:31:76:4f:d7:b3: ee:ad:db:d2:58:26:dc:bd:09:5a:49:ed:22:3c:3e: f5:14:0d:92:70:1e:7f:f1:67:58:92:4d:44:f8:f9: 6b:86:f7:14:16:8b:8b:38:8d:29:21:16:53:60:db: 3f:73:6b:df:be:30:d7:13:9a:ed:e0:80:e5:55:df: 02:a8:6a:83:1d:ec:b9:49:b4:24:49:21:68:b0:9c: 64:1e:f1:2e:4d:8d:af:3a:61:ab:33:f1:40:81:5e: 6a:8f:64:18:d7:cb:d7:7f:fa:b0:74:d0:92:74:c1: 36:f6:6e:4d:f8:76:7b:29:dc:f9:1a:77:23:cc:b3: 61:0e:b6:2e:f7:c9:e1:91:1f:fb:02:89:24:06:8c: f0:0a:f4:a8:4a:dc:94:6b:ff:67:67:43:d3:45:99: 91:b5:dd:1a:21:6c:b3:7f:59:c7:ed:06:4b:d3:cd: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0B:63:39:91:D8:91:F8:47:5F:20:AC:2C:1B:4A:09:B9:9C:DF:AE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XwtjOZHYkfhHXyCsLBtKCbmc364.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.176.0/20 Signature Algorithm: sha256WithRSAEncryption 59:ae:dc:e4:fd:9f:5e:e6:0f:65:a9:f3:55:e4:21:9e:6f:e7: b8:0e:21:0a:1a:2c:38:e9:61:90:f8:14:2e:57:66:64:0c:bc: 1b:14:09:19:55:06:b6:fd:34:df:95:d4:62:4b:10:df:78:5d: ae:d8:56:73:b2:53:0b:54:b7:95:4a:12:39:93:77:d3:65:71: f3:88:6a:3d:7f:a2:d2:0c:f2:7e:cf:46:84:b7:b1:b0:69:41: b9:cd:21:40:d7:e6:d0:e5:73:e1:83:25:7e:17:c6:96:fd:6c: 26:f3:7e:18:be:b5:a8:c8:10:6d:d2:54:09:aa:a0:1d:db:3f: 37:3a:32:bd:8c:f1:96:52:ae:99:4d:15:03:25:0a:b7:77:aa: 0b:69:73:56:4f:b3:e4:bb:80:f7:ad:50:0a:59:30:0b:bb:8e: 56:84:85:73:65:ec:7a:9f:f6:f1:3c:83:41:aa:36:e4:5f:e4: 5f:8c:c1:6c:56:7a:7b:db:3f:85:62:45:a1:f6:d6:b5:84:cb: e2:35:10:fc:47:a8:99:8b:cb:2d:4a:fa:0a:3a:63:84:3a:f1: 99:57:ec:ec:c9:cb:b7:c1:01:d2:d6:01:a9:ff:c3:cc:62:08: fb:8d:0e:e4:3d:e7:e7:c3:29:98:27:9d:76:9f:3d:97:4c:f9: 50:3c:da:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJtkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGMEI2MzM5OTFEODkx Rjg0NzVGMjBBQzJDMUI0QTA5Qjk5Q0RGQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0RLdwK2kd9czqMj6zJsMtBbn1QUXlVgxw2S5cWpZ+NsRD2pF3 HIhDJrA22zMbVLCn9mvg42riZXSJCNijGsKuDApyrUBRrWzx0xvuF4rikiPpCaEx dk/Xs+6t29JYJty9CVpJ7SI8PvUUDZJwHn/xZ1iSTUT4+WuG9xQWi4s4jSkhFlNg 2z9za9++MNcTmu3ggOVV3wKoaoMd7LlJtCRJIWiwnGQe8S5Nja86Yasz8UCBXmqP ZBjXy9d/+rB00JJ0wTb2bk34dnsp3PkadyPMs2EOti73yeGRH/sCiSQGjPAK9KhK 3JRr/2dnQ9NFmZG13RohbLN/WcftBkvTzW1jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXwtjOZHYkfhHXyCsLBtKCbmc364wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1h3dGpPWkhZa2ZoSFh5Q3NM QnRLQ2JtYzM2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xrAwDQYJKoZIhvcNAQELBQADggEBAFmu3OT9n17mD2Wp81XkIZ5v57gOIQoaLDjp YZD4FC5XZmQMvBsUCRlVBrb9NN+V1GJLEN94Xa7YVnOyUwtUt5VKEjmTd9NlcfOI aj1/otIM8n7PRoS3sbBpQbnNIUDX5tDlc+GDJX4Xxpb9bCbzfhi+tajIEG3SVAmq oB3bPzc6Mr2M8ZZSrplNFQMlCrd3qgtpc1ZPs+S7gPetUApZMAu7jlaEhXNl7Hqf 9vE8g0GqNuRf5F+MwWxWenvbP4ViRaH21rWEy+I1EPxHqJmLyy1K+go6Y4Q68ZlX 7OzJy7fBAdLWAan/w8xiCPuNDuQ95+fDKZgnnXafPZdM+VA82ig= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:33 2025 by rpki-client