$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZHB4XvC_k_WCP2PBIO_VVBw1fW8.roa File: ZHB4XvC_k_WCP2PBIO_VVBw1fW8.roa (raw, json) Hash identifier: S394pAjnNLl+R60HSpSCeDXem7wTa5QJiuVnqi6QvAg= Subject key identifier: 64:70:78:5E:F0:BF:93:F5:82:3F:63:C1:20:EF:D5:54:1C:35:7D:6F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26FA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZHB4XvC_k_WCP2PBIO_VVBw1fW8.roa Signing time: Fri 22 Aug 2025 08:43:26 +0000 ROA not before: Fri 22 Aug 2025 08:43:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4662 IP address blocks: 122.100.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9978 (0x26fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6470785EF0BF93F5823F63C120EFD5541C357D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:5f:b7:23:a3:b9:1e:ad:1f:54:38:df:d9: 3f:37:94:6d:19:88:d6:1f:44:8a:56:60:f2:41:0f: ea:93:13:af:dd:e0:54:87:fe:fa:b6:1a:e9:a7:36: 29:f3:05:31:ad:ea:a1:92:c2:04:bb:f1:0f:54:12: 35:0b:14:60:14:59:ff:29:2d:5b:e4:40:89:f1:ab: f7:f1:05:2e:7e:20:7b:15:32:d2:1b:08:77:4b:f3: f4:ca:5c:1e:80:aa:d5:d6:cd:d5:e7:b4:f6:35:3a: aa:dc:fa:8d:74:34:a8:c4:07:f7:57:11:d1:b4:76: 0b:c6:c4:68:58:b5:9f:4e:1d:3b:9c:99:a3:cb:fe: d8:fb:f4:36:f5:06:34:da:45:a0:d2:89:3e:08:3c: e4:24:2b:c8:fd:f4:42:d3:fe:4a:e4:7e:d4:db:fc: f2:5a:b6:23:92:df:8e:d3:54:0c:c5:21:12:90:e2: c7:56:63:1d:a6:1f:d9:33:43:c4:20:01:9d:20:4b: 3f:4e:47:a7:eb:5e:85:46:74:22:ca:17:fc:73:22: 48:0f:f9:bf:0e:07:7e:d5:69:2f:0c:2f:6c:e9:1d: 1e:93:a5:8b:8a:7b:88:b4:10:04:43:b6:4e:39:5b: 28:0c:6c:47:00:4e:56:cf:c3:d5:eb:9b:b2:5e:2f: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:78:5E:F0:BF:93:F5:82:3F:63:C1:20:EF:D5:54:1C:35:7D:6F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZHB4XvC_k_WCP2PBIO_VVBw1fW8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3e:8e:7e:81:1a:ab:13:db:66:af:59:56:15:72:4a:c2:7d:21: b3:2f:90:79:2d:15:de:82:d8:04:d5:df:b3:6f:e0:4f:a4:5a: 24:87:20:9b:fa:78:51:76:1f:55:a1:b5:f5:70:73:d7:65:b0: 48:2f:f9:eb:28:ca:de:f2:6a:65:9a:39:a4:0b:96:a0:9a:42: 7a:0f:fe:88:dd:00:2e:e8:26:9e:b4:6e:3c:a7:de:cd:10:84: 4a:cc:aa:24:1f:6c:87:30:c8:39:89:31:dd:a6:1a:fa:7d:da: 1a:da:ab:eb:e7:f5:10:75:22:8f:cc:36:68:6b:90:f1:39:fc: 55:40:7c:3d:20:fd:e3:64:2a:e7:d7:8b:6c:37:6e:b3:68:5b: f6:28:b0:b9:32:e4:0d:1a:e8:20:1a:04:33:32:8c:2d:7c:63: 47:84:2f:0b:4e:0c:ef:92:0b:10:25:e4:8d:50:b1:a2:fb:5a: f5:90:73:2b:ad:03:c1:ac:54:f5:cb:67:48:01:c2:66:3f:05: 7e:de:a0:b7:8d:0d:f9:81:e1:f2:24:51:cf:7e:be:5f:e4:ba: 7d:71:98:04:84:68:99:27:4f:1c:e4:93:db:9c:ce:30:b7:ba: 5c:06:48:39:8a:d4:32:c6:ae:87:a2:84:7a:81:18:39:21:14: db:86:aa:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY0NzA3ODVFRjBCRjkz RjU4MjNGNjNDMTIwRUZENTU0MUMzNTdENkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+X1+3I6O5Hq0fVDjf2T83lG0ZiNYfRIpWYPJBD+qTE6/d4FSH /vq2GumnNinzBTGt6qGSwgS78Q9UEjULFGAUWf8pLVvkQInxq/fxBS5+IHsVMtIb CHdL8/TKXB6AqtXWzdXntPY1Oqrc+o10NKjEB/dXEdG0dgvGxGhYtZ9OHTucmaPL /tj79Db1BjTaRaDSiT4IPOQkK8j99ELT/krkftTb/PJatiOS347TVAzFIRKQ4sdW Yx2mH9kzQ8QgAZ0gSz9OR6frXoVGdCLKF/xzIkgP+b8OB37VaS8ML2zpHR6TpYuK e4i0EARDtk45WygMbEcATlbPw9Xrm7JeLzN3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZHB4XvC/k/WCP2PBIO/VVBw1fW8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1pIQjRYdkNfa19XQ1AyUEJJ T19WVkJ3MWZXOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 ZEAwDQYJKoZIhvcNAQELBQADggEBAD6OfoEaqxPbZq9ZVhVySsJ9IbMvkHktFd6C 2ATV37Nv4E+kWiSHIJv6eFF2H1WhtfVwc9dlsEgv+esoyt7yamWaOaQLlqCaQnoP /ojdAC7oJp60bjyn3s0QhErMqiQfbIcwyDmJMd2mGvp92hraq+vn9RB1Io/MNmhr kPE5/FVAfD0g/eNkKufXi2w3brNoW/YosLky5A0a6CAaBDMyjC18Y0eELwtODO+S CxAl5I1QsaL7WvWQcyutA8GsVPXLZ0gBwmY/BX7eoLeNDfmB4fIkUc9+vl/kun1x mASEaJknTxzkk9uczjC3ulwGSDmK1DLGroeihHqBGDkhFNuGqr8= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:50 2025 by rpki-client