$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_kIL5STQoW2zQdZwfJIgUMHyjJE.roa File: _kIL5STQoW2zQdZwfJIgUMHyjJE.roa (raw, json) Hash identifier: u0o+VsVysLWKQYcxaUo87/3WBp7wePqme8qxie0V7A0= Subject key identifier: FE:42:0B:E5:24:D0:A1:6D:B3:41:D6:70:7C:92:20:50:C1:F2:8C:91 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26B3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_kIL5STQoW2zQdZwfJIgUMHyjJE.roa Signing time: Fri 22 Aug 2025 08:43:10 +0000 ROA not before: Fri 22 Aug 2025 08:43:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 61.58.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9907 (0x26b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FE420BE524D0A16DB341D6707C922050C1F28C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:e0:0e:03:e8:29:8b:ca:aa:39:3a:ce:8d: e4:39:af:e9:25:1b:5e:5d:d3:74:ed:ee:95:0a:56: 29:c3:7a:ef:46:f4:e9:66:96:50:e4:16:a6:15:8a: d1:47:d1:bc:e5:3b:3f:26:4b:c1:7d:5e:b0:b5:e0: 37:77:25:54:7b:4d:4c:7b:61:c2:b1:7f:ba:73:be: 00:df:bb:77:d1:7b:f6:7e:82:eb:d8:2e:4b:b5:e7: ab:23:54:22:95:a2:05:28:7d:2c:0f:1d:75:f7:a2: dd:36:32:ef:a9:7c:ee:9f:94:86:8e:94:59:25:2b: 23:3e:11:fe:9e:07:13:42:c9:4b:c6:4e:e2:b3:e6: 29:13:3e:ed:48:7e:91:a7:dd:a7:07:6f:91:2d:ec: 92:dc:c5:01:ff:51:1b:8f:58:a6:b3:bf:bf:9c:9e: 47:ff:9e:e2:6e:61:b4:1c:84:d0:af:e8:93:cc:8a: 59:14:94:f8:a4:7c:e2:ac:bf:71:97:24:a7:fd:59: 48:67:19:45:2c:0f:ad:9b:c5:7e:7b:69:a7:a3:5f: 65:a7:79:38:93:7a:c4:18:89:9d:b9:83:ab:d6:ad: 2f:7b:5c:9e:11:bd:21:72:3f:2e:07:82:20:bd:2b: d3:62:a5:d9:17:fe:60:7e:10:64:56:3f:ce:5e:ff: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:42:0B:E5:24:D0:A1:6D:B3:41:D6:70:7C:92:20:50:C1:F2:8C:91 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_kIL5STQoW2zQdZwfJIgUMHyjJE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.120.0/22 Signature Algorithm: sha256WithRSAEncryption 30:92:51:db:e5:38:76:5b:b3:0e:7c:79:b2:89:8b:71:d0:b8: 8b:16:6a:3f:3b:c6:72:64:74:6c:ac:27:3d:c9:ac:b2:5c:28: ce:76:f0:08:cc:87:c8:02:e2:0b:9d:16:02:ce:b6:9c:7f:fa: b8:56:1e:44:f5:c9:ef:b3:c9:5d:df:e5:af:67:23:37:fa:e7: 49:6f:7d:f8:b9:15:25:5a:22:42:94:cb:80:31:c0:88:04:a2: b8:a9:8e:4c:46:e0:55:bb:6d:5e:f2:ab:73:74:0d:21:67:c5: 8c:44:a8:fe:a6:b6:29:b7:13:d5:60:9d:a1:89:15:60:a7:d1: 26:2e:3d:9a:1e:8f:d4:44:bf:2c:d7:67:67:90:59:c9:e9:e5: e4:51:6e:89:e3:e2:54:b5:35:42:36:f7:2d:94:a8:90:b0:c0: 31:2f:12:58:e3:3b:90:2f:67:ae:26:6c:eb:c3:63:bb:39:30: 07:3c:46:8b:e0:89:9b:ad:4b:d5:99:d6:22:03:f4:b2:b8:af: 80:79:22:35:d8:70:34:3f:13:a2:c6:8d:43:df:ca:ce:75:97: a7:67:32:53:1f:86:08:b9:bc:a7:4e:1c:73:3d:db:eb:f3:a9: fb:fa:8a:40:27:5e:4f:df:21:45:c8:e4:0b:04:2e:b3:2e:fe: 1b:bf:dd:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJrMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZFNDIwQkU1MjREMEEx NkRCMzQxRDY3MDdDOTIyMDUwQzFGMjhDOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8LOAOA+gpi8qqOTrOjeQ5r+klG15d03Tt7pUKVinDeu9G9Olm llDkFqYVitFH0bzlOz8mS8F9XrC14Dd3JVR7TUx7YcKxf7pzvgDfu3fRe/Z+guvY Lku156sjVCKVogUofSwPHXX3ot02Mu+pfO6flIaOlFklKyM+Ef6eBxNCyUvGTuKz 5ikTPu1IfpGn3acHb5Et7JLcxQH/URuPWKazv7+cnkf/nuJuYbQchNCv6JPMilkU lPikfOKsv3GXJKf9WUhnGUUsD62bxX57aaejX2WneTiTesQYiZ25g6vWrS97XJ4R vSFyPy4HgiC9K9NipdkX/mB+EGRWP85e/3UHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/kIL5STQoW2zQdZwfJIgUMHyjJEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL19rSUw1U1RRb1cyelFkWndm SklnVU1IeWpKRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 OngwDQYJKoZIhvcNAQELBQADggEBADCSUdvlOHZbsw58ebKJi3HQuIsWaj87xnJk dGysJz3JrLJcKM528AjMh8gC4gudFgLOtpx/+rhWHkT1ye+zyV3f5a9nIzf650lv ffi5FSVaIkKUy4AxwIgEoripjkxG4FW7bV7yq3N0DSFnxYxEqP6mtim3E9VgnaGJ FWCn0SYuPZoej9REvyzXZ2eQWcnp5eRRbonj4lS1NUI29y2UqJCwwDEvEljjO5Av Z64mbOvDY7s5MAc8RovgiZutS9WZ1iID9LK4r4B5IjXYcDQ/E6LGjUPfys51l6dn MlMfhgi5vKdOHHM92+vzqfv6ikAnXk/fIUXI5AsELrMu/hu/3ZY= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:42 2025 by rpki-client