$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c2KRJvKsWB5ocaDOR_Uu3jDqjQo.roa File: c2KRJvKsWB5ocaDOR_Uu3jDqjQo.roa (raw, json) Hash identifier: jHqzwF0jY29ueaxHazxyfsPQ31JxGjWFBJIICFQ47PI= Subject key identifier: 73:62:91:26:F2:AC:58:1E:68:71:A0:CE:47:F5:2E:DE:30:EA:8D:0A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 269B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c2KRJvKsWB5ocaDOR_Uu3jDqjQo.roa Signing time: Fri 22 Aug 2025 08:43:06 +0000 ROA not before: Fri 22 Aug 2025 08:43:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 211.76.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9883 (0x269b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=73629126F2AC581E6871A0CE47F52EDE30EA8D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:6c:ae:9a:ef:75:5d:1a:8a:45:21:a2:ed: 76:26:a4:9b:fd:53:f3:dd:bf:8c:91:72:0e:92:f7: 06:26:72:af:c8:15:ce:7e:e3:cb:3b:69:3c:84:fe: da:b5:7b:81:06:0b:fc:60:0d:8d:dd:35:6a:b0:af: 94:b8:16:a0:35:30:33:8a:73:87:46:4d:1f:41:ff: 3a:0d:50:2d:fb:fd:00:6d:cf:20:4a:fe:b6:ab:e0: c5:d8:19:c5:59:77:31:06:66:2b:69:50:9d:6d:68: cd:ae:ec:ad:e2:c1:68:78:c5:91:b2:b4:d6:30:94: 02:40:04:4e:22:5b:2d:96:11:bd:ef:65:f5:eb:8e: b5:b5:b8:69:e7:4a:21:4c:a0:38:26:f3:96:73:5a: 54:a1:79:0a:aa:11:8d:eb:f0:ad:9b:d4:3e:56:d6: d3:c1:1b:91:11:0e:72:58:93:1d:f2:3f:47:98:d1: 1a:55:a9:f8:80:5a:3f:45:d9:6c:31:84:09:d8:c9: da:7c:38:54:2c:3a:df:7d:ed:1e:04:83:10:8c:36: e3:38:b3:f2:42:56:5a:70:db:6d:ff:da:56:d8:80: 7d:1d:2a:35:78:69:36:10:80:42:86:ad:07:70:63: e9:7f:88:25:99:d8:20:75:30:e2:ed:4d:66:58:24: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:62:91:26:F2:AC:58:1E:68:71:A0:CE:47:F5:2E:DE:30:EA:8D:0A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c2KRJvKsWB5ocaDOR_Uu3jDqjQo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.44.0/23 Signature Algorithm: sha256WithRSAEncryption 12:ca:78:6d:ba:04:34:ef:83:a1:52:cb:a7:16:e7:17:88:66: af:9c:6d:96:ad:e1:c8:e7:65:db:b3:2a:c6:c7:50:cb:73:a8: 68:94:e4:e6:86:d7:44:ac:77:57:57:38:fa:cf:89:58:3b:de: 33:a7:56:eb:9e:40:09:40:9f:a8:85:6f:78:11:65:7b:76:3c: 16:e5:41:52:e3:64:b5:55:22:fa:e7:b5:8e:34:d7:f3:2f:82: cc:73:aa:8a:24:00:2e:ec:4a:71:bd:5e:52:45:e3:4f:c8:4a: b1:ef:ba:45:4d:49:6d:94:13:34:90:29:ab:fe:05:36:b7:d5: 7e:ac:32:8b:cd:73:c5:17:45:a1:65:66:f5:f4:ce:0e:2a:9f: df:98:41:82:ad:05:c4:5c:c8:69:2b:9a:8c:a6:57:09:d9:4e: 3e:94:e5:eb:25:07:f1:a7:27:c1:c9:e5:5c:23:f1:bb:7c:f8: 57:ce:6d:0a:fa:60:44:57:9d:c8:2f:57:91:d6:48:13:16:78: 3b:f7:53:0e:b5:49:17:a3:98:1f:58:62:62:0c:be:1d:48:ce: 20:e2:e6:3f:d7:27:74:61:ea:ba:13:4c:0a:b9:84:2f:d9:fc: 22:25:28:78:32:5e:88:23:12:88:90:2b:bb:fb:32:dd:53:ee: c5:94:63:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDczNjI5MTI2RjJBQzU4 MUU2ODcxQTBDRTQ3RjUyRURFMzBFQThEMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBNGyumu91XRqKRSGi7XYmpJv9U/Pdv4yRcg6S9wYmcq/IFc5+ 48s7aTyE/tq1e4EGC/xgDY3dNWqwr5S4FqA1MDOKc4dGTR9B/zoNUC37/QBtzyBK /rar4MXYGcVZdzEGZitpUJ1taM2u7K3iwWh4xZGytNYwlAJABE4iWy2WEb3vZfXr jrW1uGnnSiFMoDgm85ZzWlSheQqqEY3r8K2b1D5W1tPBG5ERDnJYkx3yP0eY0RpV qfiAWj9F2WwxhAnYydp8OFQsOt997R4EgxCMNuM4s/JCVlpw223/2lbYgH0dKjV4 aTYQgEKGrQdwY+l/iCWZ2CB1MOLtTWZYJPq9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUc2KRJvKsWB5ocaDOR/Uu3jDqjQowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2MyS1JKdktzV0I1b2NhRE9S X1V1M2pEcWpRby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TCwwDQYJKoZIhvcNAQELBQADggEBABLKeG26BDTvg6FSy6cW5xeIZq+cbZat4cjn ZduzKsbHUMtzqGiU5OaG10Ssd1dXOPrPiVg73jOnVuueQAlAn6iFb3gRZXt2PBbl QVLjZLVVIvrntY401/MvgsxzqookAC7sSnG9XlJF40/ISrHvukVNSW2UEzSQKav+ BTa31X6sMovNc8UXRaFlZvX0zg4qn9+YQYKtBcRcyGkrmoymVwnZTj6U5eslB/Gn J8HJ5Vwj8bt8+FfObQr6YERXncgvV5HWSBMWeDv3Uw61SRejmB9YYmIMvh1IziDi 5j/XJ3Rh6roTTAq5hC/Z/CIlKHgyXogjEoiQK7v7Mt1T7sWUY9U= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:44 2025 by rpki-client