$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cTRf_Cku8CgSvUBKgAJYkGJYBe8.roa File: cTRf_Cku8CgSvUBKgAJYkGJYBe8.roa (raw, json) Hash identifier: nDszoiiK6gEDpjk5TVD1GDpyCGpbse3PJSx8KMly/VQ= Subject key identifier: 71:34:5F:FC:29:2E:F0:28:12:BD:40:4A:80:02:58:90:62:58:05:EF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 266A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cTRf_Cku8CgSvUBKgAJYkGJYBe8.roa Signing time: Fri 22 Aug 2025 08:42:54 +0000 ROA not before: Fri 22 Aug 2025 08:42:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 49.158.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9834 (0x266a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=71345FFC292EF02812BD404A80025890625805EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:1a:18:68:5b:19:d3:d2:1d:27:8a:af:44: c0:eb:da:67:f2:fc:76:a1:05:77:51:e1:38:fa:dc: 4b:67:21:90:8e:9f:a8:ed:26:fe:90:0e:e2:23:ff: e4:58:92:a7:65:7d:70:0d:ba:49:39:68:37:e1:f8: 47:0d:0a:4c:c0:10:42:ae:bd:e8:85:ed:49:c1:d9: 99:ab:ff:41:af:49:41:17:9c:23:ea:11:ae:ca:a1: f5:d5:68:a4:9e:7b:d8:9a:20:c0:be:02:17:52:8a: cd:37:5b:0e:92:d6:30:a0:f5:74:0a:b1:ad:47:93: 01:22:23:fe:f5:bf:42:01:20:ee:68:e6:20:93:0c: 7d:1d:0f:e6:e8:16:59:5a:87:54:a2:a6:d6:35:98: 5d:79:41:0b:ce:9b:0f:47:b4:0b:43:df:a5:05:af: ce:72:f6:c4:59:53:49:97:8f:da:bc:a2:ba:d7:92: 3b:48:6f:94:7f:c1:25:c6:63:63:f6:ae:24:6e:6f: 56:c7:64:f9:61:37:3a:3e:13:27:ad:30:ab:4e:9d: a7:4d:d4:f6:aa:89:7f:2e:64:c5:2a:c4:24:6e:98: 18:f6:19:df:94:5d:d3:d4:1c:1e:ca:1c:59:5f:63: d2:9e:2f:65:13:4f:e9:12:eb:ee:3b:a0:ce:cd:df: c7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:5F:FC:29:2E:F0:28:12:BD:40:4A:80:02:58:90:62:58:05:EF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cTRf_Cku8CgSvUBKgAJYkGJYBe8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.196.0/22 Signature Algorithm: sha256WithRSAEncryption 50:91:74:65:df:56:2b:64:87:15:03:19:02:67:a6:b9:a4:24: 91:c9:00:54:52:19:25:83:67:64:c5:e2:a4:9b:c8:7f:6d:09: cc:23:e3:a1:ad:5a:fc:67:c5:d2:cd:cb:bb:f7:05:3c:d8:b7: f1:0d:34:ac:8f:d3:b5:b4:b9:61:95:3d:d4:0d:94:c7:09:bb: 9d:76:0f:20:58:d5:88:a2:4b:45:79:e9:57:9a:ba:aa:2b:be: a6:f2:bc:e5:d7:0f:c4:63:c4:ef:e0:33:f3:d0:bf:aa:35:35: 57:a9:74:19:b7:70:8f:86:f7:ea:dc:d3:4b:56:95:78:2a:ba: 22:d3:3c:ca:3e:26:d8:82:21:a7:ea:4b:0f:34:20:49:5f:b2: 35:58:86:1f:cd:4b:82:e1:34:87:ff:58:06:c7:c3:05:25:d6: 5e:e0:33:b5:b6:16:6e:a2:33:77:b4:fb:01:5a:c5:17:d6:2c: 72:af:2b:85:b3:ba:e7:4d:62:07:e4:c8:f5:a0:7a:8b:db:8a: a6:ec:41:70:ae:0a:06:b5:1c:a5:61:b4:6e:d9:70:7f:1a:56: a2:d1:c2:dc:f7:e8:77:1a:1c:9e:8c:17:75:42:d9:27:f1:86: 16:db:9a:d1:e2:59:ec:04:ae:64:35:89:81:b8:f3:87:2f:12: 67:a6:3f:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcxMzQ1RkZDMjkyRUYw MjgxMkJENDA0QTgwMDI1ODkwNjI1ODA1RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWghoYaFsZ09IdJ4qvRMDr2mfy/HahBXdR4Tj63EtnIZCOn6jt Jv6QDuIj/+RYkqdlfXANukk5aDfh+EcNCkzAEEKuveiF7UnB2Zmr/0GvSUEXnCPq Ea7KofXVaKSee9iaIMC+AhdSis03Ww6S1jCg9XQKsa1HkwEiI/71v0IBIO5o5iCT DH0dD+boFllah1SiptY1mF15QQvOmw9HtAtD36UFr85y9sRZU0mXj9q8orrXkjtI b5R/wSXGY2P2riRub1bHZPlhNzo+EyetMKtOnadN1PaqiX8uZMUqxCRumBj2Gd+U XdPUHB7KHFlfY9KeL2UTT+kS6+47oM7N38eLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcTRf/Cku8CgSvUBKgAJYkGJYBe8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NUUmZfQ2t1OENnU3ZVQktn QUpZa0dKWUJlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nsQwDQYJKoZIhvcNAQELBQADggEBAFCRdGXfVitkhxUDGQJnprmkJJHJAFRSGSWD Z2TF4qSbyH9tCcwj46GtWvxnxdLNy7v3BTzYt/ENNKyP07W0uWGVPdQNlMcJu512 DyBY1YiiS0V56VeauqorvqbyvOXXD8RjxO/gM/PQv6o1NVepdBm3cI+G9+rc00tW lXgquiLTPMo+JtiCIafqSw80IElfsjVYhh/NS4LhNIf/WAbHwwUl1l7gM7W2Fm6i M3e0+wFaxRfWLHKvK4WzuudNYgfkyPWgeovbiqbsQXCuCga1HKVhtG7ZcH8aVqLR wtz36HcaHJ6MF3VC2SfxhhbbmtHiWewErmQ1iYG484cvEmemP6Q= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:46 2025 by rpki-client