$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa File: fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa (raw, json) Hash identifier: BtzqWuxdrCv09e+WdVE+AlYHLXIj5etXloWAZ1obsMY= Subject key identifier: 7C:7D:53:8E:3E:85:BB:CD:D3:99:4A:D5:AA:C2:BD:70:86:12:E5:A9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26C3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa Signing time: Fri 22 Aug 2025 08:43:13 +0000 ROA not before: Fri 22 Aug 2025 08:43:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 114.198.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9923 (0x26c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7C7D538E3E85BBCDD3994AD5AAC2BD708612E5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2c:96:ec:89:2e:87:63:af:fa:d7:7b:c9:b6: 3b:f6:b6:53:82:41:d4:b3:c9:68:59:e4:c1:fb:de: 82:51:34:c7:09:d4:fd:24:41:a3:50:f2:7b:4a:fb: 73:b1:0e:14:b6:4c:3f:9f:2b:51:da:16:ce:27:1e: 63:ab:ec:83:ce:98:a4:67:ce:a3:dc:bd:12:c8:ec: 79:a6:5e:99:f5:23:ae:c7:28:e9:0f:84:8b:2b:81: d6:d4:03:04:f8:67:69:bb:40:c2:c8:c6:a1:4f:63: ad:ce:46:16:7f:e0:9f:31:c9:8c:f3:68:3e:29:9a: a2:27:b1:95:eb:88:6f:2f:8b:c1:bf:24:63:8e:72: 1e:7d:a5:e6:23:6c:4a:4e:86:5d:af:af:17:aa:63: 33:58:de:6c:9f:47:a9:d6:49:cf:03:79:c4:62:f9: b8:c8:a0:b7:90:be:89:aa:55:67:01:be:e4:62:97: 0a:27:6e:1d:77:1d:48:1e:16:73:8c:38:c5:09:0c: 22:3e:24:da:29:ee:e5:e5:f5:99:fe:54:49:14:d9: 90:21:a1:d1:f3:5c:db:1b:ea:34:80:b2:1d:ec:a1: 75:51:0b:90:07:9b:1a:b2:1a:76:b9:49:b1:33:6b: 81:d2:c8:f8:68:19:c2:e1:ce:13:96:c5:84:d4:5d: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7D:53:8E:3E:85:BB:CD:D3:99:4A:D5:AA:C2:BD:70:86:12:E5:A9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fH1Tjj6Fu83TmUrVqsK9cIYS5ak.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.176.0/20 Signature Algorithm: sha256WithRSAEncryption 15:0d:15:0b:8d:48:7c:37:84:be:a9:a3:ba:25:52:ce:66:9d: d6:5d:0e:13:fc:ce:a3:8c:ea:82:0a:92:8e:0b:98:56:07:1d: 35:8c:f3:00:de:2f:3a:f7:64:af:b0:ac:4e:c8:6c:b4:9b:32: 9c:7a:78:11:c5:1f:2f:c1:17:b3:7b:0f:a4:a6:81:6c:d0:96: d3:45:bd:4e:ef:58:90:75:54:62:9c:95:5b:2c:f7:ef:34:fe: fb:80:47:be:24:29:53:57:6f:3d:e1:03:d9:7d:a9:7d:b8:38: e5:24:2a:6a:81:f8:47:fb:0b:8b:21:4c:b9:ec:2a:a5:23:d4: 47:9d:19:24:87:29:58:16:a4:38:35:ff:77:4f:36:79:f5:79: 88:51:0d:97:0a:af:6d:97:9a:b7:6e:22:ad:b0:ff:66:74:a9: 54:1a:d4:ed:50:7e:7c:bb:9f:2a:fb:24:4f:06:65:4f:e6:8f: fe:ff:ff:37:8e:82:53:2a:2f:87:f4:a8:67:aa:93:25:10:79: e3:ad:f7:90:b5:b4:b2:a8:b0:5d:23:3b:bc:94:95:10:68:67: 8e:62:f2:5e:71:0c:24:8a:98:e7:8c:dd:0c:06:6a:21:4e:86: b8:32:85:7d:fb:fa:ae:73:6b:2f:ee:f4:f2:65:e7:0d:3f:91: 2d:ca:fd:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDN0Q1MzhFM0U4NUJC Q0REMzk5NEFENUFBQzJCRDcwODYxMkU1QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4LJbsiS6HY6/613vJtjv2tlOCQdSzyWhZ5MH73oJRNMcJ1P0k QaNQ8ntK+3OxDhS2TD+fK1HaFs4nHmOr7IPOmKRnzqPcvRLI7HmmXpn1I67HKOkP hIsrgdbUAwT4Z2m7QMLIxqFPY63ORhZ/4J8xyYzzaD4pmqInsZXriG8vi8G/JGOO ch59peYjbEpOhl2vrxeqYzNY3myfR6nWSc8DecRi+bjIoLeQvomqVWcBvuRilwon bh13HUgeFnOMOMUJDCI+JNop7uXl9Zn+VEkU2ZAhodHzXNsb6jSAsh3soXVRC5AH mxqyGna5SbEza4HSyPhoGcLhzhOWxYTUXQTrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfH1Tjj6Fu83TmUrVqsK9cIYS5akwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZIMVRqajZGdTgzVG1VclZx c0s5Y0lZUzVhay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xrAwDQYJKoZIhvcNAQELBQADggEBABUNFQuNSHw3hL6po7olUs5mndZdDhP8zqOM 6oIKko4LmFYHHTWM8wDeLzr3ZK+wrE7IbLSbMpx6eBHFHy/BF7N7D6SmgWzQltNF vU7vWJB1VGKclVss9+80/vuAR74kKVNXbz3hA9l9qX24OOUkKmqB+Ef7C4shTLns KqUj1EedGSSHKVgWpDg1/3dPNnn1eYhRDZcKr22XmrduIq2w/2Z0qVQa1O1Qfny7 nyr7JE8GZU/mj/7//zeOglMqL4f0qGeqkyUQeeOt95C1tLKosF0jO7yUlRBoZ45i 8l5xDCSKmOeM3QwGaiFOhrgyhX37+q5zay/u9PJl5w0/kS3K/R0= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:35 2025 by rpki-client