$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hA-XI7Je5LTJJNbYJ0fzQxCSYcQ.roa File: hA-XI7Je5LTJJNbYJ0fzQxCSYcQ.roa (raw, json) Hash identifier: f0UBN7lulGyTcl56UjXX6TH7OAyTMfZoSwMwlZotK9E= Subject key identifier: 84:0F:97:23:B2:5E:E4:B4:C9:24:D6:D8:27:47:F3:43:10:92:61:C4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 271C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hA-XI7Je5LTJJNbYJ0fzQxCSYcQ.roa Signing time: Fri 22 Aug 2025 08:43:34 +0000 ROA not before: Fri 22 Aug 2025 08:43:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 49.158.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10012 (0x271c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=840F9723B25EE4B4C924D6D82747F343109261C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:35:76:d0:66:d7:f6:a9:97:b3:60:5c:26: fc:b0:bb:04:93:6c:49:8a:f0:14:d8:4d:8f:b0:e4: 6b:d6:be:2b:8a:48:c9:95:5f:8e:0b:53:8e:63:4d: 63:c4:f4:35:c3:97:5e:86:fe:2c:bd:59:a0:d4:ee: 8c:e9:9f:65:6d:52:21:75:ff:2e:89:b0:83:2b:ba: a4:74:cf:ac:73:2e:79:1e:f1:26:d1:65:36:ba:91: ef:41:ed:5d:bb:aa:12:f8:c2:dd:d9:a9:b4:b3:84: 41:73:a6:c2:1a:d5:87:49:ab:53:a9:64:ea:e0:3a: bd:e0:91:a7:ad:c0:32:80:b8:95:41:00:8a:05:59: a1:21:2f:d5:60:ec:22:a6:e9:96:d1:2e:53:28:52: 8d:32:90:e2:0e:28:69:80:8c:5d:5b:84:57:f8:d6: 05:86:1d:96:d2:58:19:ee:14:74:68:14:bf:f0:e1: d7:12:b8:6f:a3:c4:77:36:6b:3a:e5:c9:30:41:9b: 08:83:54:49:d6:b1:db:eb:de:e9:44:3c:ef:7d:d8: 62:10:22:27:5d:10:af:40:42:8d:62:f7:20:28:e2: 25:8b:90:71:f1:8d:a6:99:ef:7a:98:ec:dc:14:54: fb:2a:20:22:1a:d9:ff:d7:39:46:28:2a:5a:d5:59: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0F:97:23:B2:5E:E4:B4:C9:24:D6:D8:27:47:F3:43:10:92:61:C4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hA-XI7Je5LTJJNbYJ0fzQxCSYcQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.128.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:01:a2:f9:d5:41:d8:83:03:8a:4e:0f:5a:2e:75:19:d3:ea: f5:61:8a:9b:9d:ea:a9:6e:17:28:a4:c2:21:3c:dd:dd:27:da: a6:65:a9:a4:0d:6d:65:bd:f8:b3:9f:2e:16:50:87:e0:69:01: 61:5c:5e:25:6e:82:1b:43:bf:49:74:57:64:85:0f:3d:d2:01: 33:58:b3:da:4f:ed:91:4b:04:48:cb:89:c2:40:40:5c:9b:78: 16:54:da:13:23:3d:f1:61:88:b8:f3:60:15:fa:33:ea:c8:22: eb:41:6f:a2:00:50:e3:f5:86:f8:46:94:c0:fa:1c:e5:c2:d2: ce:49:aa:87:09:66:4e:d2:29:b5:b7:6b:6a:cf:5a:d0:8a:8b: 7c:8a:18:35:c8:fe:fb:bb:25:11:78:92:73:df:6a:60:cb:c2: 94:b7:32:16:30:c2:c8:1e:32:64:bb:94:8a:c3:c5:f6:c8:d5: cc:82:08:fb:78:90:3c:83:de:11:e4:3e:4f:92:b8:a4:a8:22: c7:f0:ca:6f:8d:ac:dc:54:84:2b:96:4b:06:f3:1b:9e:36:cb: c2:e0:91:cc:32:75:2a:4a:fc:bf:87:fe:12:55:39:31:52:d6: 7b:a1:7a:f1:4a:69:70:f3:b5:83:79:cb:59:4f:9d:35:2d:92: 37:84:f0:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg0MEY5NzIzQjI1RUU0 QjRDOTI0RDZEODI3NDdGMzQzMTA5MjYxQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcSzV20GbX9qmXs2BcJvywuwSTbEmK8BTYTY+w5GvWviuKSMmV X44LU45jTWPE9DXDl16G/iy9WaDU7ozpn2VtUiF1/y6JsIMruqR0z6xzLnke8SbR ZTa6ke9B7V27qhL4wt3ZqbSzhEFzpsIa1YdJq1OpZOrgOr3gkaetwDKAuJVBAIoF WaEhL9Vg7CKm6ZbRLlMoUo0ykOIOKGmAjF1bhFf41gWGHZbSWBnuFHRoFL/w4dcS uG+jxHc2azrlyTBBmwiDVEnWsdvr3ulEPO992GIQIiddEK9AQo1i9yAo4iWLkHHx jaaZ73qY7NwUVPsqICIa2f/XOUYoKlrVWTrbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhA+XI7Je5LTJJNbYJ0fzQxCSYcQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hBLVhJN0plNUxUSkpOYllK MGZ6UXhDU1ljUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx noAwDQYJKoZIhvcNAQELBQADggEBAE8BovnVQdiDA4pOD1oudRnT6vVhipud6qlu FyikwiE83d0n2qZlqaQNbWW9+LOfLhZQh+BpAWFcXiVughtDv0l0V2SFDz3SATNY s9pP7ZFLBEjLicJAQFybeBZU2hMjPfFhiLjzYBX6M+rIIutBb6IAUOP1hvhGlMD6 HOXC0s5JqocJZk7SKbW3a2rPWtCKi3yKGDXI/vu7JRF4knPfamDLwpS3MhYwwsge MmS7lIrDxfbI1cyCCPt4kDyD3hHkPk+SuKSoIsfwym+NrNxUhCuWSwbzG542y8Lg kcwydSpK/L+H/hJVOTFS1nuhevFKaXDztYN5y1lPnTUtkjeE8Hc= -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:34 2025 by rpki-client