$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hN3NBntyh48aE5Fq8tCxjkftijE.roa File: hN3NBntyh48aE5Fq8tCxjkftijE.roa (raw, json) Hash identifier: i3kF2GiacDybZMvGTcGDDVTdC0A3+2ukL/c2PFevcpA= Subject key identifier: 84:DD:CD:06:7B:72:87:8F:1A:13:91:6A:F2:D0:B1:8E:47:ED:8A:31 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2617 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hN3NBntyh48aE5Fq8tCxjkftijE.roa Signing time: Fri 22 Aug 2025 08:42:34 +0000 ROA not before: Fri 22 Aug 2025 08:42:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 123.0.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9751 (0x2617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=84DDCD067B72878F1A13916AF2D0B18E47ED8A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ee:7f:b1:4e:54:d5:a6:87:a7:8b:74:20:f3: 5d:3d:c0:a0:03:36:c1:47:b2:57:65:54:4b:42:55: 5b:b0:fe:b8:76:13:f3:94:e2:b8:05:89:a1:23:26: a8:e9:6e:93:42:b0:d9:4b:c8:39:fc:de:32:f9:f8: a7:23:69:31:f4:89:96:06:fa:19:2c:2b:83:71:72: cb:e1:c1:f8:76:17:39:0d:cf:da:57:51:3c:42:6a: ba:17:61:f0:b9:09:e3:ac:76:f4:75:86:98:1d:0b: 68:d7:ba:93:bc:96:1d:41:e0:14:67:30:7c:2b:ca: a8:bb:75:f8:cc:70:f1:a4:22:88:b9:6c:70:57:50: aa:0e:a0:dc:36:b4:cc:6b:70:e0:20:90:da:83:d7: b7:ad:c0:a1:75:c8:3e:05:e4:d5:b7:b5:71:a6:4f: 29:d1:8a:17:f2:01:b4:af:95:33:cb:b0:e7:ca:7c: 62:6c:de:c3:b1:20:db:61:25:c7:61:12:28:d7:c8: 1b:b3:f4:22:b4:1e:f7:4a:15:78:32:63:a5:fd:1a: d6:b7:d0:8d:14:73:dc:12:d9:64:db:5b:2b:4c:cd: c6:c3:4b:29:14:0f:fe:4c:87:9b:4d:a2:ae:ca:f0: f8:1c:20:7e:7f:e1:bc:be:7d:64:51:e2:db:5b:63: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DD:CD:06:7B:72:87:8F:1A:13:91:6A:F2:D0:B1:8E:47:ED:8A:31 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hN3NBntyh48aE5Fq8tCxjkftijE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.32.0/19 Signature Algorithm: sha256WithRSAEncryption 1a:6c:b3:98:5c:fc:73:72:6a:34:a2:b0:76:2a:fa:3e:ac:aa: 2a:b4:b2:fd:fd:bb:0e:00:f0:4a:16:29:37:e3:cc:42:5e:3e: e8:e8:b8:f9:bf:ef:31:f9:d1:67:e0:b6:26:03:15:6d:b3:c3: eb:23:d9:14:92:05:b2:80:0e:09:e9:83:a1:f2:89:91:3d:0a: e9:9f:d1:c6:16:1e:43:4f:db:18:05:09:32:e3:69:a8:64:88: 92:19:f1:2d:16:11:c5:e1:35:23:d9:1f:d9:6d:a0:cc:eb:2b: f2:e4:62:9e:fb:b0:52:53:e2:61:aa:79:12:b6:cd:60:fd:eb: 5a:0e:48:53:89:fa:8c:43:8d:3e:26:cf:aa:48:3d:64:b7:76: 7e:98:a8:86:36:0a:70:54:b8:15:42:7d:8d:f9:05:57:19:3d: ed:a7:cb:80:4f:c7:01:5a:3a:47:5c:9f:73:37:98:62:d2:4e: 87:40:87:51:b9:02:c5:38:4f:fc:fd:8a:53:a3:57:ba:cc:18: 95:a9:38:d9:05:a2:72:05:8c:15:1c:b5:4c:fa:0f:54:8f:dc: 48:ba:bd:80:0e:c9:62:ce:dc:98:52:46:71:23:b7:c5:7e:27: 32:29:7d:69:e8:04:3e:3f:09:55:ae:35:20:32:2b:41:e6:13: 2e:df:48:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg0RERDRDA2N0I3Mjg3 OEYxQTEzOTE2QUYyRDBCMThFNDdFRDhBMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD57n+xTlTVpoeni3Qg8109wKADNsFHsldlVEtCVVuw/rh2E/OU 4rgFiaEjJqjpbpNCsNlLyDn83jL5+KcjaTH0iZYG+hksK4Nxcsvhwfh2FzkNz9pX UTxCaroXYfC5CeOsdvR1hpgdC2jXupO8lh1B4BRnMHwryqi7dfjMcPGkIoi5bHBX UKoOoNw2tMxrcOAgkNqD17etwKF1yD4F5NW3tXGmTynRihfyAbSvlTPLsOfKfGJs 3sOxINthJcdhEijXyBuz9CK0HvdKFXgyY6X9Gta30I0Uc9wS2WTbWytMzcbDSykU D/5Mh5tNoq7K8PgcIH5/4by+fWRR4ttbY4dpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhN3NBntyh48aE5Fq8tCxjkftijEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hOM05CbnR5aDQ4YUU1RnE4 dEN4amtmdGlqRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 ACAwDQYJKoZIhvcNAQELBQADggEBABpss5hc/HNyajSisHYq+j6sqiq0sv39uw4A 8EoWKTfjzEJePujouPm/7zH50WfgtiYDFW2zw+sj2RSSBbKADgnpg6HyiZE9Cumf 0cYWHkNP2xgFCTLjaahkiJIZ8S0WEcXhNSPZH9ltoMzrK/LkYp77sFJT4mGqeRK2 zWD961oOSFOJ+oxDjT4mz6pIPWS3dn6YqIY2CnBUuBVCfY35BVcZPe2ny4BPxwFa Okdcn3M3mGLSTodAh1G5AsU4T/z9ilOjV7rMGJWpONkFonIFjBUctUz6D1SP3Ei6 vYAOyWLO3JhSRnEjt8V+JzIpfWnoBD4/CVWuNSAyK0HmEy7fSBY= -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:32 2025 by rpki-client