$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k4iJXp5H7Cbh09RirZ7idxNWljg.roa File: k4iJXp5H7Cbh09RirZ7idxNWljg.roa (raw, json) Hash identifier: njMJYJ0goyrnPsdwfpiAbCZkYo1BzbcCKXTOIkKaTak= Subject key identifier: 93:88:89:5E:9E:47:EC:26:E1:D3:D4:62:AD:9E:E2:77:13:56:96:38 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25EA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k4iJXp5H7Cbh09RirZ7idxNWljg.roa Signing time: Fri 22 Aug 2025 08:42:23 +0000 ROA not before: Fri 22 Aug 2025 08:42:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 49.159.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9706 (0x25ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9388895E9E47EC26E1D3D462AD9EE27713569638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:ca:12:be:91:61:d4:03:28:d6:41:2d:cb: 2b:ab:f4:c3:2b:74:df:15:87:b9:33:f2:92:15:3a: 68:85:47:f3:52:66:ad:13:b3:e6:30:05:40:6a:29: f5:77:e2:de:c6:2e:34:7a:c6:66:98:14:36:43:9b: 98:89:98:de:bf:3c:2c:43:94:44:8c:03:f4:82:46: 3c:23:0e:7a:04:34:e6:53:e7:a3:a8:c5:3b:a3:27: 15:bd:a5:2f:52:c3:e2:fb:12:5d:78:82:33:92:98: 5a:4f:90:0c:17:26:fb:36:fd:b4:4a:7f:33:b1:c0: 14:86:cd:4a:e4:75:64:d3:98:c7:22:f8:6c:a0:d9: 38:83:a6:0d:7a:69:8c:6c:67:83:df:cb:d0:68:c4: 73:61:e0:7e:b6:99:25:9d:3e:5a:a2:90:74:9a:e3: 37:fb:c1:32:a6:86:16:6f:b1:88:f5:ce:f7:4e:d2: 05:54:3f:25:c5:a0:b7:80:71:4d:2c:5c:c0:76:a7: f1:20:c5:be:d9:cd:42:78:ca:40:87:1c:8a:62:2b: e9:c2:73:51:de:61:b7:ef:2d:6b:07:de:ec:5c:69: 34:ef:97:b2:65:23:df:26:4d:8f:5f:28:85:09:8d: a7:ef:7f:d3:d3:6c:91:89:87:4e:5f:60:76:e3:b0: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:88:89:5E:9E:47:EC:26:E1:D3:D4:62:AD:9E:E2:77:13:56:96:38 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k4iJXp5H7Cbh09RirZ7idxNWljg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.72.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:96:c4:02:d7:6f:67:9a:60:86:1d:99:01:f2:fa:12:05:64: 51:12:ef:9a:3a:a9:d6:24:30:f4:69:40:ff:ad:fa:b3:19:80: 4a:7d:73:f1:24:9a:6e:c8:f5:e8:85:2a:1e:c3:da:b9:65:3e: a4:e5:36:ef:60:c9:fb:75:86:48:5b:e0:87:0f:f8:89:41:c0: 26:93:c2:cc:b1:f9:05:98:4a:7c:39:cc:33:f1:eb:c8:8b:ff: bd:89:ab:b3:aa:fb:15:28:29:e5:6c:9c:4b:ae:a5:64:c2:9e: cf:f9:52:42:3d:08:4e:79:a0:c9:51:35:1a:d7:ec:f9:8e:e3: 25:b8:f2:07:3d:39:65:00:c8:31:8a:8c:08:bb:b0:52:d2:9f: 33:5e:18:8d:cd:f8:bf:50:98:f4:a8:f6:d1:dd:fa:a2:5c:6a: 6a:51:4b:4d:49:b2:2a:d7:80:a6:25:e9:dd:90:14:0a:c1:94: 73:cb:03:35:31:b6:06:36:3e:3c:47:06:ae:1c:0b:b0:2a:93: 5e:78:62:c9:9f:0c:e3:9a:e6:ce:fd:bb:1c:81:33:5d:36:92: 8b:01:dc:98:3e:41:cc:02:47:7f:88:35:47:95:1c:dc:72:e3: 1e:a8:eb:30:c3:8d:58:07:07:be:79:a5:74:f1:14:2c:18:77: 62:ad:25:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkzODg4OTVFOUU0N0VD MjZFMUQzRDQ2MkFEOUVFMjc3MTM1Njk2MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtWcoSvpFh1AMo1kEtyyur9MMrdN8Vh7kz8pIVOmiFR/NSZq0T s+YwBUBqKfV34t7GLjR6xmaYFDZDm5iJmN6/PCxDlESMA/SCRjwjDnoENOZT56Oo xTujJxW9pS9Sw+L7El14gjOSmFpPkAwXJvs2/bRKfzOxwBSGzUrkdWTTmMci+Gyg 2TiDpg16aYxsZ4Pfy9BoxHNh4H62mSWdPlqikHSa4zf7wTKmhhZvsYj1zvdO0gVU PyXFoLeAcU0sXMB2p/Egxb7ZzUJ4ykCHHIpiK+nCc1HeYbfvLWsH3uxcaTTvl7Jl I98mTY9fKIUJjafvf9PTbJGJh05fYHbjsKiRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUk4iJXp5H7Cbh09RirZ7idxNWljgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2s0aUpYcDVIN0NiaDA5Umly WjdpZHhOV2xqZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n0gwDQYJKoZIhvcNAQELBQADggEBAGqWxALXb2eaYIYdmQHy+hIFZFES75o6qdYk MPRpQP+t+rMZgEp9c/Ekmm7I9eiFKh7D2rllPqTlNu9gyft1hkhb4IcP+IlBwCaT wsyx+QWYSnw5zDPx68iL/72Jq7Oq+xUoKeVsnEuupWTCns/5UkI9CE55oMlRNRrX 7PmO4yW48gc9OWUAyDGKjAi7sFLSnzNeGI3N+L9QmPSo9tHd+qJcampRS01JsirX gKYl6d2QFArBlHPLAzUxtgY2PjxHBq4cC7Aqk154YsmfDOOa5s79uxyBM102kosB 3Jg+QcwCR3+INUeVHNxy4x6o6zDDjVgHB755pXTxFCwYd2KtJVI= -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:24 2025 by rpki-client