$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kbBvA4GZxReH7UP6C0OpF2xo32A.roa File: kbBvA4GZxReH7UP6C0OpF2xo32A.roa (raw, json) Hash identifier: dTgTWLe5x6Yt9WqJrtJIT00yjK7j2stjeREcMSvllwM= Subject key identifier: 91:B0:6F:03:81:99:C5:17:87:ED:43:FA:0B:43:A9:17:6C:68:DF:60 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2745 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kbBvA4GZxReH7UP6C0OpF2xo32A.roa Signing time: Fri 22 Aug 2025 08:43:43 +0000 ROA not before: Fri 22 Aug 2025 08:43:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10053 (0x2745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=91B06F038199C51787ED43FA0B43A9176C68DF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:ac:46:50:f2:cb:db:04:92:0e:16:17:04: 00:89:25:9f:2c:41:a3:77:b7:3e:51:6d:49:a9:ba: 9e:68:fe:71:fe:13:38:3e:06:d4:87:45:be:e8:a5: 67:90:c5:af:da:01:87:ca:a0:94:68:18:eb:4a:e1: 85:43:12:e5:a1:e3:9b:41:fd:52:b5:52:ce:93:37: 93:e5:65:58:b2:26:26:c8:16:0e:94:dc:fb:a2:a7: cc:8b:f5:d8:31:f9:43:13:9c:f0:ca:13:33:d2:94: 82:a3:d2:09:4a:5b:5a:3d:5e:57:ed:01:ec:91:4b: 5f:73:07:c3:39:f8:17:de:34:e6:75:e8:11:d0:65: cc:e9:7c:7d:ad:6f:dc:4f:a1:59:b6:a1:8b:4e:02: 0f:d6:c7:bb:31:36:11:05:66:36:69:82:8b:19:f9: b5:f5:cc:01:c2:81:9b:f6:fe:77:3d:d1:21:e7:b8: ba:6b:a0:b9:08:94:66:4b:41:c7:40:2b:d5:8d:d2: 36:b5:6e:bd:fc:69:a6:c7:ac:b7:00:8a:f1:25:0f: a0:07:75:bd:fd:6b:bb:44:2c:5c:11:3b:45:5a:6c: e1:8a:98:29:31:df:5c:54:91:ad:b3:05:10:7e:bc: 06:e2:1d:ff:49:c5:0e:fd:4f:b6:94:43:49:bc:18: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:6F:03:81:99:C5:17:87:ED:43:FA:0B:43:A9:17:6C:68:DF:60 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kbBvA4GZxReH7UP6C0OpF2xo32A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.164.0/22 Signature Algorithm: sha256WithRSAEncryption 09:f8:b9:3f:61:35:ae:7f:a5:ff:62:7a:2a:0a:3a:e6:ad:52: 5b:38:60:b9:f2:02:50:c6:3a:4f:96:87:80:6a:6f:51:64:12: bb:0e:28:d1:4f:53:58:1c:3a:01:03:36:43:99:bb:0b:d3:b1: 1b:0b:33:61:0c:db:dd:22:03:4e:7b:70:f0:6c:3d:f1:11:58: 0f:6a:67:e4:a1:de:52:94:ab:5a:9b:8d:fa:2b:e8:f7:c8:04: 3d:90:65:f5:a7:48:95:48:1a:ed:e0:29:66:19:1f:cf:2a:7d: 24:d5:cc:3b:13:c0:c2:6b:62:cf:8c:1d:af:2e:57:4c:ce:3c: db:d1:f7:8f:52:11:7a:d7:0c:ef:e3:5c:01:ea:24:2c:d0:c4: 7f:23:57:a4:8d:1b:f7:07:60:45:2f:5a:93:72:73:49:9b:f9: 6f:84:6d:eb:3c:d3:67:99:71:2c:5a:20:9d:c3:5c:89:52:57: c6:02:c6:b1:22:ac:a0:1c:8d:9a:70:06:ad:7c:51:d0:1b:af: a5:c3:7a:40:cc:aa:93:49:d9:c4:12:7b:af:f0:6d:7f:f5:4f: 4f:e2:38:43:62:da:4c:bc:bf:f2:eb:21:b3:43:91:64:4f:df: 37:ac:60:25:69:d1:63:76:42:54:49:f9:91:09:0a:c5:98:03: 9a:de:f5:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkxQjA2RjAzODE5OUM1 MTc4N0VENDNGQTBCNDNBOTE3NkM2OERGNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUkqxGUPLL2wSSDhYXBACJJZ8sQaN3tz5RbUmpup5o/nH+Ezg+ BtSHRb7opWeQxa/aAYfKoJRoGOtK4YVDEuWh45tB/VK1Us6TN5PlZViyJibIFg6U 3Puip8yL9dgx+UMTnPDKEzPSlIKj0glKW1o9XlftAeyRS19zB8M5+BfeNOZ16BHQ ZczpfH2tb9xPoVm2oYtOAg/Wx7sxNhEFZjZpgosZ+bX1zAHCgZv2/nc90SHnuLpr oLkIlGZLQcdAK9WN0ja1br38aabHrLcAivElD6AHdb39a7tELFwRO0VabOGKmCkx 31xUka2zBRB+vAbiHf9JxQ79T7aUQ0m8GNKRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkbBvA4GZxReH7UP6C0OpF2xo32AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tiQnZBNEdaeFJlSDdVUDZD ME9wRjJ4bzMyQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2qQwDQYJKoZIhvcNAQELBQADggEBAAn4uT9hNa5/pf9ieioKOuatUls4YLnyAlDG Ok+Wh4Bqb1FkErsOKNFPU1gcOgEDNkOZuwvTsRsLM2EM290iA057cPBsPfERWA9q Z+Sh3lKUq1qbjfor6PfIBD2QZfWnSJVIGu3gKWYZH88qfSTVzDsTwMJrYs+MHa8u V0zOPNvR949SEXrXDO/jXAHqJCzQxH8jV6SNG/cHYEUvWpNyc0mb+W+Ebes802eZ cSxaIJ3DXIlSV8YCxrEirKAcjZpwBq18UdAbr6XDekDMqpNJ2cQSe6/wbX/1T0/i OENi2ky8v/LrIbNDkWRP3zesYCVp0WN2QlRJ+ZEJCsWYA5re9ec= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:35 2025 by rpki-client