$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mOVXLYOBdMspql-lNPpxs3DwTDA.roa File: mOVXLYOBdMspql-lNPpxs3DwTDA.roa (raw, json) Hash identifier: 4yu/kTO8gZaYi7y06pJNrgwcb1B7YPn+Z/oDVwLMuXw= Subject key identifier: 98:E5:57:2D:83:81:74:CB:29:AA:5F:A5:34:FA:71:B3:70:F0:4C:30 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2689 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mOVXLYOBdMspql-lNPpxs3DwTDA.roa Signing time: Fri 22 Aug 2025 08:43:01 +0000 ROA not before: Fri 22 Aug 2025 08:43:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.159.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9865 (0x2689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=98E5572D838174CB29AA5FA534FA71B370F04C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:4c:a8:55:75:71:54:91:0a:a9:3d:14:10: 6e:1c:ce:06:80:d4:c1:ed:39:c5:61:ac:46:f6:45: 19:b1:ff:2b:81:96:39:d6:b6:4f:2c:94:42:8c:a7: 95:c2:c3:90:70:af:11:73:1a:f0:75:97:ba:6c:c5: 9f:c6:f0:fd:1c:c4:02:da:a9:89:a2:d6:02:bc:7a: 7a:50:93:33:29:2d:9c:ed:4e:8f:60:6b:9f:f5:f5: ba:34:ec:90:a9:0b:e3:83:fd:7c:a0:af:f8:29:36: 42:16:c1:ee:bf:5b:34:dd:a7:f4:11:1b:bd:39:a4: 4e:8a:15:78:dc:4f:59:22:00:b0:9b:0d:5b:81:64: d8:63:84:bb:4c:43:ae:b5:b4:52:1d:83:cc:a6:c5: 7f:22:43:53:3e:67:42:2f:f2:61:b4:16:d5:fd:ad: a0:26:12:31:c3:4a:28:99:5d:54:61:87:db:9e:b5: 69:84:08:d7:5e:bd:53:75:36:34:c4:53:d8:e7:37: 2a:11:a2:32:9f:8b:00:02:de:e4:12:7a:05:d8:df: cf:96:e0:14:6d:83:57:12:00:28:44:28:9e:e3:7d: 7a:41:e1:95:e9:df:fd:b8:6b:f2:80:c3:5c:73:ef: 70:e8:92:51:2b:5f:98:39:5a:31:7c:8a:dc:ca:52: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E5:57:2D:83:81:74:CB:29:AA:5F:A5:34:FA:71:B3:70:F0:4C:30 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mOVXLYOBdMspql-lNPpxs3DwTDA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.152.0/21 Signature Algorithm: sha256WithRSAEncryption 96:ba:4c:1e:cf:d2:cd:4d:12:d4:6e:eb:18:47:c1:9a:7f:5e: 30:9d:99:2b:b9:d0:39:a4:8d:d6:c4:6c:33:bb:d2:45:a7:d9: 58:5a:e0:2a:d0:25:58:39:3b:91:3c:0e:cb:2b:1a:45:9f:c5: 7c:13:5b:93:84:8e:f7:55:95:ed:ad:5c:ab:e6:13:ef:9a:61: d1:c9:c8:81:55:18:83:fd:00:4c:51:5f:87:b6:be:8a:6e:5f: c4:22:17:a6:24:a7:5f:b2:4f:99:e0:4e:cc:7f:8b:7a:fa:03: 0d:40:9a:bb:43:ba:77:18:70:26:72:4d:2f:84:e6:dc:08:d9: 11:f7:c9:fc:a0:47:6f:03:fb:9c:b5:82:43:15:a4:c8:27:3e: ee:5d:71:43:71:2f:21:48:c0:c1:d1:b1:61:e5:05:41:82:2b: 43:87:7c:ff:4d:3c:af:d0:ff:28:0c:ba:8f:a1:ae:b7:fc:ca: ee:2e:93:0f:47:eb:15:d2:9d:30:7a:e7:ee:53:51:15:10:40: 77:14:55:71:37:c6:01:fa:b1:96:32:01:69:72:05:0b:f3:f5: 76:d3:b7:48:80:f3:27:04:99:66:04:6d:5c:7a:9a:b8:5b:e9: 62:52:88:84:37:45:c6:bd:52:e2:ae:d4:95:ba:3b:02:a6:e0: 56:83:6a:df -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk4RTU1NzJEODM4MTc0 Q0IyOUFBNUZBNTM0RkE3MUIzNzBGMDRDMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClXUyoVXVxVJEKqT0UEG4czgaA1MHtOcVhrEb2RRmx/yuBljnW tk8slEKMp5XCw5BwrxFzGvB1l7psxZ/G8P0cxALaqYmi1gK8enpQkzMpLZztTo9g a5/19bo07JCpC+OD/Xygr/gpNkIWwe6/WzTdp/QRG705pE6KFXjcT1kiALCbDVuB ZNhjhLtMQ661tFIdg8ymxX8iQ1M+Z0Iv8mG0FtX9raAmEjHDSiiZXVRhh9uetWmE CNdevVN1NjTEU9jnNyoRojKfiwAC3uQSegXY38+W4BRtg1cSAChEKJ7jfXpB4ZXp 3/24a/KAw1xz73DoklErX5g5WjF8itzKUkjVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmOVXLYOBdMspql+lNPpxs3DwTDAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21PVlhMWU9CZE1zcHFsLWxO UHB4czNEd1REQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n5gwDQYJKoZIhvcNAQELBQADggEBAJa6TB7P0s1NEtRu6xhHwZp/XjCdmSu50Dmk jdbEbDO70kWn2Vha4CrQJVg5O5E8DssrGkWfxXwTW5OEjvdVle2tXKvmE++aYdHJ yIFVGIP9AExRX4e2vopuX8QiF6Ykp1+yT5ngTsx/i3r6Aw1AmrtDuncYcCZyTS+E 5twI2RH3yfygR28D+5y1gkMVpMgnPu5dcUNxLyFIwMHRsWHlBUGCK0OHfP9NPK/Q /ygMuo+hrrf8yu4ukw9H6xXSnTB65+5TURUQQHcUVXE3xgH6sZYyAWlyBQvz9XbT t0iA8ycEmWYEbVx6mrhb6WJSiIQ3Rca9UuKu1JW6OwKm4FaDat8= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:45 2025 by rpki-client