$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa File: mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa (raw, json) Hash identifier: WLx8c9h9Cixxfa5uhiWmjEG1FPdjEmZmlsOD1AQlHTk= Subject key identifier: 9A:9F:CE:F5:83:0F:67:D3:D6:5D:20:F2:48:16:BB:1D:E4:BB:22:4B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25DF Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa Signing time: Fri 22 Aug 2025 08:42:20 +0000 ROA not before: Fri 22 Aug 2025 08:42:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9695 (0x25df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9A9FCEF5830F67D3D65D20F24816BB1DE4BB224B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:95:6f:56:a4:a8:2d:1f:95:f9:8d:27:c7: 02:86:4c:bf:53:21:0f:0f:6d:09:29:50:26:13:65: 12:10:84:b6:6b:94:44:5e:ad:a3:66:1b:06:42:8f: 21:40:f6:81:ef:45:6b:d2:a9:8c:a2:6c:81:95:31: d9:cc:ff:c1:70:48:23:82:8b:c6:61:96:8f:22:88: e8:a5:f4:64:c3:c5:14:7c:e5:04:b2:ef:59:47:34: c6:a4:4d:4e:52:93:64:51:ed:2d:44:76:f7:6e:a0: 4f:02:e3:24:0e:05:ef:b7:f2:59:56:81:cb:a6:4d: 67:da:9f:d9:da:72:53:0e:cc:3f:b2:89:39:7f:b3: 3e:c0:99:31:50:86:61:e8:85:b3:14:46:ab:f5:17: 3c:5d:9e:37:bd:86:1f:f8:22:ff:6b:fb:6c:2a:63: fc:fa:7f:fe:01:3c:a1:d5:74:d2:bb:ed:6e:d6:e9: f0:2f:72:3d:27:fc:e0:57:0e:a2:c0:93:f3:2b:cc: f9:3f:63:42:12:d2:a8:c7:8f:36:2e:71:0f:2b:d5: 61:16:40:8e:36:40:ec:da:09:cd:8b:52:3e:f8:34: 15:fd:f6:39:29:b5:47:6c:1e:31:eb:d2:ab:6e:73: c5:c0:a6:49:10:00:20:bf:75:5e:70:3b:4e:a9:d1: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:CE:F5:83:0F:67:D3:D6:5D:20:F2:48:16:BB:1D:E4:BB:22:4B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mp_O9YMPZ9PWXSDySBa7HeS7Iks.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.192.0/18 Signature Algorithm: sha256WithRSAEncryption 09:29:14:8e:41:f5:3a:2a:bd:18:b7:01:cf:88:4a:83:f3:f9: 86:90:f2:2a:f5:c8:b4:dd:2a:d7:35:93:41:22:93:0f:da:38: 9d:0f:e3:ee:71:2b:f0:6f:56:3d:0d:0d:37:c7:f7:51:5d:86: a6:72:80:6e:d8:58:3c:0d:63:71:34:5f:e5:60:a3:43:e5:f5: c4:0d:22:2a:10:fa:8d:f0:e5:5e:73:ec:d9:ed:1e:f5:06:54: 48:9c:5f:6c:31:bd:7f:b6:32:0a:95:8f:f4:7a:03:b4:2f:5b: 6a:ae:41:a5:2c:09:84:32:7f:48:40:39:82:80:4a:a5:36:0d: 34:df:4f:85:53:b4:2a:b2:a0:6b:19:db:a9:e4:f2:50:37:9c: 2e:61:ed:89:95:0f:07:e7:17:19:20:2f:e6:e5:ce:66:15:31: 97:49:60:69:6a:35:3b:a3:f4:d6:01:5d:4a:47:a4:61:8a:a3: b0:b6:3f:56:d8:bd:60:04:25:1f:df:1d:3c:20:84:c2:c6:b2: b1:df:1c:c7:6d:10:fe:8d:33:db:1a:e4:a0:4c:f5:dc:e2:f4: a9:18:8d:92:1c:5f:22:88:85:d5:05:52:38:0a:06:59:0e:51: 45:46:b0:b5:62:30:98:4e:e6:09:f2:16:00:8f:49:5c:e3:2a: 5e:eb:8a:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBOUZDRUY1ODMwRjY3 RDNENjVEMjBGMjQ4MTZCQjFERTRCQjIyNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/kJVvVqSoLR+V+Y0nxwKGTL9TIQ8PbQkpUCYTZRIQhLZrlERe raNmGwZCjyFA9oHvRWvSqYyibIGVMdnM/8FwSCOCi8Zhlo8iiOil9GTDxRR85QSy 71lHNMakTU5Sk2RR7S1EdvduoE8C4yQOBe+38llWgcumTWfan9naclMOzD+yiTl/ sz7AmTFQhmHohbMURqv1Fzxdnje9hh/4Iv9r+2wqY/z6f/4BPKHVdNK77W7W6fAv cj0n/OBXDqLAk/MrzPk/Y0IS0qjHjzYucQ8r1WEWQI42QOzaCc2LUj74NBX99jkp tUdsHjHr0qtuc8XApkkQACC/dV5wO06p0X+ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmp/O9YMPZ9PWXSDySBa7HeS7IkswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21wX085WU1QWjlQV1hTRHlT QmE3SGVTN0lrcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0 2sAwDQYJKoZIhvcNAQELBQADggEBAAkpFI5B9ToqvRi3Ac+ISoPz+YaQ8ir1yLTd Ktc1k0Eikw/aOJ0P4+5xK/BvVj0NDTfH91FdhqZygG7YWDwNY3E0X+Vgo0Pl9cQN IioQ+o3w5V5z7NntHvUGVEicX2wxvX+2MgqVj/R6A7QvW2quQaUsCYQyf0hAOYKA SqU2DTTfT4VTtCqyoGsZ26nk8lA3nC5h7YmVDwfnFxkgL+blzmYVMZdJYGlqNTuj 9NYBXUpHpGGKo7C2P1bYvWAEJR/fHTwghMLGsrHfHMdtEP6NM9sa5KBM9dzi9KkY jZIcXyKIhdUFUjgKBlkOUUVGsLViMJhO5gnyFgCPSVzjKl7riqc= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:33 2025 by rpki-client