$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pM7Qcm-THTgqGLizGj81oARj8gg.roa File: pM7Qcm-THTgqGLizGj81oARj8gg.roa (raw, json) Hash identifier: +ToEgc/SXCsIFPsD90xQx6zXYCnb2oUGmrAIZvRkD4Y= Subject key identifier: A4:CE:D0:72:6F:93:1D:38:2A:18:B8:B3:1A:3F:35:A0:04:63:F2:08 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 268C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pM7Qcm-THTgqGLizGj81oARj8gg.roa Signing time: Fri 22 Aug 2025 08:43:02 +0000 ROA not before: Fri 22 Aug 2025 08:43:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.208.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9868 (0x268c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A4CED0726F931D382A18B8B31A3F35A00463F208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8a:2c:34:08:fe:bb:39:e0:a3:f3:ce:14:a1: 45:22:c9:2a:9e:eb:78:a1:12:32:b3:e8:26:7d:53: 20:0a:ab:8a:31:88:f2:39:cd:a8:4c:f4:49:11:02: 28:f9:d1:92:5e:3c:6a:06:44:0f:47:ad:66:fd:51: b0:b6:d8:1b:11:54:d2:6d:8a:4c:8a:c2:89:3a:ef: 43:26:05:70:dc:74:f1:37:6d:7e:33:76:86:47:66: 12:6f:58:18:60:e6:ef:ed:1a:50:fb:63:4e:fc:c0: b2:0c:2c:ec:a5:5f:56:4f:0e:5c:4d:14:1f:c9:d1: 97:61:ba:e2:04:37:67:f8:30:3f:4f:08:7c:f0:aa: 6e:00:f2:49:f1:46:b4:a9:36:c8:a6:4c:c7:9b:f2: 79:f7:85:09:7d:63:07:0a:09:95:e8:63:2e:82:5b: ba:65:b5:d0:9a:af:96:3f:25:99:de:a9:55:a1:0f: 9e:65:5a:39:e1:3f:8d:76:4c:e1:d5:74:25:ea:59: e6:99:6f:b2:15:1a:06:48:04:b5:21:fa:ae:3d:cd: 35:90:66:2c:dc:90:9d:6b:1f:55:7d:50:b9:15:7f: 88:78:a0:96:5a:a6:e9:7d:f3:94:bb:d9:5c:83:95: d7:8e:48:5c:5b:18:a3:59:16:fe:7d:59:41:58:89: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CE:D0:72:6F:93:1D:38:2A:18:B8:B3:1A:3F:35:A0:04:63:F2:08 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pM7Qcm-THTgqGLizGj81oARj8gg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.208.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:10:40:51:cd:30:56:87:aa:7a:3d:e1:09:46:1d:f8:ee:63: 69:9d:01:2a:13:bf:2b:ce:99:b7:9c:45:d8:1e:69:34:13:24: de:b1:7f:a2:af:12:3b:84:69:e2:db:31:4c:d2:af:52:48:19: fd:63:5d:f8:83:85:ac:b2:ee:13:25:38:c3:72:0c:0f:1c:60: ec:30:dc:39:52:87:3f:fb:e2:ec:df:c1:a5:86:d3:0a:25:ed: a8:53:67:e5:18:b3:cb:18:ec:40:7d:ff:f3:37:f0:88:ba:2f: bd:4e:79:18:98:b1:43:9d:bb:50:92:b4:05:86:ab:93:6e:c5: 4b:ba:88:7c:99:c0:ea:ee:78:b8:59:ea:63:ec:1e:aa:f2:43: c6:70:2c:fc:81:33:f1:44:b8:9e:bc:2c:73:f1:4e:19:d2:04: 11:60:15:76:a3:00:52:ae:92:59:e3:0a:fc:f4:9e:91:d7:c6: 91:87:ca:e8:1d:c5:94:85:63:89:d4:7a:25:68:13:f8:90:16: 10:66:c6:fc:22:4e:b3:4c:5c:ba:d9:06:7f:5d:d5:b8:b0:03: cb:bf:1c:3c:e4:55:26:3e:8e:17:d4:90:57:43:16:59:a9:58: 5e:8e:9d:6a:b3:1f:50:67:71:3e:e6:0d:22:37:2f:17:70:44: 11:9f:33:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE0Q0VEMDcyNkY5MzFE MzgyQTE4QjhCMzFBM0YzNUEwMDQ2M0YyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0iiw0CP67OeCj884UoUUiySqe63ihEjKz6CZ9UyAKq4oxiPI5 zahM9EkRAij50ZJePGoGRA9HrWb9UbC22BsRVNJtikyKwok670MmBXDcdPE3bX4z doZHZhJvWBhg5u/tGlD7Y078wLIMLOylX1ZPDlxNFB/J0ZdhuuIEN2f4MD9PCHzw qm4A8knxRrSpNsimTMeb8nn3hQl9YwcKCZXoYy6CW7pltdCar5Y/JZneqVWhD55l WjnhP412TOHVdCXqWeaZb7IVGgZIBLUh+q49zTWQZizckJ1rH1V9ULkVf4h4oJZa pul985S72VyDldeOSFxbGKNZFv59WUFYiSQxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpM7Qcm+THTgqGLizGj81oARj8ggwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BNN1FjbS1USFRncUdMaXpH ajgxb0FSajhnZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx ntAwDQYJKoZIhvcNAQELBQADggEBAEsQQFHNMFaHqno94QlGHfjuY2mdASoTvyvO mbecRdgeaTQTJN6xf6KvEjuEaeLbMUzSr1JIGf1jXfiDhayy7hMlOMNyDA8cYOww 3DlShz/74uzfwaWG0wol7ahTZ+UYs8sY7EB9//M38Ii6L71OeRiYsUOdu1CStAWG q5NuxUu6iHyZwOrueLhZ6mPsHqryQ8ZwLPyBM/FEuJ68LHPxThnSBBFgFXajAFKu klnjCvz0npHXxpGHyugdxZSFY4nUeiVoE/iQFhBmxvwiTrNMXLrZBn9d1biwA8u/ HDzkVSY+jhfUkFdDFlmpWF6OnWqzH1BncT7mDSI3LxdwRBGfMzA= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:38 2025 by rpki-client