$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa File: ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa (raw, json) Hash identifier: W94FXYx5cJEaUyS1Ly7iioA9KNBvOit9J1mRLz+5MIQ= Subject key identifier: A6:D5:53:03:D8:41:6D:D5:9F:35:15:8A:59:A2:37:16:24:46:3A:FE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2733 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa Signing time: Fri 22 Aug 2025 08:43:39 +0000 ROA not before: Fri 22 Aug 2025 08:43:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 61.64.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10035 (0x2733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A6D55303D8416DD59F35158A59A2371624463AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:7b:8c:45:04:dd:0e:92:f9:97:3a:02:34: ac:bb:d9:ad:0a:2f:36:2f:d3:ff:11:81:71:b0:f2: 44:53:f2:59:2f:c5:38:f6:2a:9f:3b:a5:0e:b3:7f: 69:02:8c:42:6f:0b:f7:a8:c0:4f:63:52:8a:07:dd: ad:ad:c7:5c:5b:e6:b6:70:0f:46:46:b5:4c:6d:24: 0c:14:d3:3c:a6:23:8f:a7:b8:90:83:18:bf:d4:6f: 41:64:8c:38:16:67:51:fe:1f:44:2a:5c:3c:5f:da: 6b:8f:fc:2c:74:fc:16:12:c4:32:1c:d9:a6:23:93: ec:99:e7:98:68:d2:27:ca:fc:51:0f:e7:6e:48:46: 19:0e:81:4b:70:af:29:18:c0:3c:ff:1d:f6:7c:b0: b8:4f:73:0e:d2:dd:77:9c:a9:9c:a4:88:e3:c5:ff: b6:0f:47:57:36:0d:8d:6f:d3:dd:e5:52:0d:96:4e: ca:48:73:64:13:25:45:b8:4c:4a:c4:fa:e0:b1:27: a2:3d:31:62:e9:0b:ff:ab:0f:d4:23:ad:0f:db:d7: 7b:6b:64:a5:f6:f4:00:46:27:13:aa:d3:d0:e5:76: 92:d4:f6:c5:aa:97:9a:07:9b:28:66:5d:11:38:ae: a6:e4:bd:04:4b:ca:c8:b7:eb:ee:a6:98:bf:40:32: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:53:03:D8:41:6D:D5:9F:35:15:8A:59:A2:37:16:24:46:3A:FE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ptVTA9hBbdWfNRWKWaI3FiRGOv4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.8.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:9a:1c:3c:be:ee:12:67:74:45:f4:19:0e:1d:e9:c3:64:fb: 7f:07:cf:98:fd:2d:eb:b8:c1:0b:20:2e:31:bb:1c:b1:28:0d: 4a:9e:9e:b4:fb:27:e6:a1:00:5f:43:57:22:cf:19:51:96:c8: 6c:37:b9:a6:52:fd:2c:a8:90:36:51:2e:a7:f7:cb:0d:6a:a8: 2a:bb:50:a9:06:b2:0e:6b:5f:7c:44:9f:1e:43:e0:a3:ac:3f: 7b:07:a5:b3:8e:0a:2c:36:91:4b:c8:d1:4d:f9:94:c4:9d:b3: bd:fe:b5:b2:2e:fc:47:47:e9:61:c0:5e:b3:6f:19:af:27:c3: 5b:dd:6d:33:d9:84:46:2a:b9:d2:02:37:19:ec:ee:89:a4:36: e0:cd:f5:d9:64:a9:cc:56:df:bf:03:9c:69:23:4a:e4:0b:37: 61:ed:33:7c:4d:76:49:a8:cd:fc:3f:27:35:6d:bf:ea:a9:22: 26:59:7e:d2:2a:f5:ed:bd:f9:91:43:8b:58:c2:f9:53:62:5b: db:53:78:b2:cf:42:aa:27:35:71:b6:7c:c0:66:1f:15:87:6a: df:31:6a:63:fc:e8:30:94:3d:7e:0a:8b:a9:58:6a:90:66:26: d6:87:f1:0a:57:89:a0:97:7b:66:71:ce:32:54:8a:c0:24:eb: c1:27:93:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE2RDU1MzAzRDg0MTZE RDU5RjM1MTU4QTU5QTIzNzE2MjQ0NjNBRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtl3uMRQTdDpL5lzoCNKy72a0KLzYv0/8RgXGw8kRT8lkvxTj2 Kp87pQ6zf2kCjEJvC/eowE9jUooH3a2tx1xb5rZwD0ZGtUxtJAwU0zymI4+nuJCD GL/Ub0FkjDgWZ1H+H0QqXDxf2muP/Cx0/BYSxDIc2aYjk+yZ55ho0ifK/FEP525I RhkOgUtwrykYwDz/HfZ8sLhPcw7S3XecqZykiOPF/7YPR1c2DY1v093lUg2WTspI c2QTJUW4TErE+uCxJ6I9MWLpC/+rD9QjrQ/b13trZKX29ABGJxOq09DldpLU9sWq l5oHmyhmXRE4rqbkvQRLysi36+6mmL9AMnrNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUptVTA9hBbdWfNRWKWaI3FiRGOv4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3B0VlRBOWhCYmRXZk5SV0tX YUkzRmlSR092NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QAgwDQYJKoZIhvcNAQELBQADggEBACqaHDy+7hJndEX0GQ4d6cNk+38Hz5j9Leu4 wQsgLjG7HLEoDUqenrT7J+ahAF9DVyLPGVGWyGw3uaZS/SyokDZRLqf3yw1qqCq7 UKkGsg5rX3xEnx5D4KOsP3sHpbOOCiw2kUvI0U35lMSds73+tbIu/EdH6WHAXrNv Ga8nw1vdbTPZhEYqudICNxns7omkNuDN9dlkqcxW378DnGkjSuQLN2HtM3xNdkmo zfw/JzVtv+qpIiZZftIq9e29+ZFDi1jC+VNiW9tTeLLPQqonNXG2fMBmHxWHat8x amP86DCUPX4Ki6lYapBmJtaH8QpXiaCXe2ZxzjJUisAk68Enk24= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:31 2025 by rpki-client