$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qQo40z7PutFvIxSq7IQLasAAhbA.roa File: qQo40z7PutFvIxSq7IQLasAAhbA.roa (raw, json) Hash identifier: kreKx5cgIPZ9YhOuqusTsrjwUbgV9xYMSLKQiBbAWLU= Subject key identifier: A9:0A:38:D3:3E:CF:BA:D1:6F:23:14:AA:EC:84:0B:6A:C0:00:85:B0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2741 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qQo40z7PutFvIxSq7IQLasAAhbA.roa Signing time: Fri 22 Aug 2025 08:43:42 +0000 ROA not before: Fri 22 Aug 2025 08:43:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 122.254.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10049 (0x2741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A90A38D33ECFBAD16F2314AAEC840B6AC00085B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:52:4d:71:8a:6b:b3:ea:03:af:81:c8:18: ee:be:ab:ab:97:15:d2:b3:77:51:16:60:99:d1:b1: 4c:35:1a:01:fa:67:50:55:23:9a:c2:3c:5f:6e:66: 96:0b:02:d8:31:8c:5f:06:e7:60:2a:e6:c1:63:b8: 45:78:70:93:d0:3a:b8:29:f8:a0:17:63:ef:10:e5: d7:d2:c4:6e:b9:3c:7c:6d:46:bd:45:1f:d4:fe:3f: c8:47:25:4c:a1:d2:b2:64:d1:9c:59:36:85:65:57: cf:66:23:42:5e:c6:36:02:ce:c2:cb:8b:76:db:e8: e1:c4:f9:ed:4d:b7:4d:9c:ee:4e:76:2f:4c:a3:e0: a1:2c:81:fc:d8:e2:26:e6:00:61:ab:04:5c:91:61: 57:e2:bf:53:44:b6:a3:36:3c:26:9a:1f:ba:e1:3e: 31:3a:b8:55:84:67:7c:1d:49:4e:96:6c:78:35:85: 25:35:4e:fc:2f:cd:69:d2:35:29:5c:db:1e:63:92: b0:d9:ea:6a:93:6c:9e:dd:e4:7d:72:80:ac:64:73: 55:dc:54:aa:fc:1c:d4:3e:ca:dd:b7:5d:73:76:c6: 62:dc:83:5a:1c:5f:a7:19:fe:0b:cf:8c:7e:08:fa: de:f1:f5:76:59:1d:1d:61:2f:3f:4c:1a:59:01:ce: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0A:38:D3:3E:CF:BA:D1:6F:23:14:AA:EC:84:0B:6A:C0:00:85:B0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qQo40z7PutFvIxSq7IQLasAAhbA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.24.0/21 Signature Algorithm: sha256WithRSAEncryption 18:e7:71:69:eb:25:4e:47:86:39:f5:6d:bb:85:32:46:54:58: 12:14:4e:00:f9:24:8d:e7:0a:c0:ed:bd:1d:ad:40:6f:82:2b: 9b:95:f5:ba:5b:3a:03:f7:88:d6:b5:8c:f0:e5:25:6a:f2:db: 9f:c8:c3:68:00:df:b1:cc:08:b3:5b:6d:58:c9:41:43:67:2c: 4e:35:ed:5d:a8:ef:a4:07:bb:8d:43:b7:62:79:85:6e:50:4f: 7d:6e:22:23:a1:de:c1:12:1f:07:4d:af:9d:76:e7:e6:80:e3: d9:d0:25:00:a9:af:7c:20:cc:e4:48:dd:c7:98:c7:5f:11:6e: 58:f9:84:ea:20:57:3c:cf:57:44:4f:17:66:ad:88:fa:80:51: 9e:b3:73:76:b8:63:f9:e7:6c:17:89:c2:74:c9:1c:ad:37:72: 56:7e:b0:88:51:5f:ce:36:fc:2a:b5:14:17:ad:b9:c7:63:23: f2:ac:40:6c:b5:7e:e3:22:7f:e9:87:46:8b:f8:c3:bc:fe:12: 97:0a:4d:16:80:a4:09:1a:30:03:5a:db:d8:57:76:2c:e7:90: 37:6e:8e:e9:3e:66:7c:4f:59:8e:bf:4d:55:28:ca:d8:66:2c: 46:bd:28:8d:df:fb:c5:9b:db:6a:8e:47:ff:2a:4e:13:c0:8f: 49:60:26:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE5MEEzOEQzM0VDRkJB RDE2RjIzMTRBQUVDODQwQjZBQzAwMDg1QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHDlJNcYprs+oDr4HIGO6+q6uXFdKzd1EWYJnRsUw1GgH6Z1BV I5rCPF9uZpYLAtgxjF8G52Aq5sFjuEV4cJPQOrgp+KAXY+8Q5dfSxG65PHxtRr1F H9T+P8hHJUyh0rJk0ZxZNoVlV89mI0JexjYCzsLLi3bb6OHE+e1Nt02c7k52L0yj 4KEsgfzY4ibmAGGrBFyRYVfiv1NEtqM2PCaaH7rhPjE6uFWEZ3wdSU6WbHg1hSU1 TvwvzWnSNSlc2x5jkrDZ6mqTbJ7d5H1ygKxkc1XcVKr8HNQ+yt23XXN2xmLcg1oc X6cZ/gvPjH4I+t7x9XZZHR1hLz9MGlkBzgxvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqQo40z7PutFvIxSq7IQLasAAhbAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3FRbzQwejdQdXRGdkl4U3E3 SVFMYXNBQWhiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /hgwDQYJKoZIhvcNAQELBQADggEBABjncWnrJU5Hhjn1bbuFMkZUWBIUTgD5JI3n CsDtvR2tQG+CK5uV9bpbOgP3iNa1jPDlJWry25/Iw2gA37HMCLNbbVjJQUNnLE41 7V2o76QHu41Dt2J5hW5QT31uIiOh3sESHwdNr5125+aA49nQJQCpr3wgzORI3ceY x18Rblj5hOogVzzPV0RPF2atiPqAUZ6zc3a4Y/nnbBeJwnTJHK03clZ+sIhRX842 /Cq1FBetucdjI/KsQGy1fuMif+mHRov4w7z+EpcKTRaApAkaMANa29hXdiznkDdu juk+ZnxPWY6/TVUoythmLEa9KI3f+8Wb22qOR/8qThPAj0lgJvI= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:43 2025 by rpki-client