$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzoBtSxCrcnOe11d__E6wcn-1RI.roa File: qzoBtSxCrcnOe11d__E6wcn-1RI.roa (raw, json) Hash identifier: 0tESbHdrt5HpKknfwYqn74WwDtFLHkN4UEusIJMGhZg= Subject key identifier: AB:3A:01:B5:2C:42:AD:C9:CE:7B:5D:5D:FF:F1:3A:C1:C9:FE:D5:12 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2645 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzoBtSxCrcnOe11d__E6wcn-1RI.roa Signing time: Fri 22 Aug 2025 08:42:46 +0000 ROA not before: Fri 22 Aug 2025 08:42:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9797 (0x2645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AB3A01B52C42ADC9CE7B5D5DFFF13AC1C9FED512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a8:2c:40:d2:b7:4e:49:b7:59:89:d9:59:46: 4f:3f:fd:00:df:2d:af:8c:73:7d:26:92:57:c0:e6: 85:9f:55:69:c1:be:87:c1:1d:41:56:e9:ce:00:1b: a8:c0:e2:d9:e3:13:5f:80:48:89:70:10:39:8d:3d: 93:02:f2:fd:3d:7a:19:75:77:f4:f1:cc:61:65:e4: d5:0e:1b:73:71:be:12:43:8b:36:5b:ac:5c:48:75: 4f:be:bd:8c:48:6a:db:4a:a5:c8:f3:6e:d6:bb:9f: 1b:92:9f:00:38:69:77:6f:af:78:bc:fb:74:79:2f: 30:32:27:6b:c6:b1:b9:e0:23:6a:5d:b8:4d:8d:d1: 78:3d:48:0e:3b:2d:e7:b1:ee:2b:c9:d6:4c:03:42: a1:12:de:38:35:84:ca:0b:4e:b4:5c:df:ff:fe:d7: 41:86:c8:1d:e1:22:57:d3:d2:4f:8a:70:87:38:ff: 8d:1a:ba:5e:a9:3a:df:43:62:6b:35:27:00:77:21: 93:f7:04:59:57:d3:7c:b1:a7:16:22:42:8f:e2:2b: 7f:93:19:45:6e:a6:fb:c8:e3:a2:3e:99:09:1a:e3: 8f:cd:f9:cc:db:8e:ab:b8:bd:66:1c:c1:66:75:ad: d4:b4:68:f4:cd:e1:72:1b:e5:2f:07:fd:5b:14:a3: b9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3A:01:B5:2C:42:AD:C9:CE:7B:5D:5D:FF:F1:3A:C1:C9:FE:D5:12 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzoBtSxCrcnOe11d__E6wcn-1RI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/21 Signature Algorithm: sha256WithRSAEncryption 88:d5:ef:e8:d2:56:93:d4:8d:9f:97:1d:1e:f7:4c:72:43:b3: 89:2c:b9:6e:5a:cc:90:de:d2:43:00:98:ea:d8:9e:f0:53:87: 21:47:c1:8b:b5:3e:66:6f:a9:cf:9d:d5:7d:c5:c5:d9:b6:75: 09:8a:ac:15:33:ff:d6:cf:61:8d:bb:d9:07:d7:3d:fa:c4:fb: a2:d5:c6:10:a5:46:94:2a:d9:80:4c:8c:b3:f3:73:a6:81:8c: 53:99:b5:e4:f7:2b:20:66:f5:81:43:8e:70:92:23:67:35:62: e0:a7:9e:af:c1:48:c1:04:9d:0f:f4:e6:14:6d:e4:33:c3:27: 6e:78:00:5a:a4:43:bd:2d:b2:f9:78:ea:86:95:89:15:7c:6e: d6:b3:8b:72:fc:69:46:a3:32:45:6f:f9:a0:7c:fc:0f:a7:e3: a9:0a:40:f1:2f:02:66:8d:8d:38:0c:3a:fe:26:8b:57:f0:f2: f2:78:50:77:8e:78:44:97:ae:e3:71:7e:5f:71:39:d1:d4:c3: e6:36:36:59:6a:d4:e6:1c:34:3b:6b:e3:de:58:29:5f:0b:3b: 27:2e:54:64:6a:19:26:7f:5a:ec:15:49:07:2a:2c:f5:57:dd: c9:09:61:ed:82:75:dc:b3:92:1e:3a:cd:8f:09:d7:1b:40:a8: a9:e2:6a:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCM0EwMUI1MkM0MkFE QzlDRTdCNUQ1REZGRjEzQUMxQzlGRUQ1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqqCxA0rdOSbdZidlZRk8//QDfLa+Mc30mklfA5oWfVWnBvofB HUFW6c4AG6jA4tnjE1+ASIlwEDmNPZMC8v09ehl1d/TxzGFl5NUOG3NxvhJDizZb rFxIdU++vYxIattKpcjzbta7nxuSnwA4aXdvr3i8+3R5LzAyJ2vGsbngI2pduE2N 0Xg9SA47Leex7ivJ1kwDQqES3jg1hMoLTrRc3//+10GGyB3hIlfT0k+KcIc4/40a ul6pOt9DYms1JwB3IZP3BFlX03yxpxYiQo/iK3+TGUVupvvI46I+mQka44/N+czb jqu4vWYcwWZ1rdS0aPTN4XIb5S8H/VsUo7lPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqzoBtSxCrcnOe11d//E6wcn+1RIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3F6b0J0U3hDcmNuT2UxMWRf X0U2d2NuLTFSSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx ngAwDQYJKoZIhvcNAQELBQADggEBAIjV7+jSVpPUjZ+XHR73THJDs4ksuW5azJDe 0kMAmOrYnvBThyFHwYu1PmZvqc+d1X3Fxdm2dQmKrBUz/9bPYY272QfXPfrE+6LV xhClRpQq2YBMjLPzc6aBjFOZteT3KyBm9YFDjnCSI2c1YuCnnq/BSMEEnQ/05hRt 5DPDJ254AFqkQ70tsvl46oaViRV8btazi3L8aUajMkVv+aB8/A+n46kKQPEvAmaN jTgMOv4mi1fw8vJ4UHeOeESXruNxfl9xOdHUw+Y2Nllq1OYcNDtr495YKV8LOycu VGRqGSZ/WuwVSQcqLPVX3ckJYe2Cddyzkh46zY8J1xtAqKniahs= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:42 2025 by rpki-client