$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rzoIEXEJpcbpNgH41CA5MCzLYMI.roa File: rzoIEXEJpcbpNgH41CA5MCzLYMI.roa (raw, json) Hash identifier: QWHD8VD9Luykd1Z2wjWv2WvkRLwMhgUZm846o5OWq5k= Subject key identifier: AF:3A:08:11:71:09:A5:C6:E9:36:01:F8:D4:20:39:30:2C:CB:60:C2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2688 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rzoIEXEJpcbpNgH41CA5MCzLYMI.roa Signing time: Fri 22 Aug 2025 08:43:01 +0000 ROA not before: Fri 22 Aug 2025 08:43:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 211.76.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9864 (0x2688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AF3A08117109A5C6E93601F8D42039302CCB60C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:04:fb:aa:ba:17:df:27:51:16:29:fb:a7: e3:5c:f2:30:3c:4b:98:a3:80:c9:e2:39:76:09:ad: 51:98:cc:88:37:20:31:a7:7e:e0:7d:0c:93:d9:7d: 99:b0:51:cb:02:59:c5:fb:f5:23:41:a0:5d:df:e9: 41:62:e1:3f:28:b2:71:8f:d8:a1:06:e4:43:33:12: 69:64:8f:c4:d2:ab:58:d4:86:94:80:55:5a:d6:2a: 47:53:9f:a2:ae:2d:b7:3e:91:03:2d:17:b8:7d:fe: 7f:9e:df:ff:f7:e7:e7:00:9c:b4:00:21:ac:57:6f: dc:5c:2e:01:8a:18:d8:1f:1c:66:6e:4a:a1:f6:66: 9c:77:d5:6a:dc:1c:d4:51:6e:c3:18:ef:91:e7:05: 5f:89:bd:93:c3:17:37:0d:7b:a2:84:87:46:8a:98: 9e:5c:6f:96:e8:44:ce:7a:be:02:d6:92:4c:e4:06: 68:d4:66:76:ce:b3:e9:3c:9a:71:69:2a:d2:88:fc: e6:26:50:e7:2c:19:e9:16:7e:9a:93:31:ef:1c:cf: 88:2f:99:7c:a3:e9:eb:c9:47:65:55:ad:b2:17:9c: df:18:a2:d3:a4:20:30:3d:ad:c1:22:45:b0:e6:e9: a9:10:c1:65:80:0c:b7:f9:bf:d5:01:00:87:24:ce: 6c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3A:08:11:71:09:A5:C6:E9:36:01:F8:D4:20:39:30:2C:CB:60:C2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rzoIEXEJpcbpNgH41CA5MCzLYMI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.63.0/24 Signature Algorithm: sha256WithRSAEncryption 96:88:dd:dc:50:a9:ee:63:d5:fe:bd:1b:d6:72:c1:56:75:66: 56:ab:cc:74:bb:6a:07:b4:d2:75:e1:7a:39:37:b6:24:13:52: b6:b0:47:18:d2:ea:ae:de:5f:83:70:dc:5f:90:aa:06:29:b2: e4:8f:bf:f4:fa:d6:51:f3:5b:aa:d6:ba:14:00:38:cf:05:70: e3:fe:ac:71:5c:cc:cb:24:a3:18:73:8c:9f:23:e1:ce:d7:31: d2:ae:6f:aa:31:71:a4:f7:10:5b:c4:ce:0e:84:3b:c7:d2:a0: 7f:db:4c:38:9e:d3:51:26:a9:3e:f8:27:4d:c6:03:7e:5e:3f: 32:c4:24:22:45:5c:24:d8:d8:8f:79:3d:ed:1c:d3:0b:f4:61: a5:ea:4c:36:09:dd:42:56:3d:73:fc:db:00:6a:40:77:5c:37: f5:8d:d2:0e:33:e4:bb:af:72:06:b6:04:f0:5d:2c:cb:6c:70: 01:d1:6b:f3:0e:23:72:78:c2:10:39:50:42:29:f9:89:4a:71: a4:96:7f:39:ce:15:70:e5:44:34:5f:35:84:f7:13:c9:fa:b0: 27:38:35:a2:7c:2f:a6:45:ee:dd:9f:13:b2:d9:3e:56:a0:51: 9c:8d:32:0f:e4:fb:c8:08:3b:ff:40:b4:e5:de:9c:90:cf:4d: 47:2d:b7:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGM0EwODExNzEwOUE1 QzZFOTM2MDFGOEQ0MjAzOTMwMkNDQjYwQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHTgT7qroX3ydRFin7p+Nc8jA8S5ijgMniOXYJrVGYzIg3IDGn fuB9DJPZfZmwUcsCWcX79SNBoF3f6UFi4T8osnGP2KEG5EMzEmlkj8TSq1jUhpSA VVrWKkdTn6KuLbc+kQMtF7h9/n+e3//35+cAnLQAIaxXb9xcLgGKGNgfHGZuSqH2 Zpx31WrcHNRRbsMY75HnBV+JvZPDFzcNe6KEh0aKmJ5cb5boRM56vgLWkkzkBmjU ZnbOs+k8mnFpKtKI/OYmUOcsGekWfpqTMe8cz4gvmXyj6evJR2VVrbIXnN8YotOk IDA9rcEiRbDm6akQwWWADLf5v9UBAIckzmx3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrzoIEXEJpcbpNgH41CA5MCzLYMIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3J6b0lFWEVKcGNicE5nSDQx Q0E1TUN6TFlNSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TD8wDQYJKoZIhvcNAQELBQADggEBAJaI3dxQqe5j1f69G9ZywVZ1ZlarzHS7age0 0nXhejk3tiQTUrawRxjS6q7eX4Nw3F+QqgYpsuSPv/T61lHzW6rWuhQAOM8FcOP+ rHFczMskoxhzjJ8j4c7XMdKub6oxcaT3EFvEzg6EO8fSoH/bTDie01EmqT74J03G A35ePzLEJCJFXCTY2I95Pe0c0wv0YaXqTDYJ3UJWPXP82wBqQHdcN/WN0g4z5Luv cga2BPBdLMtscAHRa/MOI3J4whA5UEIp+YlKcaSWfznOFXDlRDRfNYT3E8n6sCc4 NaJ8L6ZF7t2fE7LZPlagUZyNMg/k+8gIO/9AtOXenJDPTUctt+w= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:35 2025 by rpki-client