$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/spJFxSs9YcK7MrV0OlQzLRLVp-M.roa File: spJFxSs9YcK7MrV0OlQzLRLVp-M.roa (raw, json) Hash identifier: QiEGRucEZCD9QObmi4it5z3mizDIQFR5LRhnQDKI2wg= Subject key identifier: B2:92:45:C5:2B:3D:61:C2:BB:32:B5:74:3A:54:33:2D:12:D5:A7:E3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26CE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/spJFxSs9YcK7MrV0OlQzLRLVp-M.roa Signing time: Fri 22 Aug 2025 08:43:16 +0000 ROA not before: Fri 22 Aug 2025 08:43:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 45.64.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9934 (0x26ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B29245C52B3D61C2BB32B5743A54332D12D5A7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:22:1d:ab:a2:f2:bc:25:59:ab:02:8f:41: 34:52:b9:00:ed:4d:eb:cf:cc:34:f4:87:b2:22:e5: 9b:9b:d2:35:fa:ea:31:ef:59:f1:8a:60:93:3c:1e: 41:d2:13:7c:3a:6b:59:0a:de:a0:8b:35:16:cf:ab: df:43:ed:2b:c3:61:1c:a1:06:e8:3d:39:a3:d4:3c: ac:e6:f1:1f:5e:85:b1:c8:85:39:e7:60:8e:4f:86: 02:58:b0:4d:c8:a5:c0:17:b1:5d:ea:18:d9:bd:2d: 37:91:ac:8e:6c:d8:92:8c:2e:a0:6f:4d:42:cb:93: 73:46:6f:d1:61:98:2c:80:b3:62:4c:86:d2:6f:69: 8e:12:6a:60:2f:c3:8f:57:40:26:54:0b:68:f0:0a: 1d:af:57:0e:3a:ef:d2:04:84:98:ff:f0:70:81:e6: ca:03:df:8d:56:1e:ef:84:22:b3:98:35:6a:60:f4: 33:1e:02:c0:ce:a9:9e:f6:10:ce:52:c5:81:70:30: 1d:fc:b7:ab:01:dd:f5:3c:92:f2:f6:f3:fd:b7:d1: c8:28:44:04:16:9d:a3:9b:69:a8:e5:3d:93:8f:67: 4b:d2:24:ba:18:59:86:9c:a6:b5:97:53:f0:5e:9f: 1e:b9:c3:2c:d6:d6:e9:25:55:67:83:62:c9:75:24: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:92:45:C5:2B:3D:61:C2:BB:32:B5:74:3A:54:33:2D:12:D5:A7:E3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/spJFxSs9YcK7MrV0OlQzLRLVp-M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.34.0/24 Signature Algorithm: sha256WithRSAEncryption 03:56:7e:48:b9:b1:a2:66:43:bb:9a:4d:32:de:0b:f4:9e:2f: 9e:43:d5:ee:a1:55:53:c4:94:45:f3:49:19:2a:0c:31:f6:5a: 6b:12:6c:6c:f5:b1:b2:11:17:e3:75:e7:b9:ff:a9:48:41:a9: e3:8f:f8:a4:36:85:a6:79:ce:0c:c2:ca:af:ab:e5:85:5e:d3: 56:12:d7:6e:32:c7:f8:b3:84:41:77:56:5d:ea:d7:e7:33:ca: 5d:e0:08:57:24:eb:fa:5b:9c:5f:52:ca:8f:90:a7:e6:e7:14: d3:c6:cc:22:99:ec:22:37:3a:2c:29:a3:57:28:17:24:c2:c9: d0:d6:4b:91:f3:f9:2a:12:d5:20:af:19:4b:f5:85:c2:a5:60: 91:34:69:99:4f:b9:42:38:7a:ae:7f:2b:97:08:d1:8e:76:3f: 29:77:84:ea:a4:a8:86:48:20:4d:9d:51:eb:dc:f8:60:7b:4d: 77:d5:6d:91:7d:b4:91:44:a0:d8:57:2a:35:d0:0f:2b:5f:d7: 71:02:0a:27:2d:20:55:0a:17:33:52:33:11:a0:ea:93:65:5f: e8:3d:90:77:8b:38:a3:89:39:25:ba:10:34:8c:ce:10:e7:ca: ef:36:08:ec:05:cb:fe:c2:dd:a3:e6:2a:62:02:dc:e7:17:19: 4e:8c:7f:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIyOTI0NUM1MkIzRDYx QzJCQjMyQjU3NDNBNTQzMzJEMTJENUE3RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqGiIdq6LyvCVZqwKPQTRSuQDtTevPzDT0h7Ii5Zub0jX66jHv WfGKYJM8HkHSE3w6a1kK3qCLNRbPq99D7SvDYRyhBug9OaPUPKzm8R9ehbHIhTnn YI5PhgJYsE3IpcAXsV3qGNm9LTeRrI5s2JKMLqBvTULLk3NGb9FhmCyAs2JMhtJv aY4SamAvw49XQCZUC2jwCh2vVw4679IEhJj/8HCB5soD341WHu+EIrOYNWpg9DMe AsDOqZ72EM5SxYFwMB38t6sB3fU8kvL28/230cgoRAQWnaObaajlPZOPZ0vSJLoY WYacprWXU/Benx65wyzW1uklVWeDYsl1JBpvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUspJFxSs9YcK7MrV0OlQzLRLVp+MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NwSkZ4U3M5WWNLN01yVjBP bFF6TFJMVnAtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QCIwDQYJKoZIhvcNAQELBQADggEBAANWfki5saJmQ7uaTTLeC/SeL55D1e6hVVPE lEXzSRkqDDH2WmsSbGz1sbIRF+N157n/qUhBqeOP+KQ2haZ5zgzCyq+r5YVe01YS 124yx/izhEF3Vl3q1+czyl3gCFck6/pbnF9Syo+Qp+bnFNPGzCKZ7CI3Oiwpo1co FyTCydDWS5Hz+SoS1SCvGUv1hcKlYJE0aZlPuUI4eq5/K5cI0Y52Pyl3hOqkqIZI IE2dUevc+GB7TXfVbZF9tJFEoNhXKjXQDytf13ECCictIFUKFzNSMxGg6pNlX+g9 kHeLOKOJOSW6EDSMzhDnyu82COwFy/7C3aPmKmIC3OcXGU6Mf/s= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:40 2025 by rpki-client