$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vCE7XOwCMOrkUZFASdwmg6YYGvc.roa File: vCE7XOwCMOrkUZFASdwmg6YYGvc.roa (raw, json) Hash identifier: 1AYXJAPTNZS/HmIy+7IC1RsLirBcmEXpLCxt5CF41E4= Subject key identifier: BC:21:3B:5C:EC:02:30:EA:E4:51:91:40:49:DC:26:83:A6:18:1A:F7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2660 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vCE7XOwCMOrkUZFASdwmg6YYGvc.roa Signing time: Fri 22 Aug 2025 08:42:52 +0000 ROA not before: Fri 22 Aug 2025 08:42:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 180.218.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9824 (0x2660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BC213B5CEC0230EAE451914049DC2683A6181AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:8f:44:91:4b:cc:ea:0a:74:4d:5a:44:ff: 0d:3f:df:5d:53:8b:88:d8:ac:23:94:2f:55:cc:6a: 41:f4:e0:40:bf:e9:4c:56:39:9d:eb:ef:f9:a2:2b: 1c:a4:66:d3:e4:51:cf:bb:ed:86:b1:aa:06:e9:4a: 6d:19:f9:bb:a9:c0:a0:2a:c1:4b:10:fa:24:e9:1b: cc:b1:12:d3:80:a6:e9:43:5e:db:cf:fa:21:92:02: 50:99:dc:5f:e0:b2:b7:ae:62:06:0a:1d:e4:36:3c: 6c:ac:cf:d7:82:88:6e:78:2c:e2:d6:c2:99:ec:59: 1f:83:72:26:eb:78:ac:98:a9:34:0c:9c:1a:85:1e: 53:8d:f0:e2:39:c2:be:b4:a3:99:e4:1d:73:93:20: 4a:0e:ac:46:c1:45:4d:c1:4c:e8:9f:9a:c9:ff:06: 7c:76:40:27:61:9a:84:4a:fd:e7:ee:d6:64:06:c3: 11:a3:65:b0:e1:fe:a6:52:7f:d1:e6:45:a1:58:0c: f5:b7:d0:ca:25:be:b4:97:f7:3c:cb:2f:3c:e4:df: 77:91:5e:cb:70:c8:08:66:b8:ec:27:67:0a:b2:e6: 25:c7:f6:b9:68:a5:f8:b5:b4:63:61:19:23:e2:40: 0f:1d:fb:d9:13:ed:e0:eb:a9:9b:ac:59:a7:80:99: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:21:3B:5C:EC:02:30:EA:E4:51:91:40:49:DC:26:83:A6:18:1A:F7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vCE7XOwCMOrkUZFASdwmg6YYGvc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.240.0/21 Signature Algorithm: sha256WithRSAEncryption 60:e2:b4:2b:d4:32:d7:b2:dd:2a:18:54:d4:ec:c4:01:2d:c2: 34:67:de:b9:01:d1:db:04:c4:9b:b6:9d:f9:6d:8b:6f:04:9a: b7:15:5b:6c:91:bc:7c:14:9e:e2:1c:83:c2:e7:ca:1d:fa:53: 71:27:be:02:b1:93:2e:b4:25:17:81:bb:87:60:c6:9f:9a:5c: 7f:e6:ad:1e:a9:22:69:c1:99:1e:71:b5:66:62:93:60:75:7f: ba:e4:2f:a6:7e:52:d8:f4:34:4e:d2:d3:56:d2:ab:06:4f:89: b3:de:43:86:23:30:c0:d4:35:27:a1:e9:96:27:18:54:8b:c6: 5f:17:72:90:ea:b5:37:8d:81:ff:6f:c8:78:0f:1d:d6:bc:ac: c0:f6:15:ba:a7:d6:05:ac:01:40:2d:8a:0d:d2:a3:cb:fd:44: d9:60:bb:f0:7f:1b:1a:04:53:55:15:bf:16:bf:d5:e0:cd:61: 55:97:59:99:a6:25:28:ee:06:fb:a5:e0:78:eb:5e:8a:04:fc: 91:7d:7a:90:fd:cc:dc:3b:09:b8:6c:1a:8e:b1:d2:a7:f1:80: 2f:e8:cd:14:66:e1:05:eb:70:7b:be:96:5e:3e:64:7e:a0:eb: 7d:bf:92:7f:bc:a3:ee:57:ee:34:ab:1c:c3:87:9c:19:d8:33: 37:18:2e:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJDMjEzQjVDRUMwMjMw RUFFNDUxOTE0MDQ5REMyNjgzQTYxODFBRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDx49EkUvM6gp0TVpE/w0/311Ti4jYrCOUL1XMakH04EC/6UxW OZ3r7/miKxykZtPkUc+77YaxqgbpSm0Z+bupwKAqwUsQ+iTpG8yxEtOApulDXtvP +iGSAlCZ3F/gsreuYgYKHeQ2PGysz9eCiG54LOLWwpnsWR+DcibreKyYqTQMnBqF HlON8OI5wr60o5nkHXOTIEoOrEbBRU3BTOifmsn/Bnx2QCdhmoRK/efu1mQGwxGj ZbDh/qZSf9HmRaFYDPW30MolvrSX9zzLLzzk33eRXstwyAhmuOwnZwqy5iXH9rlo pfi1tGNhGSPiQA8d+9kT7eDrqZusWaeAmSKTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvCE7XOwCMOrkUZFASdwmg6YYGvcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ZDRTdYT3dDTU9ya1VaRkFT ZHdtZzZZWUd2Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2vAwDQYJKoZIhvcNAQELBQADggEBAGDitCvUMtey3SoYVNTsxAEtwjRn3rkB0dsE xJu2nflti28EmrcVW2yRvHwUnuIcg8Lnyh36U3EnvgKxky60JReBu4dgxp+aXH/m rR6pImnBmR5xtWZik2B1f7rkL6Z+Utj0NE7S01bSqwZPibPeQ4YjMMDUNSeh6ZYn GFSLxl8XcpDqtTeNgf9vyHgPHda8rMD2Fbqn1gWsAUAtig3So8v9RNlgu/B/GxoE U1UVvxa/1eDNYVWXWZmmJSjuBvul4HjrXooE/JF9epD9zNw7CbhsGo6x0qfxgC/o zRRm4QXrcHu+ll4+ZH6g632/kn+8o+5X7jSrHMOHnBnYMzcYLg4= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:44 2025 by rpki-client