$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_Xty0lEcWaByi954yfl5Z4iIr0.roa File: v_Xty0lEcWaByi954yfl5Z4iIr0.roa (raw, json) Hash identifier: RtKdEiVziwyE7QFnTVpgS50BLlF7/DwUg1F6ytDt31Q= Subject key identifier: BF:F5:ED:CB:49:44:71:66:81:CA:2F:79:E3:27:E5:E5:9E:22:22:BD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26D3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_Xty0lEcWaByi954yfl5Z4iIr0.roa Signing time: Fri 22 Aug 2025 08:43:17 +0000 ROA not before: Fri 22 Aug 2025 08:43:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 2407:4b00:fd01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9939 (0x26d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BFF5EDCB4944716681CA2F79E327E5E59E2222BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:98:2d:a8:ba:90:18:5b:bf:21:ed:df:ea: 57:80:b6:29:c0:d0:b5:21:40:e6:c0:49:36:a6:e2: 33:5c:8f:ad:92:a6:c7:17:ea:7c:15:55:72:1a:ba: 74:73:3e:aa:f7:1d:77:4f:1d:2d:3d:b4:62:b7:1d: a6:76:15:a7:f0:38:41:c5:eb:00:14:e7:22:f3:19: d8:92:88:03:2f:15:98:3c:e0:de:c0:59:7c:64:ad: 9f:37:8e:90:f4:af:85:1c:ee:ca:f0:03:f7:02:c9: 5d:a5:96:ae:b3:db:6c:f6:7c:a7:38:19:2e:7e:ed: b8:15:d2:a4:4a:8a:af:c8:a9:f4:6d:e6:a6:62:70: 6a:75:7b:34:67:ad:9c:ad:fa:2e:7a:11:9c:e3:39: f6:2d:be:b9:99:cf:06:ae:c6:2d:07:bd:f1:a2:a9: 0b:6e:f3:2e:92:63:db:5e:23:3f:2f:56:b9:f1:0c: c2:69:c5:8a:0d:28:45:40:06:0b:b2:90:69:6f:ea: 54:9b:e2:2b:3d:e2:ee:65:c1:54:a8:92:79:3e:8a: 8b:15:89:44:f9:a2:6e:16:71:6d:7f:99:d7:39:aa: c0:94:a2:ce:6f:5e:67:b7:c3:b7:84:34:a2:5f:07: 85:2f:ed:69:67:75:19:ce:af:3b:5f:44:ee:63:f1: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F5:ED:CB:49:44:71:66:81:CA:2F:79:E3:27:E5:E5:9E:22:22:BD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_Xty0lEcWaByi954yfl5Z4iIr0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00:fd01::/48 Signature Algorithm: sha256WithRSAEncryption 9c:73:a2:9e:b6:d3:b2:28:a0:b3:18:e1:03:de:9f:23:dd:5e: 4b:59:c6:97:a9:f9:a0:ac:14:93:84:19:4c:75:2f:fb:06:8e: 26:5b:c4:b1:6a:7a:3c:47:46:f6:75:63:3c:fa:aa:83:42:0c: 57:0e:aa:4f:8e:7f:b0:99:6e:7e:f1:94:41:7f:3f:1f:e0:6f: 1a:eb:62:d8:87:10:bb:25:dc:7b:fc:d1:ed:b9:11:ae:ca:d6: 65:02:11:a2:95:7d:91:b4:cd:82:3f:e5:d4:15:c0:d6:95:45: 45:14:5e:f3:9f:4f:e3:dd:65:54:9a:09:2f:14:ad:df:5e:dc: 05:32:c8:11:1f:89:a8:85:43:4c:b6:d9:b4:8a:cb:a4:07:9e: 8b:05:7d:7b:1d:2e:7b:b4:86:84:fd:f6:07:f8:0b:63:db:c5: 69:82:04:ab:3a:84:29:8a:a0:a0:17:e4:2a:f4:61:b7:d8:a9: 8c:76:4a:71:33:9c:2a:5e:82:e8:f5:07:50:e5:88:b8:2d:f9: c2:0a:a4:03:5e:bf:d4:82:50:8e:86:9e:41:09:80:c2:db:f6: d4:6a:9b:93:e5:da:14:3e:bf:1d:da:ec:86:36:5a:6a:8e:33: 26:f5:64:f3:40:d5:88:3c:ad:da:d6:1a:f2:c2:50:f8:ee:6a: ce:d4:ba:86 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICJtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJGRjVFRENCNDk0NDcx NjY4MUNBMkY3OUUzMjdFNUU1OUUyMjIyQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzc5gtqLqQGFu/Ie3f6leAtinA0LUhQObASTam4jNcj62SpscX 6nwVVXIaunRzPqr3HXdPHS09tGK3HaZ2FafwOEHF6wAU5yLzGdiSiAMvFZg84N7A WXxkrZ83jpD0r4Uc7srwA/cCyV2llq6z22z2fKc4GS5+7bgV0qRKiq/IqfRt5qZi cGp1ezRnrZyt+i56EZzjOfYtvrmZzwauxi0HvfGiqQtu8y6SY9teIz8vVrnxDMJp xYoNKEVABguykGlv6lSb4is94u5lwVSoknk+iosViUT5om4WcW1/mdc5qsCUos5v Xme3w7eENKJfB4Uv7WlndRnOrztfRO5j8QepAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUv/Xty0lEcWaByi954yfl5Z4iIr0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ZfWHR5MGxFY1dhQnlpOTU0 eWZsNVo0aUlyMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B0sA/QEwDQYJKoZIhvcNAQELBQADggEBAJxzop6207IooLMY4QPenyPdXktZxpep +aCsFJOEGUx1L/sGjiZbxLFqejxHRvZ1Yzz6qoNCDFcOqk+Of7CZbn7xlEF/Px/g bxrrYtiHELsl3Hv80e25Ea7K1mUCEaKVfZG0zYI/5dQVwNaVRUUUXvOfT+PdZVSa CS8Urd9e3AUyyBEfiaiFQ0y22bSKy6QHnosFfXsdLnu0hoT99gf4C2PbxWmCBKs6 hCmKoKAX5Cr0YbfYqYx2SnEznCpeguj1B1DliLgt+cIKpANev9SCUI6GnkEJgMLb 9tRqm5Pl2hQ+vx3a7IY2WmqOMyb1ZPNA1Yg8rdrWGvLCUPjuas7UuoY= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:23 2025 by rpki-client