$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vlQzrDQ1eqwJkOvavoSL949YuKk.roa File: vlQzrDQ1eqwJkOvavoSL949YuKk.roa (raw, json) Hash identifier: 8Q/w1ScpN+7uyWkDYBVsdhP+fj9VoJzdD7BhB1YmSb0= Subject key identifier: BE:54:33:AC:34:35:7A:AC:09:90:EB:DA:BE:84:8B:F7:8F:58:B8:A9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2735 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vlQzrDQ1eqwJkOvavoSL949YuKk.roa Signing time: Fri 22 Aug 2025 08:43:39 +0000 ROA not before: Fri 22 Aug 2025 08:43:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 211.76.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10037 (0x2735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BE5433AC34357AAC0990EBDABE848BF78F58B8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:37:24:93:a8:e6:0a:7c:2d:2b:32:ab:ce: 8d:32:63:8e:44:8f:7f:4c:15:c0:84:b7:31:84:77: ff:10:6f:36:77:dd:a1:2f:b1:76:44:29:aa:cd:19: 2d:13:1b:73:bb:54:73:84:84:0a:66:ed:0e:9e:dd: 00:4e:27:7a:17:45:c7:89:b7:fe:e1:0b:5e:ef:78: 53:20:32:2b:d2:f5:b2:81:37:cf:00:74:d7:99:d8: 17:96:61:8e:21:e7:65:60:5b:f6:5f:f9:41:49:2e: c1:f8:6e:fe:08:88:34:1b:96:9f:85:8e:a0:ea:01: c2:a5:00:fe:5b:b5:2f:ba:c6:74:47:30:45:2c:4e: bc:1f:1c:04:aa:a2:e0:4d:6d:fb:25:23:b2:ae:66: 3e:0f:fb:a7:b7:aa:26:4f:aa:8e:d1:38:0c:ae:43: 3b:00:ba:0b:06:3b:73:a8:8f:d8:f8:62:c5:27:61: f0:1e:a3:e5:92:df:fe:21:a6:38:e1:a8:d4:36:5a: 85:4f:e6:c3:7d:de:0b:fa:1a:47:40:c8:76:10:d3: 59:76:dc:e4:31:8a:b9:15:61:10:ce:72:43:8c:af: 6e:02:53:fd:19:3d:17:f4:23:58:70:a7:b2:fb:c0: 89:f6:3d:7e:ef:84:a7:e4:5e:fb:98:3b:03:d5:49: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:54:33:AC:34:35:7A:AC:09:90:EB:DA:BE:84:8B:F7:8F:58:B8:A9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vlQzrDQ1eqwJkOvavoSL949YuKk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.44.0/22 Signature Algorithm: sha256WithRSAEncryption 31:df:03:07:18:a9:9b:ca:95:56:93:88:9b:3e:37:0f:5b:54: 75:25:4b:46:15:98:5d:0d:78:01:82:03:7f:f5:82:66:ff:da: 5b:d2:4b:89:3c:74:e8:04:28:bd:0f:63:78:71:cd:59:02:fd: 8d:d5:ad:14:94:42:65:d9:9f:e3:81:fc:44:45:91:f1:fd:0e: 77:5e:42:0f:f1:08:79:55:51:3f:ba:8f:29:f1:ca:f7:23:ff: ac:ae:c2:36:8c:80:bc:81:db:a7:42:f3:88:3f:a5:da:37:4c: de:93:a4:81:99:32:c4:c3:a1:50:57:0c:2a:64:f8:c0:5f:8d: 9b:6b:ca:95:93:40:12:92:01:f1:97:35:24:16:6e:01:47:63: a3:00:9e:84:7d:4b:80:13:cc:91:ca:04:5a:5e:4a:6b:3b:24: 26:29:9a:76:65:96:4f:11:76:16:7c:28:80:b0:2a:79:26:ef: 88:23:2d:bd:18:bf:6d:2e:0e:a3:03:f9:cc:4c:a2:75:2e:62: 19:a7:53:2a:51:85:14:1b:82:c6:03:81:c1:86:0e:94:b1:58: 7b:7f:73:17:ee:05:35:17:9e:0e:95:51:a8:40:1d:85:ce:71: c6:7b:6e:1b:b7:7a:a2:a7:a3:1b:71:5b:b1:09:1b:8a:13:b0: fa:f8:47:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJFNTQzM0FDMzQzNTdB QUMwOTkwRUJEQUJFODQ4QkY3OEY1OEI4QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1Ejckk6jmCnwtKzKrzo0yY45Ej39MFcCEtzGEd/8QbzZ33aEv sXZEKarNGS0TG3O7VHOEhApm7Q6e3QBOJ3oXRceJt/7hC17veFMgMivS9bKBN88A dNeZ2BeWYY4h52VgW/Zf+UFJLsH4bv4IiDQblp+FjqDqAcKlAP5btS+6xnRHMEUs TrwfHASqouBNbfslI7KuZj4P+6e3qiZPqo7ROAyuQzsAugsGO3Ooj9j4YsUnYfAe o+WS3/4hpjjhqNQ2WoVP5sN93gv6GkdAyHYQ01l23OQxirkVYRDOckOMr24CU/0Z PRf0I1hwp7L7wIn2PX7vhKfkXvuYOwPVSWDHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvlQzrDQ1eqwJkOvavoSL949YuKkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ZsUXpyRFExZXF3SmtPdmF2 b1NMOTQ5WXVLay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TCwwDQYJKoZIhvcNAQELBQADggEBADHfAwcYqZvKlVaTiJs+Nw9bVHUlS0YVmF0N eAGCA3/1gmb/2lvSS4k8dOgEKL0PY3hxzVkC/Y3VrRSUQmXZn+OB/ERFkfH9Dnde Qg/xCHlVUT+6jynxyvcj/6yuwjaMgLyB26dC84g/pdo3TN6TpIGZMsTDoVBXDCpk +MBfjZtrypWTQBKSAfGXNSQWbgFHY6MAnoR9S4ATzJHKBFpeSms7JCYpmnZllk8R dhZ8KICwKnkm74gjLb0Yv20uDqMD+cxMonUuYhmnUypRhRQbgsYDgcGGDpSxWHt/ cxfuBTUXng6VUahAHYXOccZ7bhu3eqKnoxtxW7EJG4oTsPr4R+4= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:47 2025 by rpki-client