$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xcEjwv6io4XcuucviQRfpR9unyM.roa File: xcEjwv6io4XcuucviQRfpR9unyM.roa (raw, json) Hash identifier: oK4JDqk+LdnVY792DNUTWv9zkKgtQelXwruS6kupVog= Subject key identifier: C5:C1:23:C2:FE:A2:A3:85:DC:BA:E7:2F:89:04:5F:A5:1F:6E:9F:23 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26E9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xcEjwv6io4XcuucviQRfpR9unyM.roa Signing time: Fri 22 Aug 2025 08:43:23 +0000 ROA not before: Fri 22 Aug 2025 08:43:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 2407:4b00::/32 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9961 (0x26e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C5C123C2FEA2A385DCBAE72F89045FA51F6E9F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:df:8e:c8:ed:1e:f6:74:a9:c1:de:63:29: e4:69:f6:39:6c:f9:3e:4f:0d:e2:19:b6:f0:a4:b6: 06:69:d2:d8:31:61:94:80:6a:38:59:9b:23:8c:e8: 82:e9:66:57:02:da:0f:f3:d9:57:7e:2d:fb:c5:14: 65:ad:16:b3:e1:a6:9b:0e:28:a2:ea:cb:fa:8a:05: d2:a6:90:35:a6:dc:ec:7e:a1:d7:0f:d3:a3:bc:ef: 4e:98:bd:77:7d:01:3b:9d:c8:9e:f6:d1:b0:ac:2a: ae:fb:15:2b:26:87:8f:0d:df:17:e9:b5:f9:ae:8b: 42:ed:9d:3c:c1:60:7e:fd:f3:44:62:e9:de:71:d0: e2:0b:74:46:a9:33:01:73:9a:c8:ed:a7:90:d6:e0: af:b1:44:e2:5f:90:75:12:f7:42:2d:6f:2f:04:7a: 19:c6:df:28:61:ad:6e:ab:ae:be:b6:ce:4d:cf:e6: 75:02:d3:7f:19:f1:e3:03:e4:28:9d:58:fa:d5:fe: 77:80:db:75:ce:27:1f:82:e8:d5:62:2f:3b:5c:50: 41:94:5d:66:85:01:9b:a8:c1:96:11:b8:fc:11:4d: 5a:11:c3:af:bf:7d:18:18:1c:2d:47:1c:63:04:32: e2:0c:d7:22:d0:03:d3:51:c4:5f:7e:1b:87:2d:b2: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C1:23:C2:FE:A2:A3:85:DC:BA:E7:2F:89:04:5F:A5:1F:6E:9F:23 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xcEjwv6io4XcuucviQRfpR9unyM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 3f:9f:a8:52:f3:cd:38:e8:79:53:94:d0:75:5d:53:fc:46:3f: c8:20:a1:ab:96:63:12:38:44:58:2c:5d:8d:fc:77:b0:9d:a2: a1:36:03:8a:91:07:0c:73:b3:a1:e5:44:95:3c:a3:39:01:fa: 73:05:78:79:6c:a4:e2:a9:22:4b:64:d4:b0:a3:ec:d3:c0:44: e8:7e:79:d3:93:5e:57:83:32:fc:77:96:f6:90:57:24:7c:46: da:d9:3e:e7:a7:75:76:0c:72:30:ee:c0:49:62:3c:7e:45:0b: bf:81:50:d5:60:28:94:40:45:34:ea:e1:a3:82:94:fd:04:50: cf:97:6d:86:f8:7b:37:b2:4f:aa:fe:3e:dc:8c:45:7f:27:5a: fd:c0:b9:29:47:32:6b:3a:13:c9:a4:ad:35:83:1a:78:85:9e: f0:7f:67:b8:00:8d:6c:a6:58:f2:cd:b3:c8:b8:d4:0c:89:9e: d6:af:69:46:6d:91:96:5f:46:7a:b6:f2:a8:8c:a0:67:d9:c4: bb:9b:71:82:d1:53:f6:8b:b2:60:44:b9:5f:36:70:b6:ad:3b: fe:c4:31:3d:74:93:68:6e:66:90:00:6e:0e:0b:3f:4a:c8:69: 82:31:2b:42:79:07:01:18:13:8c:1c:23:49:2b:e8:2d:1b:de: 14:b2:cd:e5 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICJukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1QzEyM0MyRkVBMkEz ODVEQ0JBRTcyRjg5MDQ1RkE1MUY2RTlGMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn1N+OyO0e9nSpwd5jKeRp9jls+T5PDeIZtvCktgZp0tgxYZSA ajhZmyOM6ILpZlcC2g/z2Vd+LfvFFGWtFrPhppsOKKLqy/qKBdKmkDWm3Ox+odcP 06O8706YvXd9ATudyJ720bCsKq77FSsmh48N3xfptfmui0LtnTzBYH7980Ri6d5x 0OILdEapMwFzmsjtp5DW4K+xROJfkHUS90Itby8EehnG3yhhrW6rrr62zk3P5nUC 038Z8eMD5CidWPrV/neA23XOJx+C6NViLztcUEGUXWaFAZuowZYRuPwRTVoRw6+/ fRgYHC1HHGMEMuIM1yLQA9NRxF9+G4ctshghAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUxcEjwv6io4XcuucviQRfpR9unyMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hjRWp3djZpbzRYY3V1Y3Zp UVJmcFI5dW55TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B0sAMA0GCSqGSIb3DQEBCwUAA4IBAQA/n6hS88046HlTlNB1XVP8Rj/IIKGrlmMS OERYLF2N/HewnaKhNgOKkQcMc7Oh5USVPKM5AfpzBXh5bKTiqSJLZNSwo+zTwETo fnnTk15XgzL8d5b2kFckfEba2T7np3V2DHIw7sBJYjx+RQu/gVDVYCiUQEU06uGj gpT9BFDPl22G+Hs3sk+q/j7cjEV/J1r9wLkpRzJrOhPJpK01gxp4hZ7wf2e4AI1s pljyzbPIuNQMiZ7Wr2lGbZGWX0Z6tvKojKBn2cS7m3GC0VP2i7JgRLlfNnC2rTv+ xDE9dJNobmaQAG4OCz9KyGmCMStCeQcBGBOMHCNJK+gtG94Uss3l -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:40 2025 by rpki-client