$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ycFRCpGXjtlnDBtOREmqAQeWfMA.roa File: ycFRCpGXjtlnDBtOREmqAQeWfMA.roa (raw, json) Hash identifier: Sqb7KVk/FnOSfk90jdsCE3+nfe1RfpQTJvyNJYIJmfw= Subject key identifier: C9:C1:51:0A:91:97:8E:D9:67:0C:1B:4E:44:49:AA:01:07:96:7C:C0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 273E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ycFRCpGXjtlnDBtOREmqAQeWfMA.roa Signing time: Fri 22 Aug 2025 08:43:41 +0000 ROA not before: Fri 22 Aug 2025 08:43:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 122.254.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10046 (0x273e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C9C1510A91978ED9670C1B4E4449AA0107967CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:fc:d5:3a:e6:b9:ec:f8:df:ac:ba:0f:15: 89:76:d1:0d:17:18:4b:d9:00:d8:04:41:e4:b1:b0: 0e:a5:21:54:cf:4a:ed:a0:a3:60:c5:81:09:60:1e: 2a:61:67:d2:e8:2f:b6:cd:60:5d:95:20:be:50:7d: 2f:cf:16:26:26:77:7a:9e:52:0c:ad:bd:84:2a:c2: 4d:e5:25:6f:11:0a:2f:9c:10:bd:d6:41:a8:a7:7c: d6:15:f6:46:2b:b8:fd:49:c5:20:70:e7:94:de:71: 18:5e:76:b3:0c:7d:b4:10:a2:c4:b8:f7:a0:85:b0: c6:b1:fc:57:ba:20:0e:60:ae:35:cc:ad:69:a0:56: a0:c8:1f:06:57:44:15:7f:c4:c5:ce:bd:db:a3:34: 40:c8:b9:bb:b2:85:1e:fd:e2:7f:69:54:e4:a2:43: 45:ed:66:79:07:dd:89:99:e6:81:e6:8c:a8:7e:bc: 97:f7:8b:a5:3b:71:bf:e0:ac:35:87:37:e7:ba:f0: 5d:65:79:a7:65:4a:f4:59:07:d9:8f:17:0b:bf:de: ed:58:c0:fc:a4:ce:f6:78:b0:19:22:81:20:fc:9b: 94:5f:45:21:87:ba:c7:48:a0:9d:57:82:53:58:f8: 95:35:e7:e5:cc:b2:cc:6f:50:ce:af:31:bc:e7:1a: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:51:0A:91:97:8E:D9:67:0C:1B:4E:44:49:AA:01:07:96:7C:C0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ycFRCpGXjtlnDBtOREmqAQeWfMA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.32.0/21 Signature Algorithm: sha256WithRSAEncryption 77:a3:bd:04:80:a6:04:27:ce:18:ef:87:d2:11:f1:ee:86:79: 54:0b:fe:d3:b1:81:11:d5:6a:96:38:bc:77:01:61:dd:c3:bd: 17:77:31:19:09:ee:64:0a:64:68:8a:50:b9:b5:76:ad:a0:1c: 06:55:61:8f:59:df:c4:65:f7:57:3a:20:0a:28:ed:27:bf:91: 84:7c:15:86:db:6f:b7:9b:10:27:11:07:27:2d:89:df:a6:a8: 02:17:d9:63:6f:7b:25:a3:1e:64:f3:aa:1b:73:b3:f4:06:ad: ec:e9:48:c8:fb:c4:79:63:e0:f0:69:c1:75:60:e8:ac:75:16: 27:1b:87:ca:de:34:4e:cb:0f:08:8d:78:5f:5e:85:4d:e9:45: e4:0a:5a:77:c8:9e:b1:ad:cc:ba:3c:f5:68:17:8a:43:ee:c1: da:f7:1a:5f:c6:b6:eb:7b:f2:9a:a1:ab:b3:f8:90:1f:2f:4f: a5:aa:dd:48:60:96:d3:29:20:a6:0a:20:44:dc:5d:5c:fc:1a: 2c:3d:ed:42:56:c3:ae:5f:c4:90:60:90:13:f9:3a:e3:25:db: f6:4f:9e:9b:c2:7d:30:6c:3a:12:4c:bb:11:5e:b6:82:0d:7c: c7:b7:d6:08:d0:8d:18:9a:44:38:41:c4:d5:ce:1a:f4:18:32: 9b:6a:cb:2a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM5QzE1MTBBOTE5NzhF RDk2NzBDMUI0RTQ0NDlBQTAxMDc5NjdDQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyAfzVOua57PjfrLoPFYl20Q0XGEvZANgEQeSxsA6lIVTPSu2g o2DFgQlgHiphZ9LoL7bNYF2VIL5QfS/PFiYmd3qeUgytvYQqwk3lJW8RCi+cEL3W QainfNYV9kYruP1JxSBw55TecRhedrMMfbQQosS496CFsMax/Fe6IA5grjXMrWmg VqDIHwZXRBV/xMXOvdujNEDIubuyhR794n9pVOSiQ0XtZnkH3YmZ5oHmjKh+vJf3 i6U7cb/grDWHN+e68F1leadlSvRZB9mPFwu/3u1YwPykzvZ4sBkigSD8m5RfRSGH usdIoJ1XglNY+JU15+XMssxvUM6vMbznGrVFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUycFRCpGXjtlnDBtOREmqAQeWfMAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ljRlJDcEdYanRsbkRCdE9S RW1xQVFlV2ZNQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /iAwDQYJKoZIhvcNAQELBQADggEBAHejvQSApgQnzhjvh9IR8e6GeVQL/tOxgRHV apY4vHcBYd3DvRd3MRkJ7mQKZGiKULm1dq2gHAZVYY9Z38Rl91c6IAoo7Se/kYR8 FYbbb7ebECcRByctid+mqAIX2WNveyWjHmTzqhtzs/QGrezpSMj7xHlj4PBpwXVg 6Kx1Ficbh8reNE7LDwiNeF9ehU3pReQKWnfInrGtzLo89WgXikPuwdr3Gl/Gtut7 8pqhq7P4kB8vT6Wq3UhgltMpIKYKIETcXVz8Giw97UJWw65fxJBgkBP5OuMl2/ZP npvCfTBsOhJMuxFetoINfMe31gjQjRiaRDhBxNXOGvQYMptqyyo= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:29 2025 by rpki-client