$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yg1UWX1dg1StXMjjPshiTUC4_w0.roa File: yg1UWX1dg1StXMjjPshiTUC4_w0.roa (raw, json) Hash identifier: eAlTvz6Mmo7RRkdIdBprjVGWHxIXybw7c6ux5qxOrHU= Subject key identifier: CA:0D:54:59:7D:5D:83:54:AD:5C:C8:E3:3E:C8:62:4D:40:B8:FF:0D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25F5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yg1UWX1dg1StXMjjPshiTUC4_w0.roa Signing time: Fri 22 Aug 2025 08:42:26 +0000 ROA not before: Fri 22 Aug 2025 08:42:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.159.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9717 (0x25f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA0D54597D5D8354AD5CC8E33EC8624D40B8FF0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:88:ee:ca:de:e0:b3:ef:45:f0:b1:81:33: 40:32:34:6a:49:17:8c:29:a0:bc:36:77:da:d1:76: a9:25:5c:4f:f3:37:84:90:12:d4:b4:49:7d:f3:c3: 09:41:f1:c4:4e:d7:d5:21:80:70:cb:25:d0:33:33: 84:df:75:a8:dc:ee:48:91:0c:81:61:a4:23:db:b4: 2d:73:1d:c4:62:62:ba:d6:6c:ea:9a:54:91:04:77: eb:ff:92:df:cf:a8:35:6d:58:e2:a5:cc:7f:9f:04: e8:32:ad:8f:48:74:75:3c:fd:d7:72:1d:70:e8:75: 6d:19:ce:08:4a:57:ff:1b:72:d5:14:f8:f4:c7:66: 30:91:d0:66:3f:2c:56:99:5b:4d:d7:76:83:ec:5d: a4:b1:d5:59:54:bd:67:8d:5a:e0:4c:39:40:bf:e7: 0e:70:53:9f:a0:59:d5:e6:94:cc:99:17:78:c9:b3: 53:04:4d:a5:c4:af:98:61:33:08:66:c4:04:12:72: 85:2a:51:7c:47:79:b6:09:65:35:3a:92:9c:39:62: d9:e7:ab:c6:93:cb:f3:93:94:88:42:8e:d3:5f:bd: f1:6d:eb:78:87:e7:0b:f9:9f:9b:00:63:f9:8e:6d: 4b:6d:38:42:4c:bb:fd:5d:9d:3f:61:6b:3d:22:0b: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0D:54:59:7D:5D:83:54:AD:5C:C8:E3:3E:C8:62:4D:40:B8:FF:0D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yg1UWX1dg1StXMjjPshiTUC4_w0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.24.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:ed:b2:c0:41:f5:58:8d:e0:25:bc:14:d4:dd:70:68:9b:b1: 17:3f:b6:82:d5:73:e8:52:e9:68:67:46:5a:be:80:58:bc:d7: a4:78:4b:f6:cf:ce:f3:5f:f0:34:69:6b:ce:22:9e:0d:1e:8b: d2:81:a5:4d:d3:02:bd:85:88:dd:dd:e1:10:f2:9f:dc:3b:27: 12:79:b6:0f:24:a1:69:de:dd:c4:48:09:14:11:72:1e:df:d4: 59:af:0b:f8:bf:77:7f:88:58:86:7f:32:2b:bc:1c:b9:cf:da: 57:1b:5d:21:4f:c2:f7:c3:b3:1e:c8:91:3e:13:1a:a5:41:cc: a6:fa:54:59:22:51:d2:bd:59:04:f5:b9:2d:1c:68:8e:39:2a: 43:93:a1:03:57:6c:2e:1c:1a:40:30:ea:d7:e8:e6:a1:67:1c: 34:3a:0c:21:18:fb:5e:97:0c:92:c0:17:23:ce:50:b3:ca:b6: 25:a7:a6:3b:21:02:0f:9f:28:be:37:1a:e5:0f:36:f0:bc:ee: d8:16:03:59:80:0d:8e:ca:06:26:d9:b2:72:f9:b9:60:2e:16: 4d:70:4a:73:d0:e3:05:14:f9:75:79:b2:a0:a6:ab:a9:07:24: ec:50:c2:7f:f4:57:8b:2f:5b:b6:13:8f:4f:79:ed:49:33:f1: 6d:b5:58:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJfUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBMEQ1NDU5N0Q1RDgz NTRBRDVDQzhFMzNFQzg2MjRENDBCOEZGMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRp4juyt7gs+9F8LGBM0AyNGpJF4wpoLw2d9rRdqklXE/zN4SQ EtS0SX3zwwlB8cRO19UhgHDLJdAzM4Tfdajc7kiRDIFhpCPbtC1zHcRiYrrWbOqa VJEEd+v/kt/PqDVtWOKlzH+fBOgyrY9IdHU8/ddyHXDodW0ZzghKV/8bctUU+PTH ZjCR0GY/LFaZW03XdoPsXaSx1VlUvWeNWuBMOUC/5w5wU5+gWdXmlMyZF3jJs1ME TaXEr5hhMwhmxAQScoUqUXxHebYJZTU6kpw5Ytnnq8aTy/OTlIhCjtNfvfFt63iH 5wv5n5sAY/mObUttOEJMu/1dnT9haz0iC0qNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyg1UWX1dg1StXMjjPshiTUC4/w0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lnMVVXWDFkZzFTdFhNampQ c2hpVFVDNF93MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nxgwDQYJKoZIhvcNAQELBQADggEBAAztssBB9ViN4CW8FNTdcGibsRc/toLVc+hS 6WhnRlq+gFi816R4S/bPzvNf8DRpa84ing0ei9KBpU3TAr2FiN3d4RDyn9w7JxJ5 tg8koWne3cRICRQRch7f1FmvC/i/d3+IWIZ/Miu8HLnP2lcbXSFPwvfDsx7IkT4T GqVBzKb6VFkiUdK9WQT1uS0caI45KkOToQNXbC4cGkAw6tfo5qFnHDQ6DCEY+16X DJLAFyPOULPKtiWnpjshAg+fKL43GuUPNvC87tgWA1mADY7KBibZsnL5uWAuFk1w SnPQ4wUU+XV5sqCmq6kHJOxQwn/0V4svW7YTj0957Ukz8W21WBs= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:27 2025 by rpki-client