$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zHxGKJ1YRl_uvIcEWQznIXOOSqc.roa File: zHxGKJ1YRl_uvIcEWQznIXOOSqc.roa (raw, json) Hash identifier: KogNhTEwpzbdH7cJwKSjjRLHZPe7vCQiNvJKiNO0ssM= Subject key identifier: CC:7C:46:28:9D:58:46:5F:EE:BC:87:04:59:0C:E7:21:73:8E:4A:A7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2710 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zHxGKJ1YRl_uvIcEWQznIXOOSqc.roa Signing time: Fri 22 Aug 2025 08:43:32 +0000 ROA not before: Fri 22 Aug 2025 08:43:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 114.198.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10000 (0x2710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CC7C46289D58465FEEBC8704590CE721738E4AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1c:18:57:c8:d3:e0:b7:4c:ce:0b:db:64:e2: a4:65:80:86:2c:2c:be:86:05:28:78:be:de:30:b4: 79:1e:32:e7:f2:67:5e:4e:6c:35:34:c8:cb:f5:e1: 29:7e:12:f4:40:66:b8:3d:59:25:2f:ca:c4:16:6e: 51:fa:83:19:e6:96:7f:90:5d:c9:e7:7c:28:74:42: 44:2b:a4:5f:84:15:6e:3a:86:f0:88:59:f0:ea:11: 4c:23:7d:d3:38:f8:53:a0:46:e8:9a:9e:b0:74:fc: f2:97:90:d9:39:dd:35:df:47:bf:03:95:ca:f0:eb: 70:a4:da:ed:88:80:2b:34:0d:e9:e7:ef:f6:a1:b5: 7d:08:ea:f6:82:6d:36:e6:64:42:f7:a9:b6:65:cf: c8:11:b7:05:c3:89:4c:d8:83:75:b3:fd:95:b9:fc: e8:f6:4a:8c:b4:62:20:b7:4a:0b:6a:a8:35:b6:56: f1:da:1e:72:55:aa:9b:c3:bf:90:39:2c:b1:3e:98: 13:c4:f9:53:22:1a:3a:84:dc:f7:eb:c9:93:f5:2d: c0:78:e9:cd:93:cb:29:b4:63:50:62:7e:5f:d7:3f: ba:3f:59:18:4d:aa:e9:88:a1:77:8a:5f:44:0f:00: eb:1e:b5:ae:d3:54:2c:c7:38:e7:c6:db:64:af:5b: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7C:46:28:9D:58:46:5F:EE:BC:87:04:59:0C:E7:21:73:8E:4A:A7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zHxGKJ1YRl_uvIcEWQznIXOOSqc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.165.0/24 Signature Algorithm: sha256WithRSAEncryption 71:9d:57:9b:d4:c9:78:97:4a:1f:44:7f:38:4a:cb:56:fd:ef: 64:19:98:86:e9:09:d9:ea:ad:17:7e:4c:15:70:a0:ff:03:4f: 65:be:45:0c:4f:27:f0:e1:2b:1c:7c:2b:25:ea:6c:ad:01:8f: ca:80:f2:84:6f:e6:6a:0f:eb:2f:30:12:5e:64:b3:a0:09:1d: 70:01:bb:b7:65:48:19:b3:04:98:c3:47:1b:51:25:e1:3a:20: bf:49:13:cd:00:6d:8b:8a:bd:3f:f3:e8:4f:f3:8a:66:8a:58: 03:1d:0b:c6:f2:d3:d2:cf:c5:c2:b4:e0:17:a1:b0:9d:b4:fd: ed:81:e5:84:3a:02:2a:f3:7b:71:8f:17:89:30:d5:79:e7:36: e4:f7:e5:64:c5:40:d2:4a:3b:61:3a:d4:99:fe:3c:9a:aa:5f: 83:98:72:86:bb:44:c6:2d:6c:6a:d9:b1:92:e3:f4:38:50:b1: a3:0c:0a:31:16:21:30:41:4f:b0:a4:91:4b:c6:32:df:a0:0a: 71:a1:b6:37:f0:6b:19:3e:34:e3:53:9e:61:c1:bb:57:75:93: 49:b6:ec:3f:cb:f0:dc:28:ac:c0:29:0a:ca:79:fc:95:d1:e7: 49:92:90:7b:9d:23:af:c5:cc:c1:cc:9b:0a:cc:c5:a2:72:24: c4:5e:4b:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENDN0M0NjI4OUQ1ODQ2 NUZFRUJDODcwNDU5MENFNzIxNzM4RTRBQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkHBhXyNPgt0zOC9tk4qRlgIYsLL6GBSh4vt4wtHkeMufyZ15O bDU0yMv14Sl+EvRAZrg9WSUvysQWblH6gxnmln+QXcnnfCh0QkQrpF+EFW46hvCI WfDqEUwjfdM4+FOgRuianrB0/PKXkNk53TXfR78Dlcrw63Ck2u2IgCs0Denn7/ah tX0I6vaCbTbmZEL3qbZlz8gRtwXDiUzYg3Wz/ZW5/Oj2Soy0YiC3SgtqqDW2VvHa HnJVqpvDv5A5LLE+mBPE+VMiGjqE3PfryZP1LcB46c2Tyym0Y1Bifl/XP7o/WRhN qumIoXeKX0QPAOseta7TVCzHOOfG22SvW6vzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzHxGKJ1YRl/uvIcEWQznIXOOSqcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3pIeEdLSjFZUmxfdXZJY0VX UXpuSVhPT1NxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABy xqUwDQYJKoZIhvcNAQELBQADggEBAHGdV5vUyXiXSh9EfzhKy1b972QZmIbpCdnq rRd+TBVwoP8DT2W+RQxPJ/DhKxx8KyXqbK0Bj8qA8oRv5moP6y8wEl5ks6AJHXAB u7dlSBmzBJjDRxtRJeE6IL9JE80AbYuKvT/z6E/zimaKWAMdC8by09LPxcK04Beh sJ20/e2B5YQ6Airze3GPF4kw1XnnNuT35WTFQNJKO2E61Jn+PJqqX4OYcoa7RMYt bGrZsZLj9DhQsaMMCjEWITBBT7CkkUvGMt+gCnGhtjfwaxk+NONTnmHBu1d1k0m2 7D/L8NworMApCsp5/JXR50mSkHudI6/FzMHMmwrMxaJyJMReSzU= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:36 2025 by rpki-client