$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zSDx1sJpQfX-_eyITIvR16uvcHE.roa File: zSDx1sJpQfX-_eyITIvR16uvcHE.roa (raw, json) Hash identifier: 1WonnMfUJPckryNdpPuFwlWWPhM6ciuwr+hFFVHlntE= Subject key identifier: CD:20:F1:D6:C2:69:41:F5:FE:FD:EC:88:4C:8B:D1:D7:AB:AF:70:71 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26F3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zSDx1sJpQfX-_eyITIvR16uvcHE.roa Signing time: Fri 22 Aug 2025 08:43:25 +0000 ROA not before: Fri 22 Aug 2025 08:43:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 49.158.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9971 (0x26f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CD20F1D6C26941F5FEFDEC884C8BD1D7ABAF7071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:7f:4f:50:d4:7d:3d:2d:12:1a:89:c8:48: 10:4c:65:0f:85:a8:ea:fb:b6:19:5c:fe:d0:e8:f2: 05:5a:ba:5b:6a:fc:7b:75:33:3b:06:43:bc:f9:05: 58:52:e9:24:5b:d2:31:89:b9:3e:1c:03:d9:ed:2d: cf:3f:4c:2d:c8:2f:7e:74:31:9d:33:49:3c:ad:bf: 01:41:59:60:cd:e6:66:48:2c:ae:4c:db:cd:cd:06: b1:3a:41:0f:aa:37:30:7a:29:b9:d0:f1:7e:a0:7c: 22:4b:cd:fb:44:75:76:99:9a:7b:27:f4:fa:88:f6: c6:82:9e:64:d9:27:40:eb:19:73:6a:b8:64:b2:03: c5:94:7d:3c:03:be:04:2d:72:12:7b:0f:30:2c:5c: c1:b5:39:27:c3:fa:9f:a4:45:b8:93:fa:0e:b2:a0: 79:38:39:78:a3:f7:78:8f:70:27:a8:3e:c7:db:59: 65:08:05:7c:b0:33:f8:6e:d3:0e:53:4e:c8:a8:40: 97:a2:45:33:cf:bb:51:74:cb:0c:e9:be:30:6b:26: 5a:36:c8:8b:b4:66:57:42:48:b2:8a:15:70:99:58: a1:f7:b8:f6:8d:14:d3:e1:eb:2e:3d:6d:16:9d:6a: 81:82:d0:39:0c:19:7d:4f:8f:0e:20:85:fe:dd:05: 78:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:F1:D6:C2:69:41:F5:FE:FD:EC:88:4C:8B:D1:D7:AB:AF:70:71 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zSDx1sJpQfX-_eyITIvR16uvcHE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.224.0/21 Signature Algorithm: sha256WithRSAEncryption 16:00:b8:c5:37:7b:f3:6f:c7:3c:77:8a:02:7b:85:79:a4:dc: 7f:08:5e:aa:6b:59:04:73:8b:2c:54:fc:55:a3:37:c6:00:45: 76:e4:27:24:0e:71:e9:33:65:f4:dc:f6:74:6e:99:89:2e:96: 8e:b2:b6:6a:fc:d0:5b:86:ba:2c:f2:90:ae:b3:f2:b3:f2:d9: bc:e5:c4:6c:45:06:9d:d9:88:55:a5:0f:9d:94:e7:9f:f0:89: df:f1:89:3c:14:84:4f:ad:9f:9b:39:31:01:c4:89:d5:6e:86: a1:4b:b1:77:3d:ca:1e:04:5f:b0:7d:65:5d:c7:33:cf:1d:1f: 4f:66:f4:b9:d7:fc:38:3d:44:57:a4:94:ff:6d:1c:d7:af:6b: b2:c3:7a:76:63:63:26:10:f8:21:71:c8:66:11:cf:a1:b6:51: 43:ce:a9:ce:9d:cd:15:1a:68:c6:61:0e:c4:3a:1f:98:6a:5e: e2:66:ce:f5:a2:52:a6:58:52:52:17:c4:41:42:c1:55:bc:e2: 66:6b:0a:8b:bf:59:93:c0:dc:2d:99:95:f3:cd:5a:1c:1b:03: 82:6d:0f:33:be:15:4f:ae:18:8e:7b:2f:ab:d9:dd:2a:07:4c: 73:c5:a8:d7:20:62:cd:4b:08:25:3a:00:1f:be:aa:07:e2:9d: 7f:8d:37:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENEMjBGMUQ2QzI2OTQx RjVGRUZERUM4ODRDOEJEMUQ3QUJBRjcwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLLH9PUNR9PS0SGonISBBMZQ+FqOr7thlc/tDo8gVaultq/Ht1 MzsGQ7z5BVhS6SRb0jGJuT4cA9ntLc8/TC3IL350MZ0zSTytvwFBWWDN5mZILK5M 283NBrE6QQ+qNzB6KbnQ8X6gfCJLzftEdXaZmnsn9PqI9saCnmTZJ0DrGXNquGSy A8WUfTwDvgQtchJ7DzAsXMG1OSfD+p+kRbiT+g6yoHk4OXij93iPcCeoPsfbWWUI BXywM/hu0w5TTsioQJeiRTPPu1F0ywzpvjBrJlo2yIu0ZldCSLKKFXCZWKH3uPaN FNPh6y49bRadaoGC0DkMGX1Pjw4ghf7dBXiLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzSDx1sJpQfX+/eyITIvR16uvcHEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3pTRHgxc0pwUWZYLV9leUlU SXZSMTZ1dmNIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nuAwDQYJKoZIhvcNAQELBQADggEBABYAuMU3e/Nvxzx3igJ7hXmk3H8IXqprWQRz iyxU/FWjN8YARXbkJyQOcekzZfTc9nRumYkulo6ytmr80FuGuizykK6z8rPy2bzl xGxFBp3ZiFWlD52U55/wid/xiTwUhE+tn5s5MQHEidVuhqFLsXc9yh4EX7B9ZV3H M88dH09m9LnX/Dg9RFeklP9tHNeva7LDenZjYyYQ+CFxyGYRz6G2UUPOqc6dzRUa aMZhDsQ6H5hqXuJmzvWiUqZYUlIXxEFCwVW84mZrCou/WZPA3C2ZlfPNWhwbA4Jt DzO+FU+uGI57L6vZ3SoHTHPFqNcgYs1LCCU6AB++qgfinX+NN04= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:30 2025 by rpki-client