$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-661q9yKwcirCJm90QZHg47rFjc.roa File: -661q9yKwcirCJm90QZHg47rFjc.roa (raw, json) Hash identifier: Q3I32/bXFxjtXv174Vl4pYjvSrzNO/iKKEscFKoZmT4= Subject key identifier: FB:AE:B5:AB:DC:8A:C1:C8:AB:08:99:BD:D1:06:47:83:8E:EB:16:37 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2658 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-661q9yKwcirCJm90QZHg47rFjc.roa Signing time: Fri 22 Aug 2025 08:42:50 +0000 ROA not before: Fri 22 Aug 2025 08:42:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 122.100.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9816 (0x2658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FBAEB5ABDC8AC1C8AB0899BDD10647838EEB1637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:ff:ff:2c:d5:b0:ea:43:3f:a2:6a:f7:f4: bb:dc:a2:d5:3c:05:6b:25:e2:6e:16:9e:92:c2:fd: d0:b2:b2:42:07:6e:64:c4:b0:3c:39:cc:ae:a3:55: 96:ef:e0:64:d5:72:8d:73:8a:18:05:4d:36:db:c6: 55:8f:09:90:08:00:66:a8:5d:22:10:b1:e4:f0:ea: 29:09:d0:4c:3b:34:91:40:b3:d1:9f:95:d4:83:a1: d0:10:aa:7d:9d:1a:89:06:a9:4d:a9:20:bb:4f:3b: 9e:57:92:45:32:9c:9c:81:d7:62:6f:3e:88:94:0b: a7:b2:20:50:1d:b8:cf:cb:ed:e4:2a:3d:b1:8d:8c: 0f:fc:d6:d7:35:0b:c5:d7:30:ad:8f:1c:38:7a:0b: 92:5f:c5:cd:14:d1:56:79:e7:90:87:c4:10:c5:3f: 91:df:70:09:82:da:8c:b6:cd:12:15:f2:e1:7a:29: c5:aa:d8:d4:16:ae:bc:e0:93:a4:4b:86:0c:4f:89: c8:69:91:c7:98:c9:e2:ab:6e:89:13:cc:38:3e:4e: d4:fc:14:60:69:c2:4e:97:dd:d9:a4:bb:ce:ab:1d: 54:81:d2:26:54:ed:84:5a:5c:fc:45:e9:e6:a3:53: d2:0d:e6:b2:7e:35:28:5e:35:8f:3f:c9:06:03:05: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AE:B5:AB:DC:8A:C1:C8:AB:08:99:BD:D1:06:47:83:8E:EB:16:37 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-661q9yKwcirCJm90QZHg47rFjc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.104.0/21 Signature Algorithm: sha256WithRSAEncryption 14:1d:8d:96:e3:c1:ad:09:69:bf:c8:6e:af:44:d9:f1:ce:c2: bc:3e:26:08:0e:77:d7:5f:a3:8a:33:47:d0:b3:b1:15:2f:59: 9f:69:4e:cf:2b:e1:a3:1e:ca:3a:10:07:71:12:cd:76:33:97: 32:15:07:cc:e9:ea:7a:1d:7f:a1:14:a1:a5:4b:7a:1c:04:1f: e2:13:34:9b:e0:7b:bf:2f:2d:7b:71:64:39:33:1e:14:03:88: 06:cc:bc:85:56:16:7c:f8:02:2d:7d:ea:9d:6e:10:5d:df:e9: 70:c3:b3:c6:e5:41:83:a8:ba:ae:2d:10:a9:8a:36:f1:c1:0f: f5:cd:d2:11:c0:51:f1:12:e8:ea:42:83:19:dc:10:bb:e4:da: d2:bd:19:83:45:9e:7a:cb:47:9f:5b:fd:b6:f5:25:3b:10:54: 8f:85:2b:b1:a2:42:73:c0:ec:af:dc:84:83:c7:b6:6e:54:f7: f9:b2:b2:30:f3:0f:90:4b:27:b0:b1:39:8b:6b:82:c9:56:06: 2f:43:24:1b:16:19:97:fd:4b:d8:ca:a3:f4:ab:4e:02:8a:2c: 57:72:43:ce:30:bf:e6:51:9a:3e:45:08:c3:3d:0a:61:af:4f: b4:c7:ca:e4:30:b3:84:ab:55:ad:5a:13:4b:be:9a:4d:30:db: e2:d7:4f:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZCQUVCNUFCREM4QUMx QzhBQjA4OTlCREQxMDY0NzgzOEVFQjE2MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC+///LNWw6kM/omr39LvcotU8BWsl4m4WnpLC/dCyskIHbmTE sDw5zK6jVZbv4GTVco1zihgFTTbbxlWPCZAIAGaoXSIQseTw6ikJ0Ew7NJFAs9Gf ldSDodAQqn2dGokGqU2pILtPO55XkkUynJyB12JvPoiUC6eyIFAduM/L7eQqPbGN jA/81tc1C8XXMK2PHDh6C5Jfxc0U0VZ555CHxBDFP5HfcAmC2oy2zRIV8uF6KcWq 2NQWrrzgk6RLhgxPichpkceYyeKrbokTzDg+TtT8FGBpwk6X3dmku86rHVSB0iZU 7YRaXPxF6eajU9IN5rJ+NSheNY8/yQYDBTy9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+661q9yKwcirCJm90QZHg47rFjcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy02NjFxOXlLd2NpckNKbTkw UVpIZzQ3ckZqYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 ZGgwDQYJKoZIhvcNAQELBQADggEBABQdjZbjwa0Jab/Ibq9E2fHOwrw+JggOd9df o4ozR9CzsRUvWZ9pTs8r4aMeyjoQB3ESzXYzlzIVB8zp6nodf6EUoaVLehwEH+IT NJvge78vLXtxZDkzHhQDiAbMvIVWFnz4Ai196p1uEF3f6XDDs8blQYOouq4tEKmK NvHBD/XN0hHAUfES6OpCgxncELvk2tK9GYNFnnrLR59b/bb1JTsQVI+FK7GiQnPA 7K/chIPHtm5U9/mysjDzD5BLJ7CxOYtrgslWBi9DJBsWGZf9S9jKo/SrTgKKLFdy Q84wv+ZRmj5FCMM9CmGvT7THyuQws4SrVa1aE0u+mk0w2+LXT9o= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:03 2025 by rpki-client