$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0F-Mdid-kRjYKS_jPqE7ycXMOcg.roa File: 0F-Mdid-kRjYKS_jPqE7ycXMOcg.roa (raw, json) Hash identifier: /KITvVlYZjFmWlIPJt6zBvnO0Yr3HHKbJu69Yv5tra4= Subject key identifier: D0:5F:8C:76:27:7E:91:18:D8:29:2F:E3:3E:A1:3B:C9:C5:CC:39:C8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2696 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0F-Mdid-kRjYKS_jPqE7ycXMOcg.roa Signing time: Fri 22 Aug 2025 08:43:05 +0000 ROA not before: Fri 22 Aug 2025 08:43:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 61.64.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9878 (0x2696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D05F8C76277E9118D8292FE33EA13BC9C5CC39C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:59:c1:f3:2a:79:72:ef:3c:e5:a9:1f:f3: a6:ee:9c:de:f4:70:87:6d:46:84:cd:bf:d5:7c:33: 06:d2:37:35:06:8a:e1:3a:2f:e0:d5:54:7a:86:10: ba:2d:c7:88:f6:c3:a2:97:57:04:3a:f4:69:bb:69: 10:0c:cc:f3:5b:e3:eb:d4:b3:84:6b:67:03:e1:8d: 07:4c:28:9c:26:1d:ba:66:e7:3f:f0:51:2f:bb:77: b7:a6:c9:47:c1:0c:f7:b8:1b:f1:9a:99:9d:3f:36: a4:b5:d5:93:87:c0:b7:8d:0b:23:82:36:31:ef:82: e5:d8:cf:dd:ed:95:b2:ae:25:4e:47:e7:fd:de:8d: 0d:69:96:c8:f1:a7:4b:e4:7c:fa:17:1d:3b:22:a4: d6:ef:38:ea:10:a9:9f:9b:06:25:8d:b0:9a:31:f7: 74:d8:6e:30:c8:04:9e:4c:b0:b1:d1:34:f5:aa:3d: dc:70:42:63:79:98:e7:0b:34:5b:81:5f:87:86:92: 18:c4:ad:2f:b4:e7:54:58:d1:42:a0:b9:9d:1d:77: a9:8b:c8:92:78:92:99:21:57:8e:70:9a:cf:3e:d2: 8a:7f:86:55:f0:e1:54:26:68:10:a4:54:5e:5a:ba: 5b:03:70:aa:6f:f8:e7:61:92:1b:4d:62:c3:a8:9a: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5F:8C:76:27:7E:91:18:D8:29:2F:E3:3E:A1:3B:C9:C5:CC:39:C8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0F-Mdid-kRjYKS_jPqE7ycXMOcg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.8.0/21 Signature Algorithm: sha256WithRSAEncryption 50:bb:7f:df:d1:6b:ac:5e:77:87:28:25:4e:59:8b:af:0b:93: a5:2f:78:81:0e:11:5c:59:a1:fa:d4:80:9a:3a:dc:9b:13:f1: 73:65:b2:91:0a:2c:d0:9b:5a:8e:49:ae:cd:9e:8d:d3:b4:5c: 07:c4:a7:36:58:c7:46:5b:d3:c2:06:3a:8a:56:1c:e2:a5:71: df:b6:19:fc:57:65:1f:11:3b:fa:60:25:eb:d9:ea:4c:fd:88: ea:b5:28:a8:3b:55:da:47:b1:f1:60:7c:62:5a:04:9d:0c:83: 5b:dc:93:cb:65:6e:d0:ef:11:26:8f:89:e2:4e:fc:be:62:8c: 50:29:4e:08:01:fe:80:35:3c:37:1b:1e:ac:d6:40:bf:3d:69: 52:d4:c2:66:cb:1e:42:a5:eb:2f:5a:e9:87:c4:97:18:c0:b6: 08:95:fd:8e:73:df:95:28:d1:db:d7:da:04:60:c8:2f:20:d3: 7d:f5:ea:8d:c1:72:26:03:ad:42:d8:44:bb:2c:c4:51:69:34: 44:2d:b9:64:5a:12:22:69:a4:e6:23:08:7c:95:99:7c:c4:2c: 5f:a5:06:67:f1:3d:f9:9e:0e:d5:3d:ac:24:1d:19:6c:07:7e: 1d:02:9c:09:38:69:f1:cc:a0:ed:f0:56:3b:24:16:71:ea:8d: ec:98:a5:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwNUY4Qzc2Mjc3RTkx MThEODI5MkZFMzNFQTEzQkM5QzVDQzM5QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnC1nB8yp5cu885akf86bunN70cIdtRoTNv9V8MwbSNzUGiuE6 L+DVVHqGELotx4j2w6KXVwQ69Gm7aRAMzPNb4+vUs4RrZwPhjQdMKJwmHbpm5z/w US+7d7emyUfBDPe4G/GamZ0/NqS11ZOHwLeNCyOCNjHvguXYz93tlbKuJU5H5/3e jQ1plsjxp0vkfPoXHTsipNbvOOoQqZ+bBiWNsJox93TYbjDIBJ5MsLHRNPWqPdxw QmN5mOcLNFuBX4eGkhjErS+051RY0UKguZ0dd6mLyJJ4kpkhV45wms8+0op/hlXw 4VQmaBCkVF5aulsDcKpv+OdhkhtNYsOomtabAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0F+Mdid+kRjYKS/jPqE7ycXMOcgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBGLU1kaWQta1JqWUtTX2pQ cUU3eWNYTU9jZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 QAgwDQYJKoZIhvcNAQELBQADggEBAFC7f9/Ra6xed4coJU5Zi68Lk6UveIEOEVxZ ofrUgJo63JsT8XNlspEKLNCbWo5Jrs2ejdO0XAfEpzZYx0Zb08IGOopWHOKlcd+2 GfxXZR8RO/pgJevZ6kz9iOq1KKg7VdpHsfFgfGJaBJ0Mg1vck8tlbtDvESaPieJO /L5ijFApTggB/oA1PDcbHqzWQL89aVLUwmbLHkKl6y9a6YfElxjAtgiV/Y5z35Uo 0dvX2gRgyC8g03316o3BciYDrULYRLssxFFpNEQtuWRaEiJppOYjCHyVmXzELF+l BmfxPfmeDtU9rCQdGWwHfh0CnAk4afHMoO3wVjskFnHqjeyYpWE= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:45 2025 by rpki-client