$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0aV0gkZ9LmmOugzoAhEKXrFOpL8.roa File: 0aV0gkZ9LmmOugzoAhEKXrFOpL8.roa (raw, json) Hash identifier: 54cHfcjp1hymf5WwWy9rho6MhczsmZHWlQVtVgGsD6E= Subject key identifier: D1:A5:74:82:46:7D:2E:69:8E:BA:0C:E8:02:11:0A:5E:B1:4E:A4:BF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2675 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0aV0gkZ9LmmOugzoAhEKXrFOpL8.roa Signing time: Fri 22 Aug 2025 08:42:56 +0000 ROA not before: Fri 22 Aug 2025 08:42:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9845 (0x2675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D1A57482467D2E698EBA0CE802110A5EB14EA4BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:79:46:4f:48:cb:fa:98:44:7a:fc:56:f9: b4:e0:59:f5:29:15:bf:96:19:07:c4:b9:30:02:de: c3:51:34:04:05:cd:cd:86:ec:80:2a:25:5a:aa:3f: 80:bf:cd:92:29:24:2c:21:ca:6c:45:52:b4:7f:3d: d1:45:c0:3b:0e:5e:0b:4c:5d:13:cb:f0:2e:15:e5: 8e:82:54:54:87:63:65:d3:1f:4b:21:ca:66:43:56: 53:b5:57:5c:6a:bc:90:72:16:46:23:8c:4e:90:92: 7c:37:f8:80:7f:42:f1:9d:eb:4a:bf:36:51:41:25: f9:18:32:e5:d0:11:65:4c:f0:e6:88:ec:14:5c:57: dc:bd:f8:d9:78:eb:dd:50:01:b8:06:52:01:6a:68: 24:21:89:89:36:7c:1a:e1:4d:47:c3:46:c0:f6:32: ec:ed:05:0c:08:a0:fb:9e:79:65:23:8d:27:02:37: a3:47:62:9b:d2:fa:be:f6:dc:0e:c4:33:2d:aa:d2: ce:6c:26:e2:19:14:92:c3:fd:02:6f:02:b1:ba:44: 10:d9:5d:b5:01:99:52:cc:ba:be:19:dc:ab:26:a4: 28:2b:a0:cc:13:f8:6c:7d:ca:52:c6:6e:7b:f5:ca: b4:fb:f7:0a:f5:a4:35:e2:e0:9d:c7:8c:b3:23:c5: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A5:74:82:46:7D:2E:69:8E:BA:0C:E8:02:11:0A:5E:B1:4E:A4:BF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0aV0gkZ9LmmOugzoAhEKXrFOpL8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.145.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:0f:3f:08:cd:e3:14:b3:9d:9c:5c:1a:02:34:00:99:b7:7b: c9:f8:f3:06:25:36:d9:c2:4a:11:81:b5:c4:63:6e:8d:9f:26: 36:b4:92:12:40:4a:cf:27:9e:93:64:4d:b8:3a:5d:b0:ce:36: ee:0f:98:d6:02:23:ee:23:4e:bf:58:27:3d:4b:88:40:41:a8: 9c:d3:79:a6:61:17:8d:c2:ef:54:69:68:7b:0b:25:71:8f:28: eb:08:e4:09:da:ac:ec:19:a3:c0:6b:d3:f8:99:c5:e3:2a:2c: eb:d7:d3:44:81:89:20:65:b7:99:a4:9a:34:7d:91:55:ad:04: f3:2a:93:1b:fc:f4:b9:db:ee:a9:1a:03:e8:c3:83:f9:bf:12: 8f:30:7c:99:fc:9c:34:32:5f:92:1f:86:d3:35:ee:ed:61:6e: 61:80:cf:22:2e:1b:9d:63:cd:af:04:c6:b4:17:3e:1a:b5:6a: aa:d6:77:9b:c1:f4:2f:40:af:2a:bf:22:31:20:37:71:61:5e: 22:96:f2:6b:fc:88:62:97:a2:e4:c8:3b:a5:9a:e9:bf:47:04: b6:ef:fd:46:0a:5e:b3:e1:18:0f:97:a9:a7:ab:c3:db:64:c7: dd:53:d3:04:ca:83:7a:21:f2:96:fd:79:af:81:27:4c:80:9f: 90:31:1f:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxQTU3NDgyNDY3RDJF Njk4RUJBMENFODAyMTEwQTVFQjE0RUE0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJOHlGT0jL+phEevxW+bTgWfUpFb+WGQfEuTAC3sNRNAQFzc2G 7IAqJVqqP4C/zZIpJCwhymxFUrR/PdFFwDsOXgtMXRPL8C4V5Y6CVFSHY2XTH0sh ymZDVlO1V1xqvJByFkYjjE6Qknw3+IB/QvGd60q/NlFBJfkYMuXQEWVM8OaI7BRc V9y9+Nl4691QAbgGUgFqaCQhiYk2fBrhTUfDRsD2MuztBQwIoPueeWUjjScCN6NH YpvS+r723A7EMy2q0s5sJuIZFJLD/QJvArG6RBDZXbUBmVLMur4Z3KsmpCgroMwT +Gx9ylLGbnv1yrT79wr1pDXi4J3HjLMjxemnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0aV0gkZ9LmmOugzoAhEKXrFOpL8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBhVjBna1o5TG1tT3Vnem9B aEVLWHJGT3BMOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx npEwDQYJKoZIhvcNAQELBQADggEBAF4PPwjN4xSznZxcGgI0AJm3e8n48wYlNtnC ShGBtcRjbo2fJja0khJASs8nnpNkTbg6XbDONu4PmNYCI+4jTr9YJz1LiEBBqJzT eaZhF43C71RpaHsLJXGPKOsI5AnarOwZo8Br0/iZxeMqLOvX00SBiSBlt5mkmjR9 kVWtBPMqkxv89Lnb7qkaA+jDg/m/Eo8wfJn8nDQyX5IfhtM17u1hbmGAzyIuG51j za8ExrQXPhq1aqrWd5vB9C9Aryq/IjEgN3FhXiKW8mv8iGKXouTIO6Wa6b9HBLbv /UYKXrPhGA+Xqaerw9tkx91T0wTKg3oh8pb9ea+BJ0yAn5AxH3c= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:32 2025 by rpki-client