$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2sC7bdzve4-568dNmBg91eEJpwA.roa File: 2sC7bdzve4-568dNmBg91eEJpwA.roa (raw, json) Hash identifier: Bf67akuRZmfsDxPSPYzuKl7vSdmXRDi/cfTNyAjhiKE= Subject key identifier: DA:C0:BB:6D:DC:EF:7B:8F:B9:EB:C7:4D:98:18:3D:D5:E1:09:A7:00 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2738 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2sC7bdzve4-568dNmBg91eEJpwA.roa Signing time: Fri 22 Aug 2025 08:43:40 +0000 ROA not before: Fri 22 Aug 2025 08:43:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4662 IP address blocks: 61.58.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10040 (0x2738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DAC0BB6DDCEF7B8FB9EBC74D98183DD5E109A700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ff:74:91:f2:1d:97:7e:52:fd:a0:e8:6c:b6: 6a:bf:8a:55:27:10:99:49:7b:d6:e0:ea:ec:f2:40: 7c:2d:6a:99:37:ad:a3:59:d8:5f:00:ba:4d:68:09: 5b:19:50:91:8d:d2:e0:be:2a:63:95:59:17:6f:06: b0:f2:07:1a:4f:35:a7:f1:01:c3:f7:77:68:23:0e: 91:ec:52:d8:75:8c:00:15:1e:0d:9f:00:db:f8:bb: 26:9e:8d:8b:ee:6b:0e:1d:74:2c:c6:9a:fb:a3:94: b9:78:e4:b2:8a:c7:9f:18:ba:3b:dd:e9:27:5f:bd: 9b:73:1d:46:1c:f8:d2:ed:2a:cc:ae:81:6a:9f:a2: 10:ea:40:24:82:81:d7:63:56:6d:88:9b:d9:6e:46: fd:fd:36:25:3e:aa:f9:ba:11:cf:0a:3e:cf:f8:4c: be:7b:e9:a1:75:d4:07:e2:8c:16:9d:8c:2c:3a:0b: e9:b4:db:f0:bd:6b:79:94:6b:cf:f2:79:63:37:12: 29:c9:90:dd:94:a9:a5:7e:ef:c1:f2:e3:9a:8a:ec: 81:a7:38:60:e2:6c:e0:ed:94:c8:61:f7:7c:b7:e7: ad:a1:fc:5d:f7:40:78:4a:db:43:6b:8b:97:fc:82: 68:fd:fb:08:7e:6d:6f:d6:ed:89:a2:74:b5:5a:90: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C0:BB:6D:DC:EF:7B:8F:B9:EB:C7:4D:98:18:3D:D5:E1:09:A7:00 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2sC7bdzve4-568dNmBg91eEJpwA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.112.0/20 Signature Algorithm: sha256WithRSAEncryption 23:31:16:86:81:05:25:2d:88:07:f7:fe:64:8e:ae:1a:ed:f0: 30:5e:3d:5b:be:8a:e2:15:b2:7f:e2:f2:2f:0a:b7:1c:15:13: 6b:4b:2f:f4:3f:67:a8:c2:14:eb:06:ab:77:df:45:b1:68:48: 94:19:e4:54:aa:fc:f8:a8:34:54:92:8b:82:87:6f:65:0d:e9: 97:c4:45:e9:c5:52:8a:09:4a:ec:08:f6:38:cd:cd:92:4c:36: 72:7c:6c:43:43:a7:21:06:0c:90:1d:2a:d8:cf:f4:0c:25:95: 71:f2:9b:50:32:14:f6:17:d4:46:66:ab:13:09:71:35:c7:21: 0a:7d:f4:14:f2:44:86:08:1d:6c:81:e1:4d:12:0f:2d:9b:d6: 39:66:88:2f:f7:13:8f:0a:58:6d:24:16:f4:6c:4a:ed:0d:a5: 3f:66:ec:d9:d5:47:b1:1f:ea:4b:e0:5b:8e:c0:36:45:49:2d: e9:9c:ab:3e:b9:70:7b:b1:73:2a:96:0f:30:6d:71:63:c5:ef: 99:51:42:72:99:8d:30:8a:65:0c:56:55:b3:50:f4:bc:a4:c6: 71:ec:7b:ca:d9:36:1f:8f:1e:b4:9c:c4:f4:78:b7:dc:45:01: 28:51:92:39:a3:b8:e1:04:5e:d1:f4:54:2b:e3:b2:dd:8d:a6: 25:69:86:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERBQzBCQjZERENFRjdC OEZCOUVCQzc0RDk4MTgzREQ1RTEwOUE3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9/3SR8h2XflL9oOhstmq/ilUnEJlJe9bg6uzyQHwtapk3raNZ 2F8Auk1oCVsZUJGN0uC+KmOVWRdvBrDyBxpPNafxAcP3d2gjDpHsUth1jAAVHg2f ANv4uyaejYvuaw4ddCzGmvujlLl45LKKx58Yujvd6SdfvZtzHUYc+NLtKsyugWqf ohDqQCSCgddjVm2Im9luRv39NiU+qvm6Ec8KPs/4TL576aF11AfijBadjCw6C+m0 2/C9a3mUa8/yeWM3EinJkN2UqaV+78Hy45qK7IGnOGDibODtlMhh93y3562h/F33 QHhK20Nri5f8gmj9+wh+bW/W7YmidLVakIPjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2sC7bdzve4+568dNmBg91eEJpwAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJzQzdiZHp2ZTQtNTY4ZE5t Qmc5MWVFSnB3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OnAwDQYJKoZIhvcNAQELBQADggEBACMxFoaBBSUtiAf3/mSOrhrt8DBePVu+iuIV sn/i8i8KtxwVE2tLL/Q/Z6jCFOsGq3ffRbFoSJQZ5FSq/PioNFSSi4KHb2UN6ZfE RenFUooJSuwI9jjNzZJMNnJ8bENDpyEGDJAdKtjP9AwllXHym1AyFPYX1EZmqxMJ cTXHIQp99BTyRIYIHWyB4U0SDy2b1jlmiC/3E48KWG0kFvRsSu0NpT9m7NnVR7Ef 6kvgW47ANkVJLemcqz65cHuxcyqWDzBtcWPF75lRQnKZjTCKZQxWVbNQ9LykxnHs e8rZNh+PHrScxPR4t9xFAShRkjmjuOEEXtH0VCvjst2NpiVphrk= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:08 2025 by rpki-client