$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2tTnC8N-kTDAApWz09Ek6VaFLSE.roa File: 2tTnC8N-kTDAApWz09Ek6VaFLSE.roa (raw, json) Hash identifier: a7WK3HV4MhYuEHtU7WpqX/j9qex6RnrqglBchDraLAc= Subject key identifier: DA:D4:E7:0B:C3:7E:91:30:C0:02:95:B3:D3:D1:24:E9:56:85:2D:21 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26F9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2tTnC8N-kTDAApWz09Ek6VaFLSE.roa Signing time: Fri 22 Aug 2025 08:43:26 +0000 ROA not before: Fri 22 Aug 2025 08:43:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 211.76.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9977 (0x26f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DAD4E70BC37E9130C00295B3D3D124E956852D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:34:9e:b0:c7:ed:96:f9:b3:1f:f5:4a:a4: 7d:34:ea:38:75:c8:65:c9:38:31:90:1a:ec:45:11: 90:38:07:90:6e:54:a6:c5:42:e0:f9:77:f4:8f:09: 8b:26:d3:7f:7e:67:51:fc:4c:89:17:e1:9f:fc:9a: 96:5d:c6:c9:85:58:55:d0:39:c7:d7:d8:33:4e:26: 1e:ac:6c:dc:e2:bb:47:39:64:38:5d:43:58:2b:9f: 58:5e:59:87:de:e4:e8:67:22:f9:1e:88:1e:53:d4: 29:7f:ed:6e:17:f2:86:50:23:70:81:61:50:9c:6e: aa:f7:19:3b:ee:0b:8c:fd:15:20:68:e4:ad:56:70: b6:a2:9d:57:61:d3:58:bc:0b:9f:c0:c7:e7:18:7a: 0b:26:17:7f:c3:b9:dd:2f:69:e1:45:78:e1:ef:6b: 1e:dd:3c:3f:e0:d6:7d:98:08:d2:b6:ff:c1:0d:b1: fa:35:be:ea:61:67:6a:27:1d:28:50:64:01:f9:29: 83:4f:33:cb:96:05:20:c6:a4:a8:f9:5d:a1:9b:45: cb:82:cf:98:19:06:a2:da:cc:2a:1e:a6:df:80:64: 2f:e7:ae:14:76:ff:8a:2e:00:c7:39:b5:de:6a:07: 3e:98:d2:9c:97:de:fb:ee:d5:17:64:a4:51:c9:83: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D4:E7:0B:C3:7E:91:30:C0:02:95:B3:D3:D1:24:E9:56:85:2D:21 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2tTnC8N-kTDAApWz09Ek6VaFLSE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.32.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:63:c2:85:8a:89:9a:cb:23:aa:d9:05:da:5b:a0:ce:44:af: 18:32:3a:cc:a0:a2:a7:35:f4:d3:29:d6:47:af:02:b2:71:a3: d4:0f:72:e6:38:30:7d:d7:7d:ea:55:3c:b5:bc:a6:89:b6:35: 58:a3:c1:ee:85:9d:2a:ee:70:8b:6f:72:ec:b5:0c:aa:a4:5a: 21:94:8f:b5:52:10:6a:b6:ce:ac:53:b4:b4:ff:51:53:37:37: 03:13:3d:ed:69:12:c0:d9:bd:f7:3d:4b:50:5d:fd:09:3a:ce: 5b:fa:4a:2f:1c:8c:d2:47:f9:cb:72:f1:39:e4:8c:dd:8f:35: b1:11:81:30:e1:f8:08:5f:10:d3:25:7b:bc:60:00:e1:9f:c1: 6b:08:bf:db:43:47:eb:cc:b7:41:55:c4:cb:18:53:59:f0:62: a6:c4:cd:a5:b0:5a:5c:69:7c:08:5b:7f:b1:29:17:d8:8a:28: 8e:29:39:94:f4:20:c7:f1:4d:de:5a:d1:a6:09:6f:69:af:e7: 6a:8b:4c:38:91:54:d9:1b:87:80:db:10:ed:ae:e8:ff:4d:d5: 56:0a:39:7b:3e:87:e7:69:1e:dc:dc:2a:4d:7c:c4:c7:36:b0: 7e:af:b4:af:9c:04:84:f9:c2:05:ea:e5:94:09:97:23:72:09: 98:49:c2:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERBRDRFNzBCQzM3RTkx MzBDMDAyOTVCM0QzRDEyNEU5NTY4NTJEMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbBjSesMftlvmzH/VKpH006jh1yGXJODGQGuxFEZA4B5BuVKbF QuD5d/SPCYsm039+Z1H8TIkX4Z/8mpZdxsmFWFXQOcfX2DNOJh6sbNziu0c5ZDhd Q1grn1heWYfe5OhnIvkeiB5T1Cl/7W4X8oZQI3CBYVCcbqr3GTvuC4z9FSBo5K1W cLainVdh01i8C5/Ax+cYegsmF3/Dud0vaeFFeOHvax7dPD/g1n2YCNK2/8ENsfo1 vuphZ2onHShQZAH5KYNPM8uWBSDGpKj5XaGbRcuCz5gZBqLazCoept+AZC/nrhR2 /4ouAMc5td5qBz6Y0pyX3vvu1RdkpFHJg48LAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2tTnC8N+kTDAApWz09Ek6VaFLSEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJ0VG5DOE4ta1REQUFwV3ow OUVrNlZhRkxTRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPT TCAwDQYJKoZIhvcNAQELBQADggEBAC9jwoWKiZrLI6rZBdpboM5ErxgyOsygoqc1 9NMp1kevArJxo9QPcuY4MH3XfepVPLW8pom2NVijwe6FnSrucItvcuy1DKqkWiGU j7VSEGq2zqxTtLT/UVM3NwMTPe1pEsDZvfc9S1Bd/Qk6zlv6Si8cjNJH+cty8Tnk jN2PNbERgTDh+AhfENMle7xgAOGfwWsIv9tDR+vMt0FVxMsYU1nwYqbEzaWwWlxp fAhbf7EpF9iKKI4pOZT0IMfxTd5a0aYJb2mv52qLTDiRVNkbh4DbEO2u6P9N1VYK OXs+h+dpHtzcKk18xMc2sH6vtK+cBIT5wgXq5ZQJlyNyCZhJwjI= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:38 2025 by rpki-client