$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3fwEcwx3_Y35UmmnDr0hYgGP6ik.roa File: 3fwEcwx3_Y35UmmnDr0hYgGP6ik.roa (raw, json) Hash identifier: ojzzUHhZTvdl24gBIik6+bTH7Wnl8dGez7DrV4D/BaI= Subject key identifier: DD:FC:04:73:0C:77:FD:8D:F9:52:69:A7:0E:BD:21:62:01:8F:EA:29 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2626 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3fwEcwx3_Y35UmmnDr0hYgGP6ik.roa Signing time: Fri 22 Aug 2025 08:42:38 +0000 ROA not before: Fri 22 Aug 2025 08:42:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9766 (0x2626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DDFC04730C77FD8DF95269A70EBD2162018FEA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:c0:66:4b:7d:29:bf:a5:81:f6:c9:bf:bd: 80:f5:90:44:e0:a1:99:2b:59:f4:69:3d:dd:67:89: 47:24:fe:c9:df:fd:3c:60:56:51:5d:14:ae:ca:5b: 65:61:57:f7:94:8f:f3:43:aa:6b:d3:a8:99:a1:6c: 83:9b:ba:8a:78:bb:03:5c:a9:e2:e3:3c:28:0c:c0: 3f:fc:76:03:7f:cb:1b:6d:9e:be:09:10:21:72:b3: 65:eb:9e:f1:fa:7d:45:f0:a1:fe:54:40:68:32:04: 1a:71:ce:d6:4a:05:08:d0:df:3f:29:d7:22:e2:12: 69:64:55:72:4f:14:14:85:73:67:7d:cb:86:e7:2b: e3:11:de:58:da:a3:0f:4c:fa:18:bd:92:1a:6f:68: 7b:de:a3:d8:03:55:a7:07:25:25:ef:d1:fc:dc:aa: 70:04:4d:b8:2c:74:b4:98:5c:c1:8f:a2:a2:86:e3: 69:85:81:b7:52:59:1a:1e:c1:5b:4d:b5:50:b5:7a: f8:04:2f:ff:32:63:5a:0d:73:69:a4:59:43:59:c6: 4f:22:3b:f6:8f:84:79:98:72:54:f8:7d:7b:91:2b: a1:4e:43:62:fe:f6:97:c9:10:9c:81:79:c5:dd:f6: 70:74:92:c6:d3:6b:41:95:79:89:dd:cb:f1:c8:cc: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:04:73:0C:77:FD:8D:F9:52:69:A7:0E:BD:21:62:01:8F:EA:29 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3fwEcwx3_Y35UmmnDr0hYgGP6ik.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.156.0/22 Signature Algorithm: sha256WithRSAEncryption 38:85:36:a6:6b:4f:e1:f8:cf:3a:d2:c9:86:2e:6b:aa:42:08: a8:ab:29:6c:01:23:9d:b2:f5:f5:eb:d8:76:67:77:41:d3:7a: 42:dc:be:a2:6a:8d:f0:13:41:8b:cd:a7:c2:f8:f7:80:d4:e0: ca:dd:88:83:8c:ba:5d:d6:82:45:8e:9a:02:52:42:d0:f4:4d: 18:60:f1:ac:cd:b7:4d:35:05:9c:90:81:32:3c:1f:e8:b3:3c: 9f:8a:6b:1f:03:f7:5a:1e:15:3b:47:cb:3d:8d:2a:c0:48:8c: 1c:06:60:9d:af:0e:34:53:5d:6e:28:7c:a6:4c:3e:9a:a9:87: 8d:4b:82:01:62:95:01:9d:2b:16:20:9d:11:93:59:2d:a5:3f: e9:8e:75:da:a9:28:c8:21:3f:87:40:6f:04:ad:18:c7:1a:b3: 92:31:23:a4:8f:d2:a8:6a:19:3c:07:dc:68:10:89:78:d2:9f: 8e:60:35:62:ee:83:92:c2:59:12:7e:71:df:75:10:00:76:ab: 7c:09:08:85:d3:47:98:01:1b:8e:e0:6d:da:1f:c5:2a:50:0b: 42:a2:e1:2b:4b:59:04:20:09:f9:65:ad:3c:e5:77:7f:28:05: cd:7f:1c:83:89:79:36:49:e0:77:ba:2a:8b:35:cc:8f:ac:e7: 0a:03:b0:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERERkMwNDczMEM3N0ZE OERGOTUyNjlBNzBFQkQyMTYyMDE4RkVBMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1EMBmS30pv6WB9sm/vYD1kETgoZkrWfRpPd1niUck/snf/Txg VlFdFK7KW2VhV/eUj/NDqmvTqJmhbIObuop4uwNcqeLjPCgMwD/8dgN/yxttnr4J ECFys2XrnvH6fUXwof5UQGgyBBpxztZKBQjQ3z8p1yLiEmlkVXJPFBSFc2d9y4bn K+MR3ljaow9M+hi9khpvaHveo9gDVacHJSXv0fzcqnAETbgsdLSYXMGPoqKG42mF gbdSWRoewVtNtVC1evgEL/8yY1oNc2mkWUNZxk8iO/aPhHmYclT4fXuRK6FOQ2L+ 9pfJEJyBecXd9nB0ksbTa0GVeYndy/HIzOh3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3fwEcwx3/Y35UmmnDr0hYgGP6ikwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNmd0Vjd3gzX1kzNVVtbW5E cjBoWWdHUDZpay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2pwwDQYJKoZIhvcNAQELBQADggEBADiFNqZrT+H4zzrSyYYua6pCCKirKWwBI52y 9fXr2HZnd0HTekLcvqJqjfATQYvNp8L494DU4MrdiIOMul3WgkWOmgJSQtD0TRhg 8azNt001BZyQgTI8H+izPJ+Kax8D91oeFTtHyz2NKsBIjBwGYJ2vDjRTXW4ofKZM Ppqph41LggFilQGdKxYgnRGTWS2lP+mOddqpKMghP4dAbwStGMcas5IxI6SP0qhq GTwH3GgQiXjSn45gNWLug5LCWRJ+cd91EAB2q3wJCIXTR5gBG47gbdofxSpQC0Ki 4StLWQQgCfllrTzld38oBc1/HIOJeTZJ4He6Kos1zI+s5woDsAA= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:46 2025 by rpki-client