$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7C7nhohd3WvzpviHgeY1teExheA.roa File: 7C7nhohd3WvzpviHgeY1teExheA.roa (raw, json) Hash identifier: gXhg3RtLr2cFYFvIL+fXRDnPqOTY2T8O5fC14LhCMSQ= Subject key identifier: EC:2E:E7:86:88:5D:DD:6B:F3:A6:F8:87:81:E6:35:B5:E1:31:85:E0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2732 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7C7nhohd3WvzpviHgeY1teExheA.roa Signing time: Fri 22 Aug 2025 08:43:39 +0000 ROA not before: Fri 22 Aug 2025 08:43:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10034 (0x2732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EC2EE786885DDD6BF3A6F88781E635B5E13185E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:85:bd:6c:25:99:d0:e5:cd:40:85:a5:d9: d0:fd:95:9a:7f:d2:3e:1a:c6:43:00:90:e3:56:3a: 74:f3:0e:e6:c9:38:b8:0b:29:45:83:f9:22:d6:2b: 02:e0:4e:c0:f9:d6:55:2f:1f:fe:b8:1a:82:f3:e2: e2:19:3a:0d:bb:08:00:95:06:36:bd:ca:bf:c1:59: 08:fa:1b:82:3c:dc:4b:93:22:49:f9:2a:f9:b5:eb: 56:87:07:b6:36:09:eb:91:67:7c:90:34:05:3a:0a: 0f:13:9e:ee:22:94:02:ca:75:a4:85:e2:0c:80:d8: 06:31:f5:0d:c5:a3:61:4e:43:ea:6b:7c:c4:63:df: 5c:1b:73:df:c2:4d:45:b9:b4:e9:21:cd:b0:76:48: 59:93:1a:d2:cc:d5:93:08:f8:8d:ea:b1:ce:07:5b: 1b:5d:a6:db:11:86:db:31:8d:8a:b8:27:d0:c2:54: 44:03:84:8f:79:8f:24:89:21:35:b9:ea:9e:dc:8c: 00:2c:0b:17:42:5a:b5:a6:92:15:bf:34:70:bd:7f: e2:e2:bf:4e:58:5c:bf:42:8e:da:a9:f3:b3:39:de: df:a9:a4:70:84:74:bf:a6:86:ca:eb:3d:21:b0:7d: 6d:d1:aa:e8:dd:e1:5a:0b:da:56:25:ad:6e:87:d8: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2E:E7:86:88:5D:DD:6B:F3:A6:F8:87:81:E6:35:B5:E1:31:85:E0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7C7nhohd3WvzpviHgeY1teExheA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.190.0/23 Signature Algorithm: sha256WithRSAEncryption 47:b8:90:85:f2:e8:90:91:9d:b2:e0:8f:b9:92:64:65:40:be: f2:a8:3e:a0:2a:74:bd:fe:15:1d:8f:17:20:c2:bb:e4:a1:9f: 89:e9:cf:50:03:bf:6c:13:05:74:a9:6d:e4:57:2b:90:f9:28: 60:75:83:0d:df:5e:8f:33:f7:ad:dd:e1:d4:82:b2:43:a6:1b: c3:2f:94:a3:10:7b:1d:c7:d9:a7:9b:b4:fe:86:72:2b:dd:2d: f9:7d:9f:94:ff:01:d2:fe:3a:1c:91:4d:70:41:3f:8a:5b:44: 7d:ea:00:41:c5:92:b8:c6:bd:67:6f:7f:32:9f:12:f6:74:57: f3:68:3a:7a:be:19:50:1f:fb:32:98:b3:f4:85:9f:21:15:2b: ee:a8:a5:b7:53:25:d0:dc:16:c3:7d:4d:fb:16:7c:37:54:5e: bf:23:f0:70:9d:e5:09:18:a6:5a:2b:04:60:38:e9:d7:46:00: 4b:bc:d0:70:11:7f:0f:d6:7c:5f:9c:c3:b6:b8:01:a8:4b:8c: 89:06:9a:c2:a6:c4:b0:b7:a6:70:db:08:0c:f4:aa:41:30:af: f3:21:f2:b0:cd:76:06:03:8b:c3:ef:84:25:65:40:d5:88:5c: f5:09:56:64:9e:87:31:66:29:a3:4d:99:e0:0b:2b:bb:ce:02: 86:7a:0c:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVDMkVFNzg2ODg1RERE NkJGM0E2Rjg4NzgxRTYzNUI1RTEzMTg1RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwmYW9bCWZ0OXNQIWl2dD9lZp/0j4axkMAkONWOnTzDubJOLgL KUWD+SLWKwLgTsD51lUvH/64GoLz4uIZOg27CACVBja9yr/BWQj6G4I83EuTIkn5 Kvm161aHB7Y2CeuRZ3yQNAU6Cg8Tnu4ilALKdaSF4gyA2AYx9Q3Fo2FOQ+prfMRj 31wbc9/CTUW5tOkhzbB2SFmTGtLM1ZMI+I3qsc4HWxtdptsRhtsxjYq4J9DCVEQD hI95jySJITW56p7cjAAsCxdCWrWmkhW/NHC9f+Liv05YXL9Cjtqp87M53t+ppHCE dL+mhsrrPSGwfW3Rqujd4VoL2lYlrW6H2AB9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7C7nhohd3WvzpviHgeY1teExheAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdDN25ob2hkM1d2enB2aUhn ZVkxdGVFeGhlQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2r4wDQYJKoZIhvcNAQELBQADggEBAEe4kIXy6JCRnbLgj7mSZGVAvvKoPqAqdL3+ FR2PFyDCu+Shn4npz1ADv2wTBXSpbeRXK5D5KGB1gw3fXo8z963d4dSCskOmG8Mv lKMQex3H2aebtP6GcivdLfl9n5T/AdL+OhyRTXBBP4pbRH3qAEHFkrjGvWdvfzKf EvZ0V/NoOnq+GVAf+zKYs/SFnyEVK+6opbdTJdDcFsN9TfsWfDdUXr8j8HCd5QkY plorBGA46ddGAEu80HARfw/WfF+cw7a4AahLjIkGmsKmxLC3pnDbCAz0qkEwr/Mh 8rDNdgYDi8PvhCVlQNWIXPUJVmSehzFmKaNNmeALK7vOAoZ6DEs= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:13 2025 by rpki-client