$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AWZG10xuBfJZfAajCfH5LNonhZ4.roa File: AWZG10xuBfJZfAajCfH5LNonhZ4.roa (raw, json) Hash identifier: 8XKotHCnhCg3LZ/Uqr29Bi8ksv+ptONc1+5URhMJw0Y= Subject key identifier: 01:66:46:D7:4C:6E:05:F2:59:7C:06:A3:09:F1:F9:2C:DA:27:85:9E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 272A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AWZG10xuBfJZfAajCfH5LNonhZ4.roa Signing time: Fri 22 Aug 2025 08:43:37 +0000 ROA not before: Fri 22 Aug 2025 08:43:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10026 (0x272a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=016646D74C6E05F2597C06A309F1F92CDA27859E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:29:8d:f1:c2:7c:07:eb:48:d3:46:23:4b: 8e:8f:62:52:4a:a5:6e:7c:e5:e3:89:a7:d1:05:f9: 4c:ae:5d:86:85:7a:4e:b2:71:f1:95:3c:9b:b6:fc: b5:17:ad:bf:bb:3b:65:d1:f8:81:ea:5b:03:ab:d8: 10:34:c6:23:a5:f3:f8:a5:e4:42:4f:9d:80:dc:9a: 0d:3b:55:f9:c7:a4:92:2f:8f:03:e9:af:3c:de:02: 68:ef:72:ef:da:84:e3:f1:c4:aa:0c:51:cb:3e:13: 67:f1:1b:58:0c:02:7e:4a:65:d3:3e:e2:18:56:f1: 22:07:24:c7:93:f0:37:12:24:9b:0a:b3:bd:7b:93: 4b:23:5b:f5:66:cc:b3:14:7d:74:18:65:58:4d:88: 2b:ee:5a:bc:21:e6:91:d7:e4:28:27:06:ee:9e:6f: cf:4d:0e:6a:2a:8a:dd:34:4e:d1:54:07:03:8e:8b: a1:b9:2d:21:8c:2d:89:84:29:ae:37:e9:b8:55:de: 8b:7d:cf:77:24:c6:47:f6:80:ba:98:be:7e:ee:1c: bc:04:c3:fd:84:d0:c6:fe:f1:97:30:0d:bb:a8:0f: f4:20:da:c2:9f:42:19:5c:06:b5:e1:b5:bd:43:b3: 8b:25:55:b9:fe:a7:bb:2a:b5:16:3c:01:81:82:4d: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:46:D7:4C:6E:05:F2:59:7C:06:A3:09:F1:F9:2C:DA:27:85:9E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AWZG10xuBfJZfAajCfH5LNonhZ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.137.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:39:83:90:ae:9a:5f:f0:cf:d4:89:ed:62:ba:25:a9:47:93: a3:e1:6e:12:62:20:be:b7:eb:42:4c:62:ee:cf:7d:e8:f8:b7: 42:03:ca:3a:2d:d8:d0:08:da:bb:7b:cf:c7:eb:65:ae:59:76: 26:88:b9:97:50:da:44:a2:d9:6d:73:f2:04:e6:00:d3:62:67: 86:de:79:fa:ca:60:fa:66:80:7f:ab:ae:8e:ba:b7:62:87:34: 67:df:5c:ec:ff:10:a0:b5:47:98:91:65:07:42:00:d3:cf:79: 38:f8:59:55:23:4e:81:db:e9:2c:1e:55:b2:ee:d8:31:4a:d5: a6:ba:72:bc:cb:77:91:d7:d9:d7:fa:1e:8d:63:d3:62:a9:c6: c9:b3:a0:22:44:85:4c:10:a5:ef:6b:fd:bc:f5:e4:c1:22:10: 3c:c6:06:32:28:44:b1:f3:bb:89:c4:a2:2e:79:b6:97:f3:9a: 7e:dc:f3:12:4c:e2:72:1f:fa:bc:91:85:60:e7:7b:d3:a6:ba: a7:67:57:14:b8:bf:71:03:ec:8c:db:8a:db:d1:0d:f5:94:ef: 55:a5:03:e3:55:39:86:49:68:3e:d0:5f:4a:9f:ec:da:e2:a0: 1a:11:56:75:9b:8f:3c:18:f2:4c:ad:15:bd:c7:14:90:9a:86: 17:13:52:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAxNjY0NkQ3NEM2RTA1 RjI1OTdDMDZBMzA5RjFGOTJDREEyNzg1OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs2imN8cJ8B+tI00YjS46PYlJKpW585eOJp9EF+UyuXYaFek6y cfGVPJu2/LUXrb+7O2XR+IHqWwOr2BA0xiOl8/il5EJPnYDcmg07VfnHpJIvjwPp rzzeAmjvcu/ahOPxxKoMUcs+E2fxG1gMAn5KZdM+4hhW8SIHJMeT8DcSJJsKs717 k0sjW/VmzLMUfXQYZVhNiCvuWrwh5pHX5CgnBu6eb89NDmoqit00TtFUBwOOi6G5 LSGMLYmEKa436bhV3ot9z3ckxkf2gLqYvn7uHLwEw/2E0Mb+8ZcwDbuoD/Qg2sKf QhlcBrXhtb1Ds4slVbn+p7sqtRY8AYGCTacFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAWZG10xuBfJZfAajCfH5LNonhZ4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FXWkcxMHh1QmZKWmZBYWpD Zkg1TE5vbmhaNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2okwDQYJKoZIhvcNAQELBQADggEBAAs5g5Cuml/wz9SJ7WK6JalHk6PhbhJiIL63 60JMYu7Pfej4t0IDyjot2NAI2rt7z8frZa5ZdiaIuZdQ2kSi2W1z8gTmANNiZ4be efrKYPpmgH+rro66t2KHNGffXOz/EKC1R5iRZQdCANPPeTj4WVUjToHb6SweVbLu 2DFK1aa6crzLd5HX2df6Ho1j02KpxsmzoCJEhUwQpe9r/bz15MEiEDzGBjIoRLHz u4nEoi55tpfzmn7c8xJM4nIf+ryRhWDne9OmuqdnVxS4v3ED7IzbitvRDfWU71Wl A+NVOYZJaD7QX0qf7NrioBoRVnWbjzwY8kytFb3HFJCahhcTUoM= -----END CERTIFICATE-----Generated at Sat Oct 25 06:45:35 2025 by rpki-client