$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/COklRnI0EJ9bgpQY40m_QqK1WAY.roa File: COklRnI0EJ9bgpQY40m_QqK1WAY.roa (raw, json) Hash identifier: bNve+jqmDbM6KkltYyOOIZc9uA4wWFoqqS7ruLo9djE= Subject key identifier: 08:E9:25:46:72:34:10:9F:5B:82:94:18:E3:49:BF:42:A2:B5:58:06 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 272E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/COklRnI0EJ9bgpQY40m_QqK1WAY.roa Signing time: Fri 22 Aug 2025 08:43:38 +0000 ROA not before: Fri 22 Aug 2025 08:43:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10030 (0x272e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=08E925467234109F5B829418E349BF42A2B55806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:ba:35:d0:66:7c:3b:37:bc:d6:08:20:e8: 43:2a:65:16:86:8d:bc:9a:95:bc:a5:46:26:c4:e8: 46:2a:df:6e:ea:c6:b5:52:d8:84:54:51:27:52:82: 19:fa:9e:5c:49:35:97:a7:82:38:59:07:e0:38:e1: 58:25:be:b6:62:da:bd:bf:c7:26:e5:12:98:f1:22: 45:90:49:1a:c4:33:e8:6a:74:4c:ff:e7:ac:38:78: 01:46:62:39:7b:51:7a:16:bd:73:77:bc:ac:9b:cf: d6:69:34:50:6b:f3:98:cb:2a:07:c4:b6:e1:39:89: 82:9a:61:b6:b7:93:13:c3:2e:45:00:1e:e4:f9:3b: 6d:56:d3:40:88:4d:db:14:f1:91:c4:22:d7:9a:85: 0b:8c:a8:8f:1f:12:ae:9d:19:86:78:b5:af:a7:b6: 6c:72:e0:e5:d2:61:fc:50:5d:3d:dc:4d:d6:96:42: 6f:0b:f1:5b:af:7a:41:b2:e2:07:7f:4e:49:aa:37: 52:d0:8b:25:0b:f6:6f:23:e5:36:3d:f3:38:64:96: dc:23:8c:9a:5e:3c:13:96:c5:74:61:e5:6e:50:2b: 63:4f:f3:03:a7:e9:7d:aa:49:28:04:70:db:c8:ac: f2:91:e6:3a:e7:bd:81:cf:32:ee:bd:fb:e3:6f:c4: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:25:46:72:34:10:9F:5B:82:94:18:E3:49:BF:42:A2:B5:58:06 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/COklRnI0EJ9bgpQY40m_QqK1WAY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.48.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:34:94:71:b2:dd:48:b1:95:97:25:69:18:0b:5d:91:05:34: cf:69:da:87:4a:b3:73:4e:d8:0d:4a:00:12:69:5f:40:a9:5b: 2c:63:36:88:e2:a7:36:d8:41:b1:41:96:34:1b:de:41:f9:11: 3c:1b:19:8c:97:0a:b9:8e:8d:d1:c6:97:ad:4e:34:85:50:90: 29:f0:85:43:07:1a:75:2a:ad:50:c4:18:91:5a:7a:d7:9f:d0: 10:aa:48:89:bb:f4:5c:e3:e6:64:a7:fc:d1:a4:16:66:54:3d: ba:c2:6b:6b:69:dc:00:54:42:99:e9:95:a7:8f:db:bc:b4:36: 66:d7:38:82:28:2a:3d:43:ba:74:75:d5:a0:fd:82:5d:94:1a: 72:85:64:13:b9:74:aa:15:78:a1:f5:0f:19:60:a1:5a:7d:68: 0d:2d:e1:bd:a4:0b:72:ab:56:40:aa:3a:f8:22:34:4f:c2:5e: ab:c6:c5:f3:f1:63:9b:14:09:8f:b7:7f:26:47:05:32:32:38: c0:7b:ff:c7:93:1c:62:b8:3e:30:cc:77:95:85:e8:ca:ac:a5: 29:2a:21:10:33:11:04:59:3f:38:e7:e7:47:85:f2:80:b1:37: b7:5f:47:18:39:e9:a2:b6:5d:fc:17:47:bf:f1:e3:d5:1f:63: 22:1c:97:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA4RTkyNTQ2NzIzNDEw OUY1QjgyOTQxOEUzNDlCRjQyQTJCNTU4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEE7o10GZ8Oze81ggg6EMqZRaGjbyalbylRibE6EYq327qxrVS 2IRUUSdSghn6nlxJNZengjhZB+A44VglvrZi2r2/xyblEpjxIkWQSRrEM+hqdEz/ 56w4eAFGYjl7UXoWvXN3vKybz9ZpNFBr85jLKgfEtuE5iYKaYba3kxPDLkUAHuT5 O21W00CITdsU8ZHEIteahQuMqI8fEq6dGYZ4ta+ntmxy4OXSYfxQXT3cTdaWQm8L 8VuvekGy4gd/TkmqN1LQiyUL9m8j5TY98zhkltwjjJpePBOWxXRh5W5QK2NP8wOn 6X2qSSgEcNvIrPKR5jrnvYHPMu69++NvxCiHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCOklRnI0EJ9bgpQY40m/QqK1WAYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NPa2xSbkkwRUo5YmdwUVk0 MG1fUXFLMVdBWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx njAwDQYJKoZIhvcNAQELBQADggEBAF80lHGy3UixlZclaRgLXZEFNM9p2odKs3NO 2A1KABJpX0CpWyxjNojipzbYQbFBljQb3kH5ETwbGYyXCrmOjdHGl61ONIVQkCnw hUMHGnUqrVDEGJFaetef0BCqSIm79Fzj5mSn/NGkFmZUPbrCa2tp3ABUQpnplaeP 27y0NmbXOIIoKj1DunR11aD9gl2UGnKFZBO5dKoVeKH1DxlgoVp9aA0t4b2kC3Kr VkCqOvgiNE/CXqvGxfPxY5sUCY+3fyZHBTIyOMB7/8eTHGK4PjDMd5WF6MqspSkq IRAzEQRZPzjn50eF8oCxN7dfRxg56aK2XfwXR7/x49UfYyIcl1g= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:48 2025 by rpki-client