$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GFRMMFSkI27RTL3FHlfesMWYp90.roa File: GFRMMFSkI27RTL3FHlfesMWYp90.roa (raw, json) Hash identifier: RacniDew6OPyYsXRaLIjwDjZ0D5EH1Dw+QlYkdTD1ws= Subject key identifier: 18:54:4C:30:54:A4:23:6E:D1:4C:BD:C5:1E:57:DE:B0:C5:98:A7:DD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25EC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GFRMMFSkI27RTL3FHlfesMWYp90.roa Signing time: Fri 22 Aug 2025 08:42:23 +0000 ROA not before: Fri 22 Aug 2025 08:42:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9708 (0x25ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=18544C3054A4236ED14CBDC51E57DEB0C598A7DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:b2:23:e0:b8:00:e4:71:aa:9c:e9:ea:31: a8:a3:64:f8:b2:26:12:c3:24:47:76:5d:ed:c0:7f: 6a:fa:00:dc:f0:b1:b5:5b:58:72:26:2d:9e:3d:2b: 68:00:10:f1:cc:07:01:dc:43:93:ce:66:fb:df:20: 49:a1:82:6c:f2:9e:79:19:31:32:3d:55:d7:dd:08: 82:0e:a0:73:cd:53:35:c1:a7:d8:22:d7:b6:e2:7d: 47:8b:cd:f0:d9:d4:93:d2:c0:97:6f:15:45:d0:75: 3f:8d:8c:93:18:77:59:66:8c:25:75:f3:a5:60:b8: b2:09:87:6e:3c:29:c0:d1:11:07:ab:b7:c3:b2:d4: 3f:a3:11:8e:49:91:46:4e:23:26:4b:51:7d:26:af: 65:f4:65:da:45:a3:71:ce:e8:e9:a9:45:47:7c:29: 4b:d8:b4:2a:bc:a8:6e:e4:15:b9:f7:6a:20:b0:32: 29:51:23:7f:ca:2a:4b:5c:5e:c3:3d:36:0e:a2:de: 57:32:5d:2b:df:90:74:41:70:34:a0:07:f5:2b:d5: 8b:8c:72:44:3a:51:83:f1:93:22:88:27:6d:d1:84: 8c:7d:92:8f:e3:fa:8b:8d:d6:8c:a5:b3:3b:79:45: 2a:3f:77:9c:a1:3e:b5:ff:19:ae:0d:7a:92:8b:a1: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:54:4C:30:54:A4:23:6E:D1:4C:BD:C5:1E:57:DE:B0:C5:98:A7:DD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GFRMMFSkI27RTL3FHlfesMWYp90.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.128.0/17 Signature Algorithm: sha256WithRSAEncryption 83:d2:35:3a:1f:cd:72:3e:0b:61:73:b1:91:5c:bb:6c:c2:3e: 2e:f3:9a:a6:60:07:68:bf:2b:6b:da:03:d5:08:19:81:37:a9: f3:db:4a:6a:14:2f:a4:03:51:06:20:a8:a1:c1:df:01:26:3d: 77:63:0e:b9:ac:65:83:d7:7d:15:22:ec:9b:2b:e9:fa:3a:93: 90:ca:cd:f6:18:1f:90:8b:ed:3f:77:05:52:64:e5:cf:42:a7: 61:25:e9:ae:91:4c:17:6f:d1:64:13:e9:62:51:fc:0b:a2:bd: 99:71:a3:b2:31:7c:00:8e:1f:a9:a8:43:6f:9b:5d:d4:1c:9e: 46:48:03:c6:1d:6e:26:db:c6:7b:b4:92:c3:ac:b4:be:13:2c: 81:dd:4e:0e:31:4c:12:51:50:8b:91:82:16:39:80:44:da:6d: c2:d1:1a:0d:9d:82:7b:94:e0:4b:aa:95:ef:9e:ca:c7:ea:8b: e8:89:90:f0:ce:5d:a8:95:ee:0f:63:31:76:b2:64:26:18:db: f1:dc:a5:54:56:93:98:14:86:0f:ae:23:6f:43:b2:65:4d:dd: ab:0d:c3:c8:b6:2c:14:6b:44:7c:ed:88:2a:85:11:52:6b:39: 17:6d:ed:d0:e0:fe:36:bf:4c:1c:c5:33:ef:9a:7b:ad:85:48: 87:6d:bd:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4NTQ0QzMwNTRBNDIz NkVEMTRDQkRDNTFFNTdERUIwQzU5OEE3REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcb7Ij4LgA5HGqnOnqMaijZPiyJhLDJEd2Xe3Af2r6ANzwsbVb WHImLZ49K2gAEPHMBwHcQ5POZvvfIEmhgmzynnkZMTI9VdfdCIIOoHPNUzXBp9gi 17bifUeLzfDZ1JPSwJdvFUXQdT+NjJMYd1lmjCV186VguLIJh248KcDREQert8Oy 1D+jEY5JkUZOIyZLUX0mr2X0ZdpFo3HO6OmpRUd8KUvYtCq8qG7kFbn3aiCwMilR I3/KKktcXsM9Ng6i3lcyXSvfkHRBcDSgB/Ur1YuMckQ6UYPxkyKIJ23RhIx9ko/j +ouN1oylszt5RSo/d5yhPrX/Ga4NepKLoVMHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGFRMMFSkI27RTL3FHlfesMWYp90wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0dGUk1NRlNrSTI3UlRMM0ZI bGZlc01XWXA5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe0 2oAwDQYJKoZIhvcNAQELBQADggEBAIPSNTofzXI+C2FzsZFcu2zCPi7zmqZgB2i/ K2vaA9UIGYE3qfPbSmoUL6QDUQYgqKHB3wEmPXdjDrmsZYPXfRUi7Jsr6fo6k5DK zfYYH5CL7T93BVJk5c9Cp2El6a6RTBdv0WQT6WJR/AuivZlxo7IxfACOH6moQ2+b XdQcnkZIA8Ydbibbxnu0ksOstL4TLIHdTg4xTBJRUIuRghY5gETabcLRGg2dgnuU 4Euqle+eysfqi+iJkPDOXaiV7g9jMXayZCYY2/HcpVRWk5gUhg+uI29DsmVN3asN w8i2LBRrRHztiCqFEVJrORdt7dDg/ja/TBzFM++ae62FSIdtvfI= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:05 2025 by rpki-client