$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Hq18wk2xmoYehgZ8GHAHc9aaw6Y.roa File: Hq18wk2xmoYehgZ8GHAHc9aaw6Y.roa (raw, json) Hash identifier: +jX2OO9ecRXpICOfrU0XH0oy1RVL8TVchiChuaKLzYo= Subject key identifier: 1E:AD:7C:C2:4D:B1:9A:86:1E:86:06:7C:18:70:07:73:D6:9A:C3:A6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26EF Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Hq18wk2xmoYehgZ8GHAHc9aaw6Y.roa Signing time: Fri 22 Aug 2025 08:43:24 +0000 ROA not before: Fri 22 Aug 2025 08:43:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 122.100.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9967 (0x26ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1EAD7CC24DB19A861E86067C18700773D69AC3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:10:1f:77:20:6f:ff:72:88:f4:88:a1:ee: ca:0b:a9:b8:a2:19:9d:cc:3b:5e:26:44:52:53:cd: e9:47:b6:90:33:73:05:eb:0d:da:2d:08:6a:b8:a5: c7:0f:43:b5:a8:d8:50:64:33:82:1a:c3:2d:ef:c9: ec:e9:41:c2:66:3f:c7:13:88:21:3c:8c:8b:a8:b2: e3:ee:d3:6c:a2:da:22:da:9c:ac:e7:cc:5a:87:89: dc:16:8c:e5:04:d6:6d:a6:e0:2c:98:6f:e1:d6:ad: df:f1:3f:a0:00:a5:8f:70:f6:1d:08:71:18:70:3f: 98:93:cb:6b:ac:24:d8:ac:f0:d1:01:ac:46:71:a7: 4f:9c:39:21:15:0a:4e:fd:f4:d2:73:49:62:22:20: 41:0d:b6:2a:e0:4c:e6:2e:13:76:aa:17:72:c7:e0: 59:19:60:91:79:1b:de:6b:b6:84:78:3a:da:af:56: 4e:04:fb:13:4a:03:60:80:ce:73:a2:c3:02:c5:38: 4e:39:f3:4a:ce:20:e6:ca:4f:04:63:82:00:d6:f9: c8:5f:b4:a7:12:93:8a:68:f7:59:48:a2:b9:43:84: af:a3:60:79:f2:61:1b:35:52:34:36:f6:d7:ff:d4: cf:a7:0d:0a:46:2a:d6:d4:1a:da:0e:40:83:8e:4b: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AD:7C:C2:4D:B1:9A:86:1E:86:06:7C:18:70:07:73:D6:9A:C3:A6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Hq18wk2xmoYehgZ8GHAHc9aaw6Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.120.0/22 Signature Algorithm: sha256WithRSAEncryption 40:43:39:4a:f6:61:08:03:5b:a4:4c:28:f7:0b:68:02:c6:e0: 9e:47:14:8c:3a:58:a6:68:9e:e2:4d:e9:6b:7b:b8:b4:b7:c0: 0a:23:00:54:8d:de:fd:6f:99:79:4f:a7:f0:16:13:0b:eb:37: a7:a1:c4:ec:92:5b:a9:26:05:a7:a2:34:36:cb:02:69:7c:d0: f5:42:04:36:d2:34:8b:7a:96:95:64:d9:d3:6e:d0:b4:96:9a: 78:49:47:51:60:58:89:b3:1c:f3:7d:a7:a1:6d:2b:46:93:02: d7:87:75:45:99:74:87:3e:6d:78:42:3e:88:87:8f:59:68:3f: 74:46:7c:14:f5:20:eb:dc:65:d7:6e:60:27:49:2c:10:12:5a: 8e:bf:83:ae:f1:b2:42:b7:4d:ee:49:4f:31:03:0e:25:ff:ef: e9:57:59:d7:64:3f:45:ed:9f:a3:bc:51:a9:c2:d1:2c:3d:17: 36:26:48:68:8d:43:87:76:2a:f8:6c:ee:cb:23:cb:56:49:41: b6:ff:da:a0:b8:85:86:0a:e9:d4:72:9d:7a:10:a3:9d:61:cb: 59:50:e3:83:d8:e2:c4:53:fb:34:f0:ab:74:62:45:c7:d1:d1: 47:99:51:0a:b1:b2:c5:28:98:b1:62:ed:85:bb:97:03:72:ad: 19:0c:f2:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFFQUQ3Q0MyNERCMTlB ODYxRTg2MDY3QzE4NzAwNzczRDY5QUMzQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1xxAfdyBv/3KI9Iih7soLqbiiGZ3MO14mRFJTzelHtpAzcwXr DdotCGq4pccPQ7Wo2FBkM4Iawy3vyezpQcJmP8cTiCE8jIuosuPu02yi2iLanKzn zFqHidwWjOUE1m2m4CyYb+HWrd/xP6AApY9w9h0IcRhwP5iTy2usJNis8NEBrEZx p0+cOSEVCk799NJzSWIiIEENtirgTOYuE3aqF3LH4FkZYJF5G95rtoR4OtqvVk4E +xNKA2CAznOiwwLFOE4580rOIObKTwRjggDW+chftKcSk4po91lIorlDhK+jYHny YRs1UjQ29tf/1M+nDQpGKtbUGtoOQIOOS2z7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHq18wk2xmoYehgZ8GHAHc9aaw6YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0hxMTh3azJ4bW9ZZWhnWjhH SEFIYzlhYXc2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6 ZHgwDQYJKoZIhvcNAQELBQADggEBAEBDOUr2YQgDW6RMKPcLaALG4J5HFIw6WKZo nuJN6Wt7uLS3wAojAFSN3v1vmXlPp/AWEwvrN6ehxOySW6kmBaeiNDbLAml80PVC BDbSNIt6lpVk2dNu0LSWmnhJR1FgWImzHPN9p6FtK0aTAteHdUWZdIc+bXhCPoiH j1loP3RGfBT1IOvcZdduYCdJLBASWo6/g67xskK3Te5JTzEDDiX/7+lXWddkP0Xt n6O8UanC0Sw9FzYmSGiNQ4d2Kvhs7ssjy1ZJQbb/2qC4hYYK6dRynXoQo51hy1lQ 44PY4sRT+zTwq3RiRcfR0UeZUQqxssUomLFi7YW7lwNyrRkM8kM= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:39 2025 by rpki-client