$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K5p21QXWja_MXmQmQ5zyP3MlOg8.roa File: K5p21QXWja_MXmQmQ5zyP3MlOg8.roa (raw, json) Hash identifier: Er9Z2Q4wBd8ioS1kZPoMoY7UmS3RrZQDMSFMuCJjxRY= Subject key identifier: 2B:9A:76:D5:05:D6:8D:AF:CC:5E:64:26:43:9C:F2:3F:73:25:3A:0F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26A9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K5p21QXWja_MXmQmQ5zyP3MlOg8.roa Signing time: Fri 22 Aug 2025 08:43:08 +0000 ROA not before: Fri 22 Aug 2025 08:43:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 211.76.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9897 (0x26a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B9A76D505D68DAFCC5E6426439CF23F73253A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:09:b1:ba:f1:56:38:24:4d:14:1e:60:99:38: 7b:0a:12:79:bc:55:e1:03:52:12:96:ea:e2:0d:dc: 1a:29:20:fc:2d:f6:12:7f:5d:68:79:bd:e6:d7:04: 28:18:ff:0e:de:21:c5:b2:b6:c1:e0:97:90:4e:1d: 25:15:63:93:9c:ff:93:15:cd:0b:60:38:76:4d:fa: e4:d6:5d:a6:e2:a4:37:e0:a5:b7:36:38:77:55:8c: e7:77:9e:d7:5c:7d:83:70:a6:d8:95:6a:0c:fc:ef: 61:1c:9c:c7:ce:9b:76:ed:aa:eb:25:79:81:af:b5: 51:2c:f4:4e:0f:03:97:50:f0:64:66:fa:a2:a3:7f: 7f:1f:12:a9:3d:74:e5:0c:bf:b9:a1:4b:d7:f8:7d: e6:da:53:ae:05:2c:20:1e:7d:35:cd:37:32:4b:09: d0:f5:71:b8:1d:c6:25:9a:0f:60:9a:cb:4f:ff:a9: 1f:eb:88:e1:a3:2c:12:24:1c:77:7e:7f:22:71:68: 27:6d:e6:b5:6f:6a:ed:a0:25:68:77:1e:c4:09:7f: f8:41:60:4a:58:d2:0f:29:1b:11:ed:84:b7:82:ec: 73:e9:e4:db:0e:f1:3a:a3:1f:58:74:22:9d:d0:1d: 1f:1c:bd:16:f9:04:9e:fd:f6:4e:35:88:e9:fd:c3: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:76:D5:05:D6:8D:AF:CC:5E:64:26:43:9C:F2:3F:73:25:3A:0F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K5p21QXWja_MXmQmQ5zyP3MlOg8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.76.0/24 Signature Algorithm: sha256WithRSAEncryption 64:b9:db:0d:14:78:b7:4c:76:56:b6:5f:2b:f8:16:f0:63:69: d2:75:07:57:30:16:ee:b5:3c:a8:8a:68:5b:f1:bb:71:cb:77: 95:10:8d:b4:2a:d9:22:55:6f:1e:19:4d:78:8e:88:7b:e2:2f: a6:1f:fd:0b:c7:45:81:8e:e1:ed:4c:76:5c:b7:86:50:41:1d: 13:b1:66:2a:99:b8:e8:e6:26:9e:da:b1:7b:ac:77:93:e6:03: 65:ea:ea:37:66:77:2f:b4:4c:2c:70:7a:a1:6e:29:63:7e:d7: a4:8f:0c:46:d6:3d:95:e4:bc:57:ee:26:28:2c:1d:ea:75:b6: fb:8d:55:6f:5e:e0:2e:7d:7d:46:59:88:4d:8d:09:87:95:b4: 56:7b:d4:75:5c:c7:6c:f5:d9:72:fb:ee:eb:0f:17:78:c4:f6: 26:40:7e:8b:30:5d:a3:2f:f7:96:83:11:6b:e3:e7:80:17:12: 08:49:73:3f:7e:21:2a:39:01:c8:ec:e6:4c:13:35:0b:25:0d: 8c:e9:4b:12:b6:a6:ef:0f:cb:84:f5:b2:c4:1c:87:26:c6:06: 6c:3c:62:a3:9b:74:34:0a:16:5b:37:2c:81:02:15:ae:79:b2: ae:5b:c4:50:7b:70:16:cf:7a:2b:13:96:0f:af:7a:ec:52:72: f4:17:95:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCOUE3NkQ1MDVENjhE QUZDQzVFNjQyNjQzOUNGMjNGNzMyNTNBMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjCbG68VY4JE0UHmCZOHsKEnm8VeEDUhKW6uIN3BopIPwt9hJ/ XWh5vebXBCgY/w7eIcWytsHgl5BOHSUVY5Oc/5MVzQtgOHZN+uTWXabipDfgpbc2 OHdVjOd3ntdcfYNwptiVagz872EcnMfOm3btqusleYGvtVEs9E4PA5dQ8GRm+qKj f38fEqk9dOUMv7mhS9f4febaU64FLCAefTXNNzJLCdD1cbgdxiWaD2Cay0//qR/r iOGjLBIkHHd+fyJxaCdt5rVvau2gJWh3HsQJf/hBYEpY0g8pGxHthLeC7HPp5NsO 8TqjH1h0Ip3QHR8cvRb5BJ799k41iOn9w/6JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUK5p21QXWja/MXmQmQ5zyP3MlOg8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0s1cDIxUVhXamFfTVhtUW1R NXp5UDNNbE9nOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TEwwDQYJKoZIhvcNAQELBQADggEBAGS52w0UeLdMdla2Xyv4FvBjadJ1B1cwFu61 PKiKaFvxu3HLd5UQjbQq2SJVbx4ZTXiOiHviL6Yf/QvHRYGO4e1Mdly3hlBBHROx ZiqZuOjmJp7asXusd5PmA2Xq6jdmdy+0TCxweqFuKWN+16SPDEbWPZXkvFfuJigs Hep1tvuNVW9e4C59fUZZiE2NCYeVtFZ71HVcx2z12XL77usPF3jE9iZAfoswXaMv 95aDEWvj54AXEghJcz9+ISo5Acjs5kwTNQslDYzpSxK2pu8Py4T1ssQchybGBmw8 YqObdDQKFls3LIECFa55sq5bxFB7cBbPeisTlg+veuxScvQXleM= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:33 2025 by rpki-client