$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OCIS3N-GgiiISsMP1Ri4tl3xy0U.roa File: OCIS3N-GgiiISsMP1Ri4tl3xy0U.roa (raw, json) Hash identifier: hUL0EMnwnJJiOiGdGj2dJY7VJwhsz34gSUmFLO6QsI0= Subject key identifier: 38:22:12:DC:DF:86:82:28:88:4A:C3:0F:D5:18:B8:B6:5D:F1:CB:45 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26D5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OCIS3N-GgiiISsMP1Ri4tl3xy0U.roa Signing time: Fri 22 Aug 2025 08:43:18 +0000 ROA not before: Fri 22 Aug 2025 08:43:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 103.225.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9941 (0x26d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=382212DCDF868228884AC30FD518B8B65DF1CB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:f2:8b:fb:0c:26:22:fc:3e:3f:aa:da:f7: 40:bc:c8:90:6a:63:38:66:d4:9b:fc:c7:8c:ab:47: e4:cc:49:f1:c0:01:68:99:0f:28:bf:76:3f:89:93: c3:20:c0:f4:d7:d4:76:1d:35:82:39:7c:f8:c5:de: 6d:57:01:7f:6c:6b:d0:83:3e:d7:64:ad:c0:aa:6d: 45:e3:d0:76:25:5b:59:7f:c0:6f:f7:60:93:59:e8: db:82:c9:2b:b1:4c:07:01:cc:b9:11:8b:3b:cf:ba: 2d:ae:4f:32:14:b3:79:b9:9d:18:df:20:12:57:71: 9f:99:66:75:08:81:62:a9:4a:83:73:fb:08:63:db: 82:18:28:fe:3f:79:59:d2:85:9a:dd:86:76:88:63: 24:94:27:f0:a4:34:42:82:55:ec:67:20:86:e8:fc: fe:ea:de:f3:b3:43:85:28:6d:d3:70:0c:14:cf:8c: d9:b3:77:1a:bd:aa:95:78:2d:20:c1:0c:99:8e:78: 89:01:25:74:42:10:44:79:31:cc:ff:2c:00:97:ec: b9:56:22:70:78:fb:13:40:ae:7e:b1:b5:de:4e:0f: 6b:4b:32:9d:fc:20:f2:1f:61:98:22:6f:35:4e:ef: a2:31:7b:05:b0:3f:2c:14:6e:e2:10:b6:68:a7:ee: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:12:DC:DF:86:82:28:88:4A:C3:0F:D5:18:B8:B6:5D:F1:CB:45 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OCIS3N-GgiiISsMP1Ri4tl3xy0U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.225.0.0/24 Signature Algorithm: sha256WithRSAEncryption 30:cb:46:69:21:fb:0f:f9:09:79:4a:55:06:0f:70:0b:d0:46: 44:59:93:34:ae:0a:b4:55:23:cd:eb:09:02:b9:1f:f2:ce:d1: 25:d4:9f:ef:5f:8d:5a:f9:10:85:c2:ea:88:76:7a:cb:43:94: 9e:73:7a:ff:6a:e3:19:a9:86:1a:a0:36:6a:db:48:b7:73:2b: 1d:bf:7b:7a:56:63:bd:f9:13:34:4f:cc:19:e6:57:76:3d:80: 00:6a:30:86:49:28:cf:f7:6e:bd:93:8f:56:60:53:52:a7:05: 70:44:8a:50:f3:d1:e1:a5:9b:e8:be:33:e7:94:e7:3d:6a:a3: 73:3d:48:14:54:50:d3:c5:4d:3e:9d:ce:58:3c:71:c0:4d:23: ab:5b:e5:a8:fc:78:9b:47:62:64:74:2f:8a:f2:bf:91:89:20: 0b:81:72:1b:57:de:4e:44:ba:c3:fd:64:98:89:d1:e2:30:cb: 1a:17:4f:fb:bb:cb:1f:dc:d4:f8:12:ee:c6:05:2c:2c:0f:cb: 70:f2:f2:35:2c:5c:cf:1f:b6:84:61:8c:dd:18:83:20:d2:0f: 4f:b3:58:ff:e5:51:94:a6:2f:fe:d1:83:98:d8:24:7d:26:1e: 87:64:a0:f3:c4:a8:55:2f:13:21:b7:3a:84:09:f6:e4:64:f6: 5a:43:16:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM4MjIxMkRDREY4Njgy Mjg4ODRBQzMwRkQ1MThCOEI2NURGMUNCNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoVvKL+wwmIvw+P6ra90C8yJBqYzhm1Jv8x4yrR+TMSfHAAWiZ Dyi/dj+Jk8MgwPTX1HYdNYI5fPjF3m1XAX9sa9CDPtdkrcCqbUXj0HYlW1l/wG/3 YJNZ6NuCySuxTAcBzLkRizvPui2uTzIUs3m5nRjfIBJXcZ+ZZnUIgWKpSoNz+whj 24IYKP4/eVnShZrdhnaIYySUJ/CkNEKCVexnIIbo/P7q3vOzQ4UobdNwDBTPjNmz dxq9qpV4LSDBDJmOeIkBJXRCEER5Mcz/LACX7LlWInB4+xNArn6xtd5OD2tLMp38 IPIfYZgibzVO76IxewWwPywUbuIQtmin7l7RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOCIS3N+GgiiISsMP1Ri4tl3xy0UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09DSVMzTi1HZ2lpSVNzTVAx Umk0dGwzeHkwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn 4QAwDQYJKoZIhvcNAQELBQADggEBADDLRmkh+w/5CXlKVQYPcAvQRkRZkzSuCrRV I83rCQK5H/LO0SXUn+9fjVr5EIXC6oh2estDlJ5zev9q4xmphhqgNmrbSLdzKx2/ e3pWY735EzRPzBnmV3Y9gABqMIZJKM/3br2Tj1ZgU1KnBXBEilDz0eGlm+i+M+eU 5z1qo3M9SBRUUNPFTT6dzlg8ccBNI6tb5aj8eJtHYmR0L4ryv5GJIAuBchtX3k5E usP9ZJiJ0eIwyxoXT/u7yx/c1PgS7sYFLCwPy3Dy8jUsXM8ftoRhjN0YgyDSD0+z WP/lUZSmL/7Rg5jYJH0mHodkoPPEqFUvEyG3OoQJ9uRk9lpDFis= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:32 2025 by rpki-client