$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ooi6yIk3SxwZCMaBkD8qV6HOvaM.roa File: Ooi6yIk3SxwZCMaBkD8qV6HOvaM.roa (raw, json) Hash identifier: XgVEXjzZ2pzlf8dqAc/0Imkp8c8A6GYkMrGonld5SMI= Subject key identifier: 3A:88:BA:C8:89:37:4B:1C:19:08:C6:81:90:3F:2A:57:A1:CE:BD:A3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26E4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ooi6yIk3SxwZCMaBkD8qV6HOvaM.roa Signing time: Fri 22 Aug 2025 08:43:21 +0000 ROA not before: Fri 22 Aug 2025 08:43:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 211.76.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9956 (0x26e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3A88BAC889374B1C1908C681903F2A57A1CEBDA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:06:fc:17:e2:52:60:38:96:34:d5:e8:95: 74:04:e2:18:74:d9:49:a6:cf:c0:5e:91:c6:83:76: 91:b4:5c:55:e8:95:11:fe:d5:67:dc:6d:52:55:b7: 3f:aa:9f:7d:4b:7e:25:5c:51:f5:c7:9d:a1:2d:62: 4e:e3:40:f9:20:01:b4:62:46:1f:06:e8:f2:23:5b: a8:92:a1:e5:e4:3f:5b:2c:d2:fd:7f:98:d6:b8:c0: 1c:68:45:f7:d1:6f:b6:3e:05:47:bc:1e:9f:5c:f7: 52:6f:f1:aa:86:ac:d9:e9:d0:af:2c:5c:83:d2:8a: 85:34:e3:44:84:d8:9e:a7:d7:74:97:ab:e2:6c:5f: bf:35:af:d0:92:05:97:d0:73:bc:26:e4:72:81:d8: ce:70:ce:a7:31:ef:7c:bb:ac:18:59:30:ab:bc:e0: 71:92:b9:a4:5d:e3:3e:8e:67:bb:b3:cb:1b:41:ae: c7:da:a9:08:4b:0a:05:b7:4e:f3:77:8f:76:e5:99: 57:43:7c:9c:24:46:2f:fd:87:7c:de:74:26:1d:b4: 8f:55:45:71:97:1b:08:af:93:23:55:65:8c:e1:f7: 8e:2a:a0:91:b4:5f:14:0d:21:c1:52:62:9c:c4:d1: 6b:ca:02:e4:9a:c6:42:99:59:f2:64:b6:aa:9b:1a: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:88:BA:C8:89:37:4B:1C:19:08:C6:81:90:3F:2A:57:A1:CE:BD:A3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ooi6yIk3SxwZCMaBkD8qV6HOvaM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.54.0/24 Signature Algorithm: sha256WithRSAEncryption 47:a7:79:cb:ac:3c:c7:dd:9b:5a:48:8f:2d:98:e0:94:34:07: f6:9f:d2:3b:3a:39:a1:0c:ea:63:ec:ee:f8:24:3a:d2:e4:fb: 30:31:cf:22:44:8a:b4:ef:89:b9:fa:ea:ac:37:e3:7b:3f:61: 00:52:42:d5:dd:8a:e2:11:65:4b:dd:44:99:c4:40:d6:1d:1d: 19:08:e7:43:fd:b4:5b:02:96:c0:66:be:3b:cf:e3:15:d0:d2: fb:fc:37:c5:31:48:35:d3:49:92:7d:65:c2:9d:f5:56:00:bf: a1:62:c0:00:93:5b:a8:10:72:ce:6a:e5:51:07:17:87:46:0f: d1:c5:cb:66:70:b6:c9:d1:a9:d5:14:0d:e7:0a:c2:cd:af:90: e2:b2:a5:f7:a0:d9:43:9b:39:c9:1c:4e:ec:3b:74:7b:84:f9: 7d:e8:43:2f:5e:b2:d2:30:47:5a:3f:66:d0:23:b2:19:93:c2: d9:eb:2a:bd:e1:a1:c2:d7:86:15:e1:35:0d:51:1a:d1:02:c5: af:66:b2:5d:14:b8:24:71:28:1d:f8:85:0f:81:6d:ee:83:75: 7d:97:40:80:18:d3:24:ee:21:5d:e3:d9:69:1f:9c:01:7c:df: 7f:b4:a0:c6:4c:0c:4d:2b:e7:ea:b0:45:75:b0:51:11:15:5c: 21:01:35:f1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBODhCQUM4ODkzNzRC MUMxOTA4QzY4MTkwM0YyQTU3QTFDRUJEQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwrQb8F+JSYDiWNNXolXQE4hh02Ummz8BekcaDdpG0XFXolRH+ 1WfcbVJVtz+qn31LfiVcUfXHnaEtYk7jQPkgAbRiRh8G6PIjW6iSoeXkP1ss0v1/ mNa4wBxoRffRb7Y+BUe8Hp9c91Jv8aqGrNnp0K8sXIPSioU040SE2J6n13SXq+Js X781r9CSBZfQc7wm5HKB2M5wzqcx73y7rBhZMKu84HGSuaRd4z6OZ7uzyxtBrsfa qQhLCgW3TvN3j3blmVdDfJwkRi/9h3zedCYdtI9VRXGXGwivkyNVZYzh944qoJG0 XxQNIcFSYpzE0WvKAuSaxkKZWfJktqqbGiZhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOoi6yIk3SxwZCMaBkD8qV6HOvaMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09vaTZ5SWszU3h3WkNNYUJr RDhxVjZIT3ZhTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TDYwDQYJKoZIhvcNAQELBQADggEBAEenecusPMfdm1pIjy2Y4JQ0B/af0js6OaEM 6mPs7vgkOtLk+zAxzyJEirTvibn66qw343s/YQBSQtXdiuIRZUvdRJnEQNYdHRkI 50P9tFsClsBmvjvP4xXQ0vv8N8UxSDXTSZJ9ZcKd9VYAv6FiwACTW6gQcs5q5VEH F4dGD9HFy2ZwtsnRqdUUDecKws2vkOKypfeg2UObOckcTuw7dHuE+X3oQy9estIw R1o/ZtAjshmTwtnrKr3hocLXhhXhNQ1RGtECxa9msl0UuCRxKB34hQ+Bbe6DdX2X QIAY0yTuIV3j2WkfnAF833+0oMZMDE0r5+qwRXWwUREVXCEBNfE= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:12 2025 by rpki-client