$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Oy4YVz18NDHp93hHcsSU8jC0M2Q.roa File: Oy4YVz18NDHp93hHcsSU8jC0M2Q.roa (raw, json) Hash identifier: uKjg5CBdRSm8ZuQbv3obNcmfhJoxVBiOOkLperac3b8= Subject key identifier: 3B:2E:18:57:3D:7C:34:31:E9:F7:78:47:72:C4:94:F2:30:B4:33:64 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26A5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Oy4YVz18NDHp93hHcsSU8jC0M2Q.roa Signing time: Fri 22 Aug 2025 08:43:08 +0000 ROA not before: Fri 22 Aug 2025 08:43:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9893 (0x26a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B2E18573D7C3431E9F7784772C494F230B43364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:53:6c:e6:f3:7f:d0:7f:7d:6c:7d:23:dc: 6d:cd:ed:f0:47:d9:dd:77:c5:13:c0:a9:d5:f3:c2: bf:5d:50:5d:96:70:85:82:2f:62:be:3c:e2:6d:a2: 89:52:bc:3e:ac:5a:de:99:52:cf:80:bc:d3:74:43: 47:39:2d:7d:48:6c:c4:c2:ca:3f:66:29:9f:a2:2d: fd:02:b2:76:8c:48:40:95:17:ac:12:15:70:d1:1f: fe:cf:71:88:c4:5d:06:0f:8c:69:fe:1b:d9:0d:15: 8e:bc:5c:0f:27:bf:bc:19:4a:a1:2e:da:cd:16:ba: 84:d0:1f:8e:72:e1:99:2d:a8:5f:48:34:f0:b2:77: 76:68:e8:4c:88:44:4f:25:51:a2:61:2b:df:c1:99: f9:78:50:93:24:97:74:84:c5:6e:c3:ac:4b:07:47: 04:00:7a:e0:fa:18:98:a9:e4:38:70:17:f6:ee:96: 33:03:89:62:bc:cc:60:5e:ab:80:55:aa:ec:9f:6b: f1:25:84:03:9a:b5:0a:a0:e8:28:d3:7f:0f:0e:20: 9a:22:b0:3f:61:0a:19:21:a5:b9:4a:31:d1:74:5b: e2:6f:cc:11:6a:cd:52:d6:f2:c9:92:72:b7:7f:6e: f7:90:9d:e6:6c:c6:51:7b:44:06:6f:b8:0a:03:d8: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2E:18:57:3D:7C:34:31:E9:F7:78:47:72:C4:94:F2:30:B4:33:64 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Oy4YVz18NDHp93hHcsSU8jC0M2Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.176.0/21 Signature Algorithm: sha256WithRSAEncryption 13:5a:e2:d1:c0:81:27:31:55:6b:94:aa:95:d4:bf:cf:2d:a8: 73:54:b0:38:ac:21:a9:21:ad:b7:35:27:18:b3:e3:1d:9a:4d: c1:3d:db:63:82:0b:03:8a:7c:a6:7e:8a:71:92:83:8d:63:33: ae:00:d8:8f:c1:c5:e5:f7:2f:bd:8b:b4:bc:c2:59:70:80:a0: 33:97:69:0e:cb:ec:2b:4c:0d:37:f3:ea:4d:90:b0:10:6a:94: aa:e5:cf:04:03:53:18:bc:d1:60:3e:e6:11:d8:29:d3:4c:34: 78:d0:ad:85:da:63:c7:35:5e:eb:7f:7b:1c:2b:6d:6a:f1:5a: 2e:67:a4:d9:61:4e:3a:58:fb:a5:7e:2a:b9:50:2f:2c:6b:44: 62:96:f5:17:7e:d7:c1:d2:58:57:82:2f:b3:56:cc:16:bb:ee: 88:73:21:60:de:6e:99:96:0a:40:52:c1:7a:f0:f7:bc:c0:16: 97:39:07:8a:e0:76:11:22:71:64:f9:38:2d:1f:86:0a:61:55: 32:8d:15:93:5a:80:91:bc:83:b3:79:f1:00:53:8a:f8:ba:1f: c0:17:81:c2:c3:6f:c9:4c:e3:82:ee:4c:6b:c9:b5:27:67:ad: b3:77:46:85:d8:31:5e:06:34:df:e8:4c:24:db:5c:d6:3a:85: d2:cc:fc:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCMkUxODU3M0Q3QzM0 MzFFOUY3Nzg0NzcyQzQ5NEYyMzBCNDMzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZN1Ns5vN/0H99bH0j3G3N7fBH2d13xRPAqdXzwr9dUF2WcIWC L2K+POJtoolSvD6sWt6ZUs+AvNN0Q0c5LX1IbMTCyj9mKZ+iLf0CsnaMSECVF6wS FXDRH/7PcYjEXQYPjGn+G9kNFY68XA8nv7wZSqEu2s0WuoTQH45y4ZktqF9INPCy d3Zo6EyIRE8lUaJhK9/Bmfl4UJMkl3SExW7DrEsHRwQAeuD6GJip5DhwF/buljMD iWK8zGBeq4BVquyfa/ElhAOatQqg6CjTfw8OIJoisD9hChkhpblKMdF0W+JvzBFq zVLW8smScrd/bveQneZsxlF7RAZvuAoD2E9dAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOy4YVz18NDHp93hHcsSU8jC0M2QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL095NFlWejE4TkRIcDkzaEhj c1NVOGpDME0yUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nrAwDQYJKoZIhvcNAQELBQADggEBABNa4tHAgScxVWuUqpXUv88tqHNUsDisIakh rbc1Jxiz4x2aTcE922OCCwOKfKZ+inGSg41jM64A2I/BxeX3L72LtLzCWXCAoDOX aQ7L7CtMDTfz6k2QsBBqlKrlzwQDUxi80WA+5hHYKdNMNHjQrYXaY8c1Xut/exwr bWrxWi5npNlhTjpY+6V+KrlQLyxrRGKW9Rd+18HSWFeCL7NWzBa77ohzIWDebpmW CkBSwXrw97zAFpc5B4rgdhEicWT5OC0fhgphVTKNFZNagJG8g7N58QBTivi6H8AX gcLDb8lM44LuTGvJtSdnrbN3RoXYMV4GNN/oTCTbXNY6hdLM/D8= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:41 2025 by rpki-client