$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pp7ifKBSWnk8hCLqKwCl_jCig_o.roa File: Pp7ifKBSWnk8hCLqKwCl_jCig_o.roa (raw, json) Hash identifier: bAAh+FErDkfVeec4RShnPCtqqHbuxpL9GFl0IPyf6dE= Subject key identifier: 3E:9E:E2:7C:A0:52:5A:79:3C:84:22:EA:2B:00:A5:FE:30:A2:83:FA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25F4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pp7ifKBSWnk8hCLqKwCl_jCig_o.roa Signing time: Fri 22 Aug 2025 08:42:25 +0000 ROA not before: Fri 22 Aug 2025 08:42:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 211.76.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9716 (0x25f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3E9EE27CA0525A793C8422EA2B00A5FE30A283FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:fe:7f:f8:52:1f:30:84:f8:95:d5:8b:49: d7:d3:16:cc:8e:23:c8:e7:be:4f:42:2c:da:0f:7d: f7:fc:dc:67:35:4d:14:4f:85:44:d3:86:a8:4f:b5: db:b9:90:ef:18:84:f3:c2:21:87:bd:e1:84:27:7c: 59:d0:fb:d6:f2:e9:1f:c3:2b:17:d9:43:9b:30:7e: 5f:eb:94:b3:a6:05:cd:61:a0:0f:56:cf:e4:3d:68: 31:4d:1e:76:fe:75:91:16:f8:8f:09:af:7c:04:00: 05:19:3b:63:fe:f5:89:95:fb:51:e4:a9:95:b6:1f: 3b:99:f5:2a:9b:20:a1:a3:8d:c6:37:86:fc:c5:a4: 97:d1:bd:fa:c8:2c:71:68:b2:dc:c5:3d:e2:2a:21: a2:4d:6f:e1:8f:48:bf:6f:aa:47:ba:59:c7:e0:d4: a5:31:19:05:05:24:bf:7f:46:6f:fd:f8:d7:ad:71: 3e:21:50:77:ee:39:86:fd:d2:e8:eb:82:02:6d:e2: 7b:4e:a2:8b:e2:bc:2b:a8:6c:4a:d2:f9:ea:a9:55: ac:26:f3:39:67:15:8f:8a:7b:9d:52:da:0f:66:be: dc:5c:fb:a7:89:08:1d:0b:55:fd:5a:a2:0f:82:d3: 46:9b:fa:35:6a:09:db:e1:99:7f:6e:85:69:1e:bc: 8f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9E:E2:7C:A0:52:5A:79:3C:84:22:EA:2B:00:A5:FE:30:A2:83:FA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pp7ifKBSWnk8hCLqKwCl_jCig_o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.40.0/22 Signature Algorithm: sha256WithRSAEncryption 45:73:03:ed:3c:d3:e5:ea:05:8b:d5:cf:83:fa:dd:a5:c9:79: 75:5a:c9:dc:41:e9:42:49:38:d0:1a:55:e2:d1:24:0a:38:7b: 52:38:79:37:7a:7a:16:d1:5c:7f:47:cf:83:23:e6:a1:2f:ad: 4d:f6:ba:56:b5:6f:1e:80:0f:34:69:f4:29:12:30:a2:c6:88: 49:4b:7d:00:9b:f0:0d:a2:b5:df:af:1c:e6:1c:a5:96:2d:a3: 67:00:c3:36:14:74:fd:4f:cb:45:3e:5e:f8:b7:de:71:88:ad: 6a:55:b5:c2:8e:52:68:86:ab:e5:57:1e:3e:76:09:ca:4d:72: 69:7e:7f:0a:24:6f:57:49:b9:74:04:16:41:ad:e4:3a:48:7c: d1:a4:f4:28:66:d1:2a:98:b6:6e:c3:b3:f7:b5:d2:7b:79:3b: 79:ae:ca:35:a4:6e:9f:16:8e:d6:9a:e5:a3:f4:e6:0f:84:94: 2e:1a:2e:98:31:dc:d5:e3:c3:eb:d6:2b:59:2e:b3:0c:ea:cd: 60:c3:84:a8:6a:f7:b9:b2:89:6c:5b:2a:08:4e:be:f1:57:f9: 9e:31:09:09:46:43:cc:f2:71:73:7c:9c:48:42:fb:41:dc:59: 5f:20:e2:df:e3:e2:13:20:dc:48:6f:9e:e4:6b:e2:03:6d:41: f2:06:cd:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFOUVFMjdDQTA1MjVB NzkzQzg0MjJFQTJCMDBBNUZFMzBBMjgzRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLiv5/+FIfMIT4ldWLSdfTFsyOI8jnvk9CLNoPfff83Gc1TRRP hUTThqhPtdu5kO8YhPPCIYe94YQnfFnQ+9by6R/DKxfZQ5swfl/rlLOmBc1hoA9W z+Q9aDFNHnb+dZEW+I8Jr3wEAAUZO2P+9YmV+1HkqZW2HzuZ9SqbIKGjjcY3hvzF pJfRvfrILHFostzFPeIqIaJNb+GPSL9vqke6Wcfg1KUxGQUFJL9/Rm/9+NetcT4h UHfuOYb90ujrggJt4ntOoovivCuobErS+eqpVawm8zlnFY+Ke51S2g9mvtxc+6eJ CB0LVf1aog+C00ab+jVqCdvhmX9uhWkevI8zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPp7ifKBSWnk8hCLqKwCl/jCig/owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BwN2lmS0JTV25rOGhDTHFL d0NsX2pDaWdfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TCgwDQYJKoZIhvcNAQELBQADggEBAEVzA+080+XqBYvVz4P63aXJeXVaydxB6UJJ ONAaVeLRJAo4e1I4eTd6ehbRXH9Hz4Mj5qEvrU32ula1bx6ADzRp9CkSMKLGiElL fQCb8A2itd+vHOYcpZYto2cAwzYUdP1Py0U+Xvi33nGIrWpVtcKOUmiGq+VXHj52 CcpNcml+fwokb1dJuXQEFkGt5DpIfNGk9Chm0SqYtm7Ds/e10nt5O3muyjWkbp8W jtaa5aP05g+ElC4aLpgx3NXjw+vWK1kuswzqzWDDhKhq97myiWxbKghOvvFX+Z4x CQlGQ8zycXN8nEhC+0HcWV8g4t/j4hMg3EhvnuRr4gNtQfIGzYI= -----END CERTIFICATE-----Generated at Sat Oct 25 06:45:23 2025 by rpki-client