$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QDMZOZLJqblCGmow7N2bJtcJYb4.roa File: QDMZOZLJqblCGmow7N2bJtcJYb4.roa (raw, json) Hash identifier: mbvYq8j5h0fXeoXxAn6VWftwKT109yhP29WGCHM6jWA= Subject key identifier: 40:33:19:39:92:C9:A9:B9:42:1A:6A:30:EC:DD:9B:26:D7:09:61:BE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2740 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QDMZOZLJqblCGmow7N2bJtcJYb4.roa Signing time: Fri 22 Aug 2025 08:43:42 +0000 ROA not before: Fri 22 Aug 2025 08:43:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10048 (0x2740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4033193992C9A9B9421A6A30ECDD9B26D70961BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:13:98:b9:af:90:fe:30:27:f5:c6:0a:4f: ef:af:05:fb:52:06:eb:a6:d7:44:7d:9a:51:89:bd: 65:24:6a:81:48:98:51:d3:5a:d6:01:db:85:c8:ec: aa:21:44:91:c2:53:ff:f1:8a:7d:d2:b5:7b:cc:99: 26:cb:eb:a8:dd:3e:43:df:31:bb:11:21:6f:db:b3: 45:a1:f5:72:d0:d6:8f:37:f8:12:eb:1e:f7:76:e9: 43:f9:63:38:c5:8e:d7:a6:b3:31:7a:2f:0f:1e:f8: 2a:9b:2b:0a:51:06:78:ea:a9:aa:aa:35:c9:1a:32: 4e:8d:04:34:46:d1:a0:0e:51:f8:3b:dd:4e:05:4d: 41:05:a3:54:41:f4:17:fc:c6:13:a9:ce:30:1c:dc: c0:a8:60:ef:db:08:af:6e:b5:46:a7:e6:52:fe:96: 8a:17:9b:39:af:4e:7e:48:dd:92:07:f1:29:f8:f9: 65:36:cc:78:3e:ee:c5:ec:ad:c9:a3:8c:50:a1:23: 4d:21:a5:cf:18:c5:70:73:e4:62:d8:5b:80:59:0f: 34:a1:b8:ec:9a:a5:97:d8:09:6e:60:78:46:55:1c: 18:7f:59:ef:46:ac:18:10:53:3b:3c:0d:c9:9a:6e: a9:b4:8b:da:c6:45:16:3d:a3:aa:0c:f6:44:57:a1: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:33:19:39:92:C9:A9:B9:42:1A:6A:30:EC:DD:9B:26:D7:09:61:BE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QDMZOZLJqblCGmow7N2bJtcJYb4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.136.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a7:e4:17:1a:3d:f5:0c:62:f4:28:3f:4f:0e:77:2e:05:47: a9:bf:d3:7b:92:61:3b:3e:f4:3a:df:e2:48:e6:61:60:f0:8a: 6f:3f:21:b9:91:ff:25:85:fa:79:5a:e9:56:cf:0a:0b:c5:ce: 6c:4b:69:5d:e7:b9:c7:99:ee:36:12:fa:53:75:c9:6b:9c:13: 47:02:65:8d:3f:ac:c6:38:c8:d6:e7:cc:ec:f5:e6:68:15:70: bd:85:70:b7:f0:f7:c1:21:01:9e:af:bb:8f:d9:24:8d:72:47: 0c:7e:0e:c4:e3:5c:e0:ac:43:06:20:67:af:c5:e6:0d:0b:ca: 41:a7:1b:79:5b:3c:86:af:6e:76:c4:78:97:99:a2:ef:31:09: 59:a0:bd:01:49:79:32:ad:b1:90:65:23:64:46:9a:9b:89:aa: 6d:f2:26:f4:2c:1c:4c:38:9f:17:bf:ca:ea:05:91:41:07:b4: 84:cb:75:02:54:f0:46:34:41:0d:69:de:6e:6c:a5:50:9e:e9: f0:26:b7:82:61:d3:3d:7f:ee:7f:eb:1e:e0:be:28:16:b0:ab: a4:ac:f9:be:dc:53:0b:2f:c2:6a:3b:ef:c5:df:7b:b6:11:8d: 20:21:65:91:54:b8:11:81:78:fe:2b:b4:88:82:6a:8c:f1:26: 7e:ee:c7:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwMzMxOTM5OTJDOUE5 Qjk0MjFBNkEzMEVDREQ5QjI2RDcwOTYxQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXQROYua+Q/jAn9cYKT++vBftSBuum10R9mlGJvWUkaoFImFHT WtYB24XI7KohRJHCU//xin3StXvMmSbL66jdPkPfMbsRIW/bs0Wh9XLQ1o83+BLr Hvd26UP5YzjFjtemszF6Lw8e+CqbKwpRBnjqqaqqNckaMk6NBDRG0aAOUfg73U4F TUEFo1RB9Bf8xhOpzjAc3MCoYO/bCK9utUan5lL+looXmzmvTn5I3ZIH8Sn4+WU2 zHg+7sXsrcmjjFChI00hpc8YxXBz5GLYW4BZDzShuOyapZfYCW5geEZVHBh/We9G rBgQUzs8Dcmabqm0i9rGRRY9o6oM9kRXoU5hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQDMZOZLJqblCGmow7N2bJtcJYb4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FETVpPWkxKcWJsQ0dtb3c3 TjJiSnRjSlliNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx nogwDQYJKoZIhvcNAQELBQADggEBABCn5BcaPfUMYvQoP08Ody4FR6m/03uSYTs+ 9Drf4kjmYWDwim8/IbmR/yWF+nla6VbPCgvFzmxLaV3nuceZ7jYS+lN1yWucE0cC ZY0/rMY4yNbnzOz15mgVcL2FcLfw98EhAZ6vu4/ZJI1yRwx+DsTjXOCsQwYgZ6/F 5g0LykGnG3lbPIavbnbEeJeZou8xCVmgvQFJeTKtsZBlI2RGmpuJqm3yJvQsHEw4 nxe/yuoFkUEHtITLdQJU8EY0QQ1p3m5spVCe6fAmt4Jh0z1/7n/rHuC+KBawq6Ss +b7cUwsvwmo778Xfe7YRjSAhZZFUuBGBeP4rtIiCaozxJn7uxy8= -----END CERTIFICATE-----Generated at Sat Oct 25 06:45:14 2025 by rpki-client