$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TahuEAQ-cfBBXA7zeX_lESO0y9g.roa File: TahuEAQ-cfBBXA7zeX_lESO0y9g.roa (raw, json) Hash identifier: 2GKjF6H215ZBwxqrwJzw+9Y433dDyuK1EiXLXoLhAdo= Subject key identifier: 4D:A8:6E:10:04:3E:71:F0:41:5C:0E:F3:79:7F:E5:11:23:B4:CB:D8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2631 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TahuEAQ-cfBBXA7zeX_lESO0y9g.roa Signing time: Fri 22 Aug 2025 08:42:41 +0000 ROA not before: Fri 22 Aug 2025 08:42:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9777 (0x2631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4DA86E10043E71F0415C0EF3797FE51123B4CBD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:5c:bf:36:a3:3c:b4:fd:43:df:d9:68:0f: 98:5c:a4:5f:1d:1c:e0:64:83:fc:62:bf:28:7b:a8: 47:22:ce:67:8a:05:9b:e8:13:00:02:f5:bb:77:f5: 49:9a:a3:35:ca:cd:9d:3b:2b:c9:dc:cd:c2:df:a3: 64:e2:28:55:13:5b:91:ec:b7:cf:58:5b:f4:3b:46: 6e:87:4b:ec:c5:ca:1e:34:eb:f5:f6:5a:96:31:78: c2:8f:c0:77:d4:30:24:0a:6e:0a:16:72:62:76:c9: 28:8e:94:98:19:d1:96:0c:0d:07:5c:2e:03:43:66: 0e:69:d8:39:ef:06:99:a7:4c:bc:70:42:e7:2a:c5: fc:22:19:81:b2:b8:bc:05:cd:95:62:81:25:f8:a5: b1:a0:76:72:5f:e9:28:9e:f7:f2:94:ac:57:cd:e8: f3:5e:11:25:82:51:ae:d3:67:cd:8c:ac:a2:99:6d: 48:3d:87:76:e6:d6:5e:9e:f7:ad:c2:a8:bf:5d:ef: 39:33:5b:43:69:8f:d0:4d:fe:ba:2d:0b:29:55:1f: 7c:be:6d:d1:a4:21:9b:59:12:98:63:b7:a4:f5:98: 8f:c7:d6:82:d9:2c:a5:7b:43:6f:57:96:e0:21:41: c2:d0:75:ea:08:cf:a7:a4:9c:23:f9:4a:96:d4:a1: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A8:6E:10:04:3E:71:F0:41:5C:0E:F3:79:7F:E5:11:23:B4:CB:D8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TahuEAQ-cfBBXA7zeX_lESO0y9g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.84.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:ea:8c:79:99:ce:8c:04:2d:06:4c:4d:00:64:dc:86:49:cd: c8:68:69:1a:19:46:d1:92:9f:c8:b2:e5:b6:1c:05:f1:b4:70: 1d:74:6a:c1:2e:31:44:67:4b:7b:0c:8f:8c:1a:b9:d8:ec:53: 21:b8:a1:56:49:ef:bc:18:94:4e:57:11:26:1d:35:3d:52:19: 9c:48:42:80:ce:f9:93:02:f3:49:8e:35:08:c8:3c:8a:54:7d: b6:38:3d:a4:4c:27:00:f6:4f:61:de:59:5f:d4:2b:b8:69:3f: f4:b3:24:26:1c:49:d3:ad:9f:09:ac:99:98:28:6b:f6:8a:1f: 57:0f:5f:ed:df:57:77:c8:a6:cf:35:6a:eb:40:9e:3a:b2:ab: 38:8c:83:dc:84:df:5b:7c:2a:fb:80:55:43:b6:d9:65:6d:67: a1:9b:3d:0c:f7:f6:02:52:71:52:3a:aa:3f:20:89:f4:11:cf: b1:e1:7f:3c:a6:f7:85:05:06:b0:10:42:b7:dd:41:21:c8:f7: cf:61:18:e9:d4:df:7d:38:ab:f9:38:3b:d9:47:23:7f:3e:c5: 93:ee:34:10:93:1e:d9:b2:7e:a7:d9:e1:f6:d1:f4:3d:b6:d5: c8:dc:85:4c:62:f0:5a:86:cf:bf:1b:9a:a5:d0:f8:ff:1d:fb: e0:58:38:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDREQTg2RTEwMDQzRTcx RjA0MTVDMEVGMzc5N0ZFNTExMjNCNENCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGz1y/NqM8tP1D39loD5hcpF8dHOBkg/xivyh7qEcizmeKBZvo EwAC9bt39UmaozXKzZ07K8nczcLfo2TiKFUTW5Hst89YW/Q7Rm6HS+zFyh406/X2 WpYxeMKPwHfUMCQKbgoWcmJ2ySiOlJgZ0ZYMDQdcLgNDZg5p2DnvBpmnTLxwQucq xfwiGYGyuLwFzZVigSX4pbGgdnJf6Sie9/KUrFfN6PNeESWCUa7TZ82MrKKZbUg9 h3bm1l6e963CqL9d7zkzW0Npj9BN/rotCylVH3y+bdGkIZtZEphjt6T1mI/H1oLZ LKV7Q29XluAhQcLQdeoIz6eknCP5SpbUoZK/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTahuEAQ+cfBBXA7zeX/lESO0y9gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RhaHVFQVEtY2ZCQlhBN3pl WF9sRVNPMHk5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2lQwDQYJKoZIhvcNAQELBQADggEBAG3qjHmZzowELQZMTQBk3IZJzchoaRoZRtGS n8iy5bYcBfG0cB10asEuMURnS3sMj4waudjsUyG4oVZJ77wYlE5XESYdNT1SGZxI QoDO+ZMC80mONQjIPIpUfbY4PaRMJwD2T2HeWV/UK7hpP/SzJCYcSdOtnwmsmZgo a/aKH1cPX+3fV3fIps81autAnjqyqziMg9yE31t8KvuAVUO22WVtZ6GbPQz39gJS cVI6qj8gifQRz7Hhfzym94UFBrAQQrfdQSHI989hGOnU3304q/k4O9lHI38+xZPu NBCTHtmyfqfZ4fbR9D221cjchUxi8FqGz78bmqXQ+P8d++BYODk= -----END CERTIFICATE-----Generated at Sat Oct 25 06:45:20 2025 by rpki-client