$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WhzgykgLowdXegdJfNOuiMUwx1U.roa File: WhzgykgLowdXegdJfNOuiMUwx1U.roa (raw, json) Hash identifier: Lcv7YPK6yMH/k5xAZBgvhF6T354YWU9UI3ND9ic2seg= Subject key identifier: 5A:1C:E0:CA:48:0B:A3:07:57:7A:07:49:7C:D3:AE:88:C5:30:C7:55 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2734 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WhzgykgLowdXegdJfNOuiMUwx1U.roa Signing time: Fri 22 Aug 2025 08:43:39 +0000 ROA not before: Fri 22 Aug 2025 08:43:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 211.76.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10036 (0x2734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5A1CE0CA480BA307577A07497CD3AE88C530C755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:df:5f:d8:a1:c2:ff:57:63:55:e9:01:32: 6e:4e:b9:22:45:55:5f:66:b2:59:b7:a7:54:b7:c9: 2c:f0:c9:d8:d2:e8:4c:42:da:f7:15:77:d6:d8:83: 9a:b3:bc:30:09:c4:8f:bd:44:46:ce:28:74:65:84: 3c:36:89:2c:27:ca:ec:f5:2e:3a:ef:69:e3:74:e4: c7:f9:5d:7c:fb:81:33:f8:11:d7:a5:5c:e7:6e:e9: 9b:69:20:31:a8:c6:8f:b8:ac:da:c8:95:1e:70:66: 48:69:71:3b:0f:8d:67:43:eb:4c:6b:e3:71:38:63: de:fb:5f:fd:8d:f7:aa:fb:3a:a5:35:fb:cc:78:a0: 9c:a7:e2:83:46:37:df:24:83:85:ad:bb:74:be:6c: 35:f2:42:01:5a:cd:7c:11:50:34:76:d0:5a:fa:bd: 29:5d:ee:e3:78:3b:e0:ac:8c:b5:05:4a:93:33:2f: 5b:f2:5e:49:48:79:62:4d:6b:12:fe:af:ed:f2:7b: 53:82:98:b1:f5:0c:ed:4e:36:9d:b6:eb:f5:49:74: 2f:83:3a:12:78:19:6f:84:ca:bc:96:b8:b1:0f:95: b9:70:b6:17:d5:9e:00:89:67:28:c6:2b:7e:e4:42: 1d:4a:18:9e:36:82:b1:21:11:85:9f:04:ac:46:e8: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1C:E0:CA:48:0B:A3:07:57:7A:07:49:7C:D3:AE:88:C5:30:C7:55 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WhzgykgLowdXegdJfNOuiMUwx1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.56.0/22 Signature Algorithm: sha256WithRSAEncryption 93:a1:32:52:54:82:08:53:19:7b:22:50:c7:5c:70:3d:e5:29: bc:47:ec:76:e1:3d:fe:86:ee:c5:23:eb:6b:97:94:37:f4:7b: c4:03:e6:73:18:5e:3f:6e:cb:e4:df:d6:65:d6:ad:e5:90:06: ac:ab:6b:0a:10:53:18:ae:7f:5a:ba:94:98:9a:4a:fe:3a:aa: 86:89:5c:1a:55:b7:1e:90:83:1a:d1:bc:0a:27:22:06:58:8e: bc:cb:34:03:1e:28:ea:79:69:d8:08:6d:b1:df:77:be:82:ac: 14:37:25:48:fa:71:e9:b2:02:6e:da:c6:aa:be:de:9e:42:1b: 7d:e2:62:ab:44:4e:37:f9:e3:40:59:76:70:5c:b1:cd:d0:5a: 0a:7a:29:1c:94:1f:6a:3b:8b:6d:e5:57:c5:38:54:15:3b:44: 4b:66:a2:8b:f8:75:20:17:6e:c2:96:03:22:44:14:e1:37:9e: a9:a8:69:26:7a:2c:22:7b:55:da:41:05:16:c0:47:14:67:d0: 0f:94:bc:db:88:5d:a8:f5:50:37:43:7e:b4:d9:6e:da:4f:ab: ff:ed:c8:d3:cd:d4:80:25:44:7d:a1:72:e7:89:b6:51:ea:61: e8:c4:4a:55:dd:88:8e:d2:94:24:cf:95:7d:76:cc:1f:45:03: 2a:c6:f4:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBMUNFMENBNDgwQkEz MDc1NzdBMDc0OTdDRDNBRTg4QzUzMEM3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtbN9f2KHC/1djVekBMm5OuSJFVV9mslm3p1S3ySzwydjS6ExC 2vcVd9bYg5qzvDAJxI+9REbOKHRlhDw2iSwnyuz1LjrvaeN05Mf5XXz7gTP4Edel XOdu6ZtpIDGoxo+4rNrIlR5wZkhpcTsPjWdD60xr43E4Y977X/2N96r7OqU1+8x4 oJyn4oNGN98kg4Wtu3S+bDXyQgFazXwRUDR20Fr6vSld7uN4O+CsjLUFSpMzL1vy XklIeWJNaxL+r+3ye1OCmLH1DO1ONp226/VJdC+DOhJ4GW+EyryWuLEPlblwthfV ngCJZyjGK37kQh1KGJ42grEhEYWfBKxG6GHHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWhzgykgLowdXegdJfNOuiMUwx1UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1doemd5a2dMb3dkWGVnZEpm Tk91aU1Vd3gxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TDgwDQYJKoZIhvcNAQELBQADggEBAJOhMlJUgghTGXsiUMdccD3lKbxH7HbhPf6G 7sUj62uXlDf0e8QD5nMYXj9uy+Tf1mXWreWQBqyrawoQUxiuf1q6lJiaSv46qoaJ XBpVtx6QgxrRvAonIgZYjrzLNAMeKOp5adgIbbHfd76CrBQ3JUj6cemyAm7axqq+ 3p5CG33iYqtETjf540BZdnBcsc3QWgp6KRyUH2o7i23lV8U4VBU7REtmoov4dSAX bsKWAyJEFOE3nqmoaSZ6LCJ7VdpBBRbARxRn0A+UvNuIXaj1UDdDfrTZbtpPq//t yNPN1IAlRH2hcueJtlHqYejESlXdiI7SlCTPlX12zB9FAyrG9PI= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:32 2025 by rpki-client