$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z6qrb1zLYRVIoOSwLZvVON_2MTQ.roa File: Z6qrb1zLYRVIoOSwLZvVON_2MTQ.roa (raw, json) Hash identifier: vBcYNo7mGd5JxkDvRUZZFr0Wa90ZfwS7jkaRjRDBmws= Subject key identifier: 67:AA:AB:6F:5C:CB:61:15:48:A0:E4:B0:2D:9B:D5:38:DF:F6:31:34 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2647 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z6qrb1zLYRVIoOSwLZvVON_2MTQ.roa Signing time: Fri 22 Aug 2025 08:42:47 +0000 ROA not before: Fri 22 Aug 2025 08:42:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9799 (0x2647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=67AAAB6F5CCB611548A0E4B02D9BD538DFF63134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:f2:e5:81:2b:f3:3e:26:3e:4f:22:c3:01: 9b:94:8a:e3:f5:6e:2b:42:ce:b8:29:d7:ef:57:ad: a3:8a:2a:39:d7:cb:93:ce:68:c1:45:0f:60:1e:d9: 96:62:d9:a2:a8:cb:60:f7:3b:c6:6e:22:69:55:1d: 9b:01:51:31:94:30:42:b6:de:85:fd:e7:18:b4:74: 5c:4b:1f:28:66:3a:b9:b7:d8:3e:34:95:be:5e:e5: ac:4e:35:f8:f2:f1:e9:a8:03:8a:96:39:71:08:8f: 00:8f:e6:05:2e:c7:88:8b:cb:30:b2:6e:91:a9:b4: 48:da:1e:d6:0b:29:80:6a:67:77:57:88:e9:a9:2b: e3:af:bd:4f:89:0c:a7:b9:5e:a7:30:2b:2f:3e:5a: 14:08:c1:45:9b:ff:51:16:c0:a5:44:81:39:96:6f: 11:f1:53:e3:f2:7e:f2:b5:42:83:c4:94:0a:f6:b0: a1:6e:37:d0:5b:0d:2d:bd:c4:69:4a:57:da:67:c7: 83:1a:e7:d8:79:99:05:1b:7c:e8:12:9b:98:d5:b6: be:41:69:f6:15:25:b2:9d:f5:31:df:c7:71:77:ec: 91:e3:b2:a6:96:00:f3:ed:e9:0e:7e:8c:2b:0b:07: 58:80:e8:b2:18:ff:70:d1:77:57:9b:dc:e6:fa:1c: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AA:AB:6F:5C:CB:61:15:48:A0:E4:B0:2D:9B:D5:38:DF:F6:31:34 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z6qrb1zLYRVIoOSwLZvVON_2MTQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.32.0/21 Signature Algorithm: sha256WithRSAEncryption 30:6f:0d:cf:3a:80:c0:3d:28:7f:72:47:27:2c:f7:a8:a1:6a: f6:e5:a4:98:f2:71:0f:c1:4e:bb:b9:07:0c:01:44:c7:e2:f8: 2d:0f:50:0c:ad:74:29:08:41:af:f0:b9:5b:47:b4:4a:72:45: ba:75:6b:51:26:23:c0:4b:81:5f:2a:c5:ec:de:bc:a5:5a:19: 5e:b2:47:5c:c6:e7:07:4e:71:02:f9:3a:10:15:7a:4c:a5:fc: 62:28:db:40:2c:ed:3a:b8:c6:6a:0e:77:37:ce:f4:44:16:3b: 75:9f:04:bb:3e:be:00:85:10:22:48:15:3c:a2:bb:94:66:a2: 64:d4:95:44:3f:f9:5c:60:d9:b9:66:5c:87:10:5e:c2:32:95: b3:ec:75:a4:9c:19:50:2f:2e:42:35:92:c4:b8:2c:91:bc:0c: e3:94:63:77:3e:aa:dd:57:9d:75:95:f7:21:10:f9:ae:1d:dd: 66:c5:5d:eb:9d:43:ce:67:23:09:92:44:9d:a4:cd:cf:0b:24: 38:6e:3d:73:c6:20:0d:71:75:29:37:bd:2b:40:22:87:dd:02: d5:d3:33:d9:14:a7:5f:49:1d:19:ee:e5:a5:e6:9e:f2:53:01: ca:88:0e:51:e4:c5:32:cb:5a:84:d7:cb:d0:76:53:80:fb:6e: db:e4:f0:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY3QUFBQjZGNUNDQjYx MTU0OEEwRTRCMDJEOUJENTM4REZGNjMxMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCam/LlgSvzPiY+TyLDAZuUiuP1bitCzrgp1+9XraOKKjnXy5PO aMFFD2Ae2ZZi2aKoy2D3O8ZuImlVHZsBUTGUMEK23oX95xi0dFxLHyhmOrm32D40 lb5e5axONfjy8emoA4qWOXEIjwCP5gUux4iLyzCybpGptEjaHtYLKYBqZ3dXiOmp K+OvvU+JDKe5XqcwKy8+WhQIwUWb/1EWwKVEgTmWbxHxU+PyfvK1QoPElAr2sKFu N9BbDS29xGlKV9pnx4Ma59h5mQUbfOgSm5jVtr5BafYVJbKd9THfx3F37JHjsqaW APPt6Q5+jCsLB1iA6LIY/3DRd1eb3Ob6HD4rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZ6qrb1zLYRVIoOSwLZvVON/2MTQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1o2cXJiMXpMWVJWSW9PU3dM WnZWT05fMk1UUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx niAwDQYJKoZIhvcNAQELBQADggEBADBvDc86gMA9KH9yRycs96ihavblpJjycQ/B Tru5BwwBRMfi+C0PUAytdCkIQa/wuVtHtEpyRbp1a1EmI8BLgV8qxezevKVaGV6y R1zG5wdOcQL5OhAVekyl/GIo20As7Tq4xmoOdzfO9EQWO3WfBLs+vgCFECJIFTyi u5RmomTUlUQ/+Vxg2blmXIcQXsIylbPsdaScGVAvLkI1ksS4LJG8DOOUY3c+qt1X nXWV9yEQ+a4d3WbFXeudQ85nIwmSRJ2kzc8LJDhuPXPGIA1xdSk3vStAIofdAtXT M9kUp19JHRnu5aXmnvJTAcqIDlHkxTLLWoTXy9B2U4D7btvk8DA= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:19 2025 by rpki-client