$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aYqxt9VYUhdkd2BBVRsgzlFYDe8.roa File: aYqxt9VYUhdkd2BBVRsgzlFYDe8.roa (raw, json) Hash identifier: JlZbO8zqcqUrHPIJ1Y5b1rm9gifi3lgs+CkMlcUzwFg= Subject key identifier: 69:8A:B1:B7:D5:58:52:17:64:77:60:41:55:1B:20:CE:51:58:0D:EF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26DC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aYqxt9VYUhdkd2BBVRsgzlFYDe8.roa Signing time: Fri 22 Aug 2025 08:43:20 +0000 ROA not before: Fri 22 Aug 2025 08:43:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.159.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9948 (0x26dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=698AB1B7D558521764776041551B20CE51580DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:90:2f:b4:1d:f5:2e:e5:90:5b:a5:13:a2:f2: e6:1e:9f:31:83:bf:53:87:35:6b:cd:21:17:80:7c: 3f:f8:5a:9e:5a:ac:f5:9f:20:a1:76:d2:12:3f:51: 2a:a8:7b:91:dd:6a:d2:aa:2a:9a:b1:17:fe:5a:24: af:ee:06:c7:a7:5f:a4:08:5d:28:e7:e1:18:84:1f: 40:68:d3:de:4c:9a:5e:f2:00:ad:e4:b7:42:09:c1: ab:a5:f5:07:3c:1f:79:05:5b:ad:36:6e:12:cf:88: a8:7c:4a:53:02:eb:85:86:f9:45:c2:ad:c8:a5:e1: 8c:7f:bb:cd:59:b6:98:3a:25:53:fa:09:91:15:28: 63:87:81:b9:45:c8:cb:a4:6f:d6:49:5c:cb:d6:17: b3:09:b9:c7:85:8a:1d:cf:f4:75:44:06:b5:14:0a: b3:d8:03:23:4d:b8:8b:b0:c9:cc:46:15:23:93:09: c8:6c:df:48:dd:e1:b3:17:03:c4:5b:c0:09:df:35: 38:9c:f2:37:cd:ec:28:02:38:e1:7d:5b:3e:3a:3b: 42:ca:c5:51:e3:af:1b:34:77:91:08:3f:86:b8:8e: 79:69:80:aa:80:78:83:9c:24:11:c9:60:52:f5:4d: c2:b1:b4:b0:2b:fa:fa:d7:77:92:e9:ee:2c:07:fb: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8A:B1:B7:D5:58:52:17:64:77:60:41:55:1B:20:CE:51:58:0D:EF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aYqxt9VYUhdkd2BBVRsgzlFYDe8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.32.0/19 Signature Algorithm: sha256WithRSAEncryption 95:fe:76:97:68:c0:d6:ae:67:39:f0:97:83:13:c4:d3:86:38: 04:b1:ae:70:c9:5b:90:af:1f:88:44:10:df:5b:ff:34:cc:66: e3:f4:90:6e:e7:a2:3f:95:6a:8d:f0:2d:23:e9:53:01:00:04: 9b:3e:83:28:3a:fb:d9:00:76:3d:44:a8:9e:a5:89:c1:8e:f4: 73:a5:5a:4f:e2:37:f2:a6:69:3a:47:2d:8d:91:c3:25:2f:3d: 2e:ac:aa:85:6f:8c:2e:32:72:d6:c5:b6:de:63:0b:de:92:ba: e8:e1:39:e1:4e:1d:87:7a:a2:cb:2a:19:6d:7d:da:e9:96:64: a9:b8:8e:57:88:d8:88:f5:48:26:13:95:98:37:e7:39:b2:1f: c8:75:67:6b:27:33:b8:b0:23:c3:0a:73:0d:a0:c7:91:58:11: f9:7b:6d:5d:1a:75:db:91:0a:2b:9b:c1:d2:4a:9e:e6:22:c0: 2f:a9:b0:ac:78:b4:ae:70:ff:8a:59:a7:6f:df:81:a4:c1:e9: 71:b5:24:17:a2:37:98:45:30:51:7a:7e:2e:b0:a8:52:cb:f5: b8:61:80:40:30:33:31:51:84:36:ff:6a:aa:7a:71:8b:41:2a: 79:89:4e:dd:1c:41:3f:0f:ed:2f:11:86:0e:bb:40:15:6e:83: 9b:90:6a:68 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5OEFCMUI3RDU1ODUy MTc2NDc3NjA0MTU1MUIyMENFNTE1ODBERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDykC+0HfUu5ZBbpROi8uYenzGDv1OHNWvNIReAfD/4Wp5arPWf IKF20hI/USqoe5HdatKqKpqxF/5aJK/uBsenX6QIXSjn4RiEH0Bo095Mml7yAK3k t0IJwaul9Qc8H3kFW602bhLPiKh8SlMC64WG+UXCrcil4Yx/u81Ztpg6JVP6CZEV KGOHgblFyMukb9ZJXMvWF7MJuceFih3P9HVEBrUUCrPYAyNNuIuwycxGFSOTCchs 30jd4bMXA8RbwAnfNTic8jfN7CgCOOF9Wz46O0LKxVHjrxs0d5EIP4a4jnlpgKqA eIOcJBHJYFL1TcKxtLAr+vrXd5Lp7iwH+2jlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaYqxt9VYUhdkd2BBVRsgzlFYDe8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2FZcXh0OVZZVWhka2QyQkJW UnNnemxGWURlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUx nyAwDQYJKoZIhvcNAQELBQADggEBAJX+dpdowNauZznwl4MTxNOGOASxrnDJW5Cv H4hEEN9b/zTMZuP0kG7noj+Vao3wLSPpUwEABJs+gyg6+9kAdj1EqJ6licGO9HOl Wk/iN/KmaTpHLY2RwyUvPS6sqoVvjC4yctbFtt5jC96SuujhOeFOHYd6ossqGW19 2umWZKm4jleI2Ij1SCYTlZg35zmyH8h1Z2snM7iwI8MKcw2gx5FYEfl7bV0adduR CiubwdJKnuYiwC+psKx4tK5w/4pZp2/fgaTB6XG1JBeiN5hFMFF6fi6wqFLL9bhh gEAwMzFRhDb/aqp6cYtBKnmJTt0cQT8P7S8Rhg67QBVug5uQamg= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:15 2025 by rpki-client