$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bV0xI6u6hgMgEcqfkYXHn1sbhiM.roa File: bV0xI6u6hgMgEcqfkYXHn1sbhiM.roa (raw, json) Hash identifier: TNNtUbo7MeNxKxH64aKzs2LlafpS6+Mt9lO04XvV89k= Subject key identifier: 6D:5D:31:23:AB:BA:86:03:20:11:CA:9F:91:85:C7:9F:5B:1B:86:23 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2671 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bV0xI6u6hgMgEcqfkYXHn1sbhiM.roa Signing time: Fri 22 Aug 2025 08:42:55 +0000 ROA not before: Fri 22 Aug 2025 08:42:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 114.198.160.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9841 (0x2671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6D5D3123ABBA86032011CA9F9185C79F5B1B8623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:d6:5a:cf:30:ed:69:e5:f5:09:3f:18:d9: fe:3d:01:08:f5:0c:07:ab:b1:1f:23:03:76:31:b9: c9:db:24:74:c1:c7:9c:07:0d:d2:ba:2c:51:8e:59: 0c:f5:70:81:53:e1:8c:61:42:58:c6:ee:45:1a:85: 39:10:ef:b8:7a:d6:ed:d0:d0:50:ef:ea:ee:17:7a: 0a:a1:bb:3a:c6:3f:d0:13:5a:cd:5e:ac:75:23:39: e4:3a:fd:09:ad:6e:aa:94:a6:7e:f4:ac:b4:de:b3: 62:28:60:52:e9:ac:c1:d8:5a:d1:7d:a7:a4:ff:9f: 40:f7:09:50:9b:4e:90:de:0d:fb:57:d2:a5:c2:7c: 47:1c:11:c3:99:a6:06:c4:07:f0:6b:d7:f9:6f:00: 3a:f5:a6:a4:1d:7b:2d:7a:a5:41:57:fe:64:3e:8a: 8b:63:0d:fb:27:4c:bc:bc:9a:74:54:d8:b8:79:53: 87:d0:7c:c4:e3:55:71:12:8b:f7:ff:0b:94:18:68: 7d:cf:3e:f0:ab:85:59:6c:c6:4a:0c:48:aa:08:59: 48:91:fa:ad:dd:a8:b0:92:ea:5d:5b:92:aa:c7:d0: c1:32:a5:75:ae:3b:0c:e8:45:b6:57:57:31:27:21: 0e:9e:ce:ea:f8:be:33:ef:a4:7c:cc:82:65:f8:b6: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:31:23:AB:BA:86:03:20:11:CA:9F:91:85:C7:9F:5B:1B:86:23 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bV0xI6u6hgMgEcqfkYXHn1sbhiM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.160.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:01:06:e0:45:47:4a:0f:0a:01:b9:ca:80:1a:03:ed:38:e0: 80:a4:53:a4:98:32:71:ec:b0:49:72:d9:d0:fe:42:61:c4:20: 43:e5:61:15:b1:f4:99:a0:6a:50:7a:3d:af:e7:18:3f:fc:4d: a8:16:74:27:d1:9d:02:12:a5:6e:3b:b9:20:87:d6:e9:c9:a6: 47:a2:b5:ee:d3:88:3d:7e:10:28:a2:ac:b3:fa:66:99:5c:bd: 43:bd:fe:ba:af:8b:e5:06:7e:c6:1e:41:19:3b:34:b3:a8:f1: cb:20:c0:8f:a3:12:24:da:b3:3b:45:b0:cf:4f:b3:8f:03:0e: 3b:32:d1:21:3b:75:ef:1a:f4:ed:f0:9b:fd:f3:52:a0:a0:84: fe:1a:cb:e9:30:76:fa:25:04:b8:96:58:80:10:ea:74:a3:e5: a2:14:4d:3f:9d:1b:a8:3b:7b:a2:8f:03:ae:ef:26:19:4e:04: fd:6f:0f:fe:e9:2d:9c:c2:46:87:cc:57:b9:17:58:73:15:de: d7:ac:38:50:fd:30:6a:5c:33:a9:0d:15:e5:e3:af:ef:83:eb: e8:6b:fe:fb:3e:a0:eb:56:ef:af:fd:0a:9f:28:02:d5:ad:66: f5:da:92:d6:94:9e:91:47:1f:10:50:f0:24:f1:66:9e:95:6f: e1:fd:5c:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZENUQzMTIzQUJCQTg2 MDMyMDExQ0E5RjkxODVDNzlGNUIxQjg2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChLNZazzDtaeX1CT8Y2f49AQj1DAersR8jA3YxucnbJHTBx5wH DdK6LFGOWQz1cIFT4YxhQljG7kUahTkQ77h61u3Q0FDv6u4XegqhuzrGP9ATWs1e rHUjOeQ6/QmtbqqUpn70rLTes2IoYFLprMHYWtF9p6T/n0D3CVCbTpDeDftX0qXC fEccEcOZpgbEB/Br1/lvADr1pqQdey16pUFX/mQ+iotjDfsnTLy8mnRU2Lh5U4fQ fMTjVXESi/f/C5QYaH3PPvCrhVlsxkoMSKoIWUiR+q3dqLCS6l1bkqrH0MEypXWu OwzoRbZXVzEnIQ6ezur4vjPvpHzMgmX4ts89AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbV0xI6u6hgMgEcqfkYXHn1sbhiMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2JWMHhJNnU2aGdNZ0VjcWZr WVhIbjFzYmhpTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xqAwDQYJKoZIhvcNAQELBQADggEBAC0BBuBFR0oPCgG5yoAaA+044ICkU6SYMnHs sEly2dD+QmHEIEPlYRWx9JmgalB6Pa/nGD/8TagWdCfRnQISpW47uSCH1unJpkei te7TiD1+ECiirLP6ZplcvUO9/rqvi+UGfsYeQRk7NLOo8csgwI+jEiTasztFsM9P s48DDjsy0SE7de8a9O3wm/3zUqCghP4ay+kwdvolBLiWWIAQ6nSj5aIUTT+dG6g7 e6KPA67vJhlOBP1vD/7pLZzCRofMV7kXWHMV3tesOFD9MGpcM6kNFeXjr++D6+hr /vs+oOtW76/9Cp8oAtWtZvXaktaUnpFHHxBQ8CTxZp6Vb+H9XAE= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:30 2025 by rpki-client