$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hK5sB2phQPchzTd4fvjBdFib-9g.roa File: hK5sB2phQPchzTd4fvjBdFib-9g.roa (raw, json) Hash identifier: oJIpJZDidfEaZx5b4+Nhgd9+aHIuJYkZ7LWh1xyxSns= Subject key identifier: 84:AE:6C:07:6A:61:40:F7:21:CD:37:78:7E:F8:C1:74:58:9B:FB:D8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26F7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hK5sB2phQPchzTd4fvjBdFib-9g.roa Signing time: Fri 22 Aug 2025 08:43:26 +0000 ROA not before: Fri 22 Aug 2025 08:43:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9975 (0x26f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=84AE6C076A6140F721CD37787EF8C174589BFBD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:ba:23:76:d4:2e:15:00:ec:a2:4b:48:f4: c2:be:10:40:f2:55:6d:15:7e:38:94:20:57:5b:5d: f5:f9:3c:48:85:86:c2:2f:b3:f1:58:71:e7:64:38: 6d:7d:ed:34:ef:ea:d2:f2:84:98:b6:35:e8:fd:76: 83:2e:5c:80:60:37:01:43:0f:17:b0:0a:30:8d:8f: 4a:ec:59:8a:c8:88:63:25:d7:f1:88:6f:48:9b:d7: c9:c8:9c:69:f8:32:ed:f6:68:c4:db:e7:f0:1b:32: 4b:42:b5:aa:13:9a:a1:49:ef:16:0f:cd:c9:26:17: d2:b5:04:79:f7:ea:d8:c8:f7:a6:04:78:13:3d:5b: 0b:27:6f:fc:33:34:5b:bd:69:5d:7c:d8:be:30:3b: 13:82:a8:ea:32:d8:13:43:8b:bf:c8:78:e8:e4:85: 43:dd:40:6b:a9:ad:6c:ef:9f:13:9c:f2:34:52:30: 24:6b:70:76:69:ed:f1:d8:e7:91:2a:ba:32:9d:ba: 0e:bc:a4:14:06:ff:44:9b:1e:de:a0:a9:d0:22:eb: f7:9b:15:b4:3d:8e:e5:51:48:30:93:e5:c5:12:2b: e0:9f:f7:4b:e8:67:42:6d:be:93:da:08:a3:75:8c: 59:81:ca:e4:25:43:20:52:ef:7b:94:c5:02:6f:21: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:6C:07:6A:61:40:F7:21:CD:37:78:7E:F8:C1:74:58:9B:FB:D8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hK5sB2phQPchzTd4fvjBdFib-9g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/20 Signature Algorithm: sha256WithRSAEncryption 69:da:62:a1:8c:c7:d1:91:4e:a7:7f:2c:93:8d:57:7b:06:3c: 0a:da:2f:67:1e:f6:58:d6:37:bf:90:52:e3:63:5b:68:83:9a: 2f:3e:3d:fc:03:0a:7f:94:4a:1a:ec:d4:b8:9d:53:53:c4:36: 1f:55:ef:06:c5:e5:38:f5:30:5e:ca:f2:43:f2:81:a9:1a:eb: 3b:b5:72:88:e3:39:8a:8a:f0:3f:23:6c:9e:38:d1:af:e5:e9: fb:4f:aa:b0:0a:de:e4:c5:6a:33:b7:04:4f:37:f1:cb:f1:4e: c0:06:80:8c:ad:12:c4:56:06:ff:fb:15:1b:04:66:cf:8e:4d: a0:71:a9:58:35:25:5b:78:08:55:5c:6b:b0:a8:30:81:f8:c6: 0d:b8:61:58:5c:09:cd:a2:ac:1b:2b:1b:ed:bf:73:8c:9d:32: 19:e3:53:66:dc:63:f9:34:b5:07:47:bc:a9:36:db:58:38:1d: a7:76:c7:c7:6d:4f:b4:81:62:7c:95:ca:60:55:96:5a:e8:a6: cb:29:6a:f2:6f:59:38:75:4f:df:bb:9d:76:ba:9e:2d:96:93: 8b:3b:d1:63:61:5b:52:d5:5a:45:ff:3c:67:20:f8:fe:e3:22: d3:44:44:63:d8:95:27:65:1c:50:27:a1:f5:78:c6:42:f0:32: 5c:d6:24:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg0QUU2QzA3NkE2MTQw RjcyMUNEMzc3ODdFRjhDMTc0NTg5QkZCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaFbojdtQuFQDsoktI9MK+EEDyVW0VfjiUIFdbXfX5PEiFhsIv s/FYcedkOG197TTv6tLyhJi2Nej9doMuXIBgNwFDDxewCjCNj0rsWYrIiGMl1/GI b0ib18nInGn4Mu32aMTb5/AbMktCtaoTmqFJ7xYPzckmF9K1BHn36tjI96YEeBM9 Wwsnb/wzNFu9aV182L4wOxOCqOoy2BNDi7/IeOjkhUPdQGuprWzvnxOc8jRSMCRr cHZp7fHY55EqujKdug68pBQG/0SbHt6gqdAi6/ebFbQ9juVRSDCT5cUSK+Cf90vo Z0JtvpPaCKN1jFmByuQlQyBS73uUxQJvIQy5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhK5sB2phQPchzTd4fvjBdFib+9gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hLNXNCMnBoUVBjaHpUZDRm dmpCZEZpYi05Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 2pAwDQYJKoZIhvcNAQELBQADggEBAGnaYqGMx9GRTqd/LJONV3sGPAraL2ce9ljW N7+QUuNjW2iDmi8+PfwDCn+UShrs1LidU1PENh9V7wbF5Tj1MF7K8kPygaka6zu1 cojjOYqK8D8jbJ440a/l6ftPqrAK3uTFajO3BE838cvxTsAGgIytEsRWBv/7FRsE Zs+OTaBxqVg1JVt4CFVca7CoMIH4xg24YVhcCc2irBsrG+2/c4ydMhnjU2bcY/k0 tQdHvKk221g4Had2x8dtT7SBYnyVymBVllropsspavJvWTh1T9+7nXa6ni2Wk4s7 0WNhW1LVWkX/PGcg+P7jItNERGPYlSdlHFAnofV4xkLwMlzWJBI= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:00 2025 by rpki-client