$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hjLYvfCMh2eCzsIhzk4BQoKKt9o.roa File: hjLYvfCMh2eCzsIhzk4BQoKKt9o.roa (raw, json) Hash identifier: sheCzSNUk4HF//kX0KHubb5UxbesoMk2WJzRZfdnva0= Subject key identifier: 86:32:D8:BD:F0:8C:87:67:82:CE:C2:21:CE:4E:01:42:82:8A:B7:DA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26BE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hjLYvfCMh2eCzsIhzk4BQoKKt9o.roa Signing time: Fri 22 Aug 2025 08:43:12 +0000 ROA not before: Fri 22 Aug 2025 08:43:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9918 (0x26be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8632D8BDF08C876782CEC221CE4E0142828AB7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:b8:7d:a1:64:73:9f:79:61:9a:b6:3d:af: 46:23:46:3f:18:d7:b6:f0:8a:0e:ef:50:c9:d5:f0: 74:2d:c1:ee:f2:f2:99:bf:7d:43:27:fa:b0:24:4a: 9d:03:b3:6f:c7:ca:6a:f9:c8:27:9e:7a:e3:98:50: ec:c6:4f:dd:1d:4e:dd:06:71:34:db:48:6c:a5:f1: ad:83:9e:8f:f5:57:33:2b:b4:a4:9a:58:48:a2:7c: b9:2a:dc:30:0d:1a:06:9f:79:e7:e1:f7:2c:5d:b8: f8:c0:72:9c:86:fe:79:6a:20:a9:19:05:6c:99:74: 22:1a:7b:9d:cd:a7:d8:8a:fb:42:75:2e:0a:35:3a: ac:57:95:64:d6:f9:ce:80:ec:d6:07:b0:5a:60:89: e2:11:cb:91:ec:d2:47:5e:69:ca:a3:cd:64:ef:eb: 27:58:cc:a6:b2:c1:d4:be:c3:8f:77:39:de:30:44: 50:83:0d:13:aa:cd:d3:8a:3b:e0:33:c4:c8:a8:8a: 70:0c:86:7c:86:d3:6c:6d:d7:35:96:fd:d2:39:e2: e9:db:31:a7:05:9a:58:41:5c:8d:91:32:ea:f4:b7: fe:98:4b:19:c8:c4:67:08:91:41:bd:ac:a7:56:ec: 6a:2d:7e:54:2e:21:34:d6:a3:bd:2f:c0:25:30:e4: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:32:D8:BD:F0:8C:87:67:82:CE:C2:21:CE:4E:01:42:82:8A:B7:DA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hjLYvfCMh2eCzsIhzk4BQoKKt9o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.138.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d3:9c:13:e9:a4:36:99:e9:29:55:aa:62:f3:63:56:c0:a0: 45:8c:14:c6:e1:0f:f5:9a:61:20:ce:69:ef:2f:10:c3:9a:22: 9c:0e:60:af:8d:d4:85:1e:d9:33:40:f6:69:19:48:9a:65:ed: 19:4e:1c:fc:69:5f:4f:28:35:b1:f3:f5:05:3d:17:50:8a:73: 80:a3:4e:7f:a2:31:36:ca:8c:5e:c2:ea:26:d7:39:d8:ad:32: 6b:c9:3d:5d:b9:93:c2:5c:7d:08:fd:be:8f:3d:29:79:f5:e6: 85:4c:37:95:1d:f9:44:9a:7e:05:40:d3:cf:8c:64:86:28:02: 77:33:9a:28:25:55:4d:f0:9a:21:36:ab:39:6d:19:07:60:b8: fb:83:75:92:81:4d:e5:90:c1:a2:1f:b1:68:25:6c:a1:3a:99: 40:12:f4:ea:19:d0:e0:35:4a:70:30:6d:e8:28:08:4d:8e:fd: 9c:22:6a:f6:c7:65:2d:37:b9:56:cb:b1:45:35:9c:f5:e1:9e: 89:8b:d1:cd:1c:31:3b:96:26:83:4e:da:dd:e5:65:69:9d:1a: 64:1c:53:4a:8f:64:93:87:50:3a:be:66:80:d3:ac:96:c6:c0: e2:b5:2f:35:ff:0b:cc:7b:3f:f7:23:3d:90:3c:3f:d9:34:ac: ae:29:41:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg2MzJEOEJERjA4Qzg3 Njc4MkNFQzIyMUNFNEUwMTQyODI4QUI3REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqmLh9oWRzn3lhmrY9r0YjRj8Y17bwig7vUMnV8HQtwe7y8pm/ fUMn+rAkSp0Ds2/Hymr5yCeeeuOYUOzGT90dTt0GcTTbSGyl8a2Dno/1VzMrtKSa WEiifLkq3DANGgafeefh9yxduPjAcpyG/nlqIKkZBWyZdCIae53Np9iK+0J1Lgo1 OqxXlWTW+c6A7NYHsFpgieIRy5Hs0kdeacqjzWTv6ydYzKaywdS+w493Od4wRFCD DROqzdOKO+AzxMioinAMhnyG02xt1zWW/dI54unbMacFmlhBXI2RMur0t/6YSxnI xGcIkUG9rKdW7GotflQuITTWo70vwCUw5PQTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhjLYvfCMh2eCzsIhzk4BQoKKt9owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hqTFl2ZkNNaDJlQ3pzSWh6 azRCUW9LS3Q5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2oowDQYJKoZIhvcNAQELBQADggEBAFjTnBPppDaZ6SlVqmLzY1bAoEWMFMbhD/Wa YSDOae8vEMOaIpwOYK+N1IUe2TNA9mkZSJpl7RlOHPxpX08oNbHz9QU9F1CKc4Cj Tn+iMTbKjF7C6ibXOditMmvJPV25k8JcfQj9vo89KXn15oVMN5Ud+USafgVA08+M ZIYoAnczmiglVU3wmiE2qzltGQdguPuDdZKBTeWQwaIfsWglbKE6mUAS9OoZ0OA1 SnAwbegoCE2O/ZwiavbHZS03uVbLsUU1nPXhnomL0c0cMTuWJoNO2t3lZWmdGmQc U0qPZJOHUDq+ZoDTrJbGwOK1LzX/C8x7P/cjPZA8P9k0rK4pQR8= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:48 2025 by rpki-client