$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iIML07f09Gzp6kRAmeeqnXjz5OY.roa File: iIML07f09Gzp6kRAmeeqnXjz5OY.roa (raw, json) Hash identifier: o1hakDUmUnAtympfKmqVIB/6NG2FbhAG7XNi84claDA= Subject key identifier: 88:83:0B:D3:B7:F4:F4:6C:E9:EA:44:40:99:E7:AA:9D:78:F3:E4:E6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 271A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iIML07f09Gzp6kRAmeeqnXjz5OY.roa Signing time: Fri 22 Aug 2025 08:43:34 +0000 ROA not before: Fri 22 Aug 2025 08:43:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10010 (0x271a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=88830BD3B7F4F46CE9EA444099E7AA9D78F3E4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:ba:db:13:dd:7a:5d:66:80:b9:f7:c0:2b: 7c:70:89:0e:da:f7:d5:0d:98:8d:4f:b1:e9:0a:ee: 06:de:dc:60:42:e3:1f:06:e3:a9:ea:f1:6c:cb:ac: 78:6b:b4:79:e7:5b:58:61:a6:37:56:8f:b3:7a:30: 93:90:ca:96:88:ff:c9:15:f7:74:32:da:31:24:a8: 17:8e:1f:00:e2:73:09:ab:90:77:ca:07:b9:83:a0: 02:01:70:d7:b3:5b:1b:69:57:19:2b:cf:9a:af:f7: 5b:75:00:28:be:c1:62:42:7e:89:9f:58:83:7b:d7: 3b:95:ea:89:0e:0f:c7:94:e4:5d:14:6d:4d:5d:39: 0e:84:ed:bb:a1:4b:45:c8:51:93:ed:5e:f0:63:11: 19:cd:13:01:05:82:58:97:01:08:75:fe:35:18:2a: a2:e8:3e:be:ef:a5:d9:17:f5:ef:e9:f5:e2:76:3d: 49:ab:fb:c3:f6:1e:a3:aa:65:de:52:18:a4:26:d7: 67:82:3d:99:12:44:b4:96:e1:ef:f6:4f:36:73:d0: 60:ca:f3:49:d9:0e:4b:e5:f8:c8:3e:ba:7b:3f:7e: 52:b7:a5:50:19:a9:6b:ad:0c:16:cb:c4:21:44:b6: a7:d4:ad:eb:3b:bc:22:da:5d:8b:98:36:7a:32:76: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:0B:D3:B7:F4:F4:6C:E9:EA:44:40:99:E7:AA:9D:78:F3:E4:E6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iIML07f09Gzp6kRAmeeqnXjz5OY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.96.0/21 Signature Algorithm: sha256WithRSAEncryption 24:d4:a7:64:0c:98:36:05:b9:03:b4:9c:a3:97:16:85:e7:5f: 83:66:fb:e0:04:7b:e9:94:55:8e:ec:87:da:88:7c:f7:8c:ce: 5f:4c:5c:e6:be:75:3e:82:35:75:79:ff:9d:d1:6e:8b:eb:cf: ca:8a:f0:0a:47:47:55:25:b8:87:db:29:7f:ac:4c:61:b4:f4: 9f:a4:6c:f0:de:18:3f:74:a0:d0:ba:37:c5:95:c4:6b:b0:2d: d4:d1:75:ae:2e:fc:26:78:50:7e:6b:6a:87:77:fe:18:13:37: 49:a2:52:59:3d:d2:bb:91:d4:f0:30:ad:be:47:7f:19:39:f4: 41:7d:85:6b:43:e3:00:8b:bc:fb:49:af:49:e8:be:b8:29:76: 8b:06:a8:00:b5:1f:15:39:85:c4:50:22:68:c0:6f:38:d9:e5: e5:3b:07:f3:3b:42:80:72:58:c7:a7:6e:7c:23:66:7b:53:1b: 20:21:79:22:97:c0:bb:dd:a0:f5:5d:62:66:86:16:8f:d4:17: 72:e8:98:fe:74:56:9d:32:e2:5d:ff:86:78:3b:b3:b3:be:c1: fb:66:1c:dc:92:ec:b8:26:bf:dd:5e:b3:56:fe:0e:a9:3a:eb: 19:e9:0d:d1:72:f4:3a:d3:ab:12:7e:be:3b:eb:79:a6:85:31: 7e:2b:0b:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4ODMwQkQzQjdGNEY0 NkNFOUVBNDQ0MDk5RTdBQTlENzhGM0U0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl97rbE916XWaAuffAK3xwiQ7a99UNmI1PsekK7gbe3GBC4x8G 46nq8WzLrHhrtHnnW1hhpjdWj7N6MJOQypaI/8kV93Qy2jEkqBeOHwDicwmrkHfK B7mDoAIBcNezWxtpVxkrz5qv91t1ACi+wWJCfomfWIN71zuV6okOD8eU5F0UbU1d OQ6E7buhS0XIUZPtXvBjERnNEwEFgliXAQh1/jUYKqLoPr7vpdkX9e/p9eJ2PUmr +8P2HqOqZd5SGKQm12eCPZkSRLSW4e/2TzZz0GDK80nZDkvl+Mg+uns/flK3pVAZ qWutDBbLxCFEtqfUres7vCLaXYuYNnoydmCXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiIML07f09Gzp6kRAmeeqnXjz5OYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2lJTUwwN2YwOUd6cDZrUkFt ZWVxblhqejVPWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nmAwDQYJKoZIhvcNAQELBQADggEBACTUp2QMmDYFuQO0nKOXFoXnX4Nm++AEe+mU VY7sh9qIfPeMzl9MXOa+dT6CNXV5/53Rbovrz8qK8ApHR1UluIfbKX+sTGG09J+k bPDeGD90oNC6N8WVxGuwLdTRda4u/CZ4UH5raod3/hgTN0miUlk90ruR1PAwrb5H fxk59EF9hWtD4wCLvPtJr0novrgpdosGqAC1HxU5hcRQImjAbzjZ5eU7B/M7QoBy WMenbnwjZntTGyAheSKXwLvdoPVdYmaGFo/UF3LomP50Vp0y4l3/hng7s7O+wftm HNyS7Lgmv91es1b+Dqk66xnpDdFy9DrTqxJ+vjvreaaFMX4rCxM= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:39 2025 by rpki-client