$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jQVkfCQ-1Us-YX8VTIK1GOfY2KY.roa File: jQVkfCQ-1Us-YX8VTIK1GOfY2KY.roa (raw, json) Hash identifier: OV1VMVmb8xqONJ1rOUCIULjTk/+PkHaT/g9Wzd2U2Us= Subject key identifier: 8D:05:64:7C:24:3E:D5:4B:3E:61:7F:15:4C:82:B5:18:E7:D8:D8:A6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2603 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jQVkfCQ-1Us-YX8VTIK1GOfY2KY.roa Signing time: Fri 22 Aug 2025 08:42:29 +0000 ROA not before: Fri 22 Aug 2025 08:42:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.159.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9731 (0x2603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8D05647C243ED54B3E617F154C82B518E7D8D8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:21:12:80:6c:7b:2b:b6:e4:6c:7c:46:8e: 43:ac:6e:6a:d4:3d:6f:09:54:28:92:a6:f9:6e:26: 5d:77:15:bf:1c:18:16:7c:ad:27:02:49:e7:48:c4: 83:81:4f:b8:4d:f9:f8:24:18:2f:77:a5:b5:13:b1: 95:7f:83:a3:ef:ed:dc:bc:4c:5a:a4:86:0b:11:40: 03:b6:7d:5f:62:47:9c:ff:41:8f:62:c0:46:22:69: 6a:6d:06:97:f5:7d:d6:17:22:86:92:55:82:ff:81: 26:60:8f:e0:0c:9f:ec:81:3d:5e:5e:c2:5f:69:be: c7:ed:c5:3f:03:7b:cb:82:34:e8:31:5b:7c:18:4f: b9:05:39:e9:ca:97:87:a0:28:43:37:a4:9b:06:86: 91:1e:2f:18:6d:bd:62:b9:86:32:62:dc:ff:1f:c3: 28:5f:b1:bc:ce:e3:6b:76:aa:d0:bf:08:b5:d4:85: 9a:5b:6f:0b:a6:f2:e0:60:22:a3:89:b8:fb:46:dc: 76:d1:41:d4:22:27:4f:18:86:f1:d3:fc:35:0b:77: fa:25:0d:bd:55:02:bc:9f:44:09:a0:f3:2f:ee:88: 61:2b:f6:9d:62:fc:cf:bf:7e:40:cc:56:05:5c:36: 0b:9a:d7:1c:32:c2:63:27:68:85:81:07:dc:24:b6: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:05:64:7C:24:3E:D5:4B:3E:61:7F:15:4C:82:B5:18:E7:D8:D8:A6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jQVkfCQ-1Us-YX8VTIK1GOfY2KY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.128.0/22 Signature Algorithm: sha256WithRSAEncryption 41:2f:90:69:55:ae:cd:0c:4d:8f:20:1c:45:e4:8c:c0:03:02: bb:06:98:e7:be:30:8d:20:09:7c:ec:2e:ac:b5:0d:36:f4:80: 34:31:fe:3b:ac:28:dc:64:6a:c1:96:81:f8:ad:20:d8:e0:6f: eb:6a:69:69:22:ed:06:b6:52:d1:a0:6e:3f:ac:7c:bd:f6:f3: 90:92:cf:8f:3e:9c:68:49:c4:1c:31:ca:43:ae:b9:3a:ca:fc: 01:86:ab:1d:13:c8:d1:69:f7:af:5c:5f:a7:23:95:61:4c:59: 96:b4:92:5b:3d:cc:3d:08:a9:d4:62:e4:b4:f3:63:b9:cc:1a: 0f:e2:c9:22:f8:65:2e:18:34:70:ca:72:55:3d:24:28:83:82: 9b:57:14:29:5b:04:af:10:17:4c:64:17:bb:06:b7:55:06:22: 50:18:17:ff:b7:58:c3:f7:de:16:59:b5:74:85:54:ec:51:30: 43:e0:a2:ad:43:1f:7a:bd:b1:b0:bb:ea:cf:3c:97:1f:f9:c8: 15:5c:7c:8f:20:8f:f5:ee:31:4a:6d:3e:2d:97:03:d8:ff:44: c9:8e:8a:75:cf:92:0e:f3:e9:49:a7:b3:36:f8:de:ae:21:9e: 3b:d4:e4:68:0e:62:7a:70:f3:da:25:0c:fe:ca:69:06:84:64: 9e:3c:49:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhEMDU2NDdDMjQzRUQ1 NEIzRTYxN0YxNTRDODJCNTE4RTdEOEQ4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpBiESgGx7K7bkbHxGjkOsbmrUPW8JVCiSpvluJl13Fb8cGBZ8 rScCSedIxIOBT7hN+fgkGC93pbUTsZV/g6Pv7dy8TFqkhgsRQAO2fV9iR5z/QY9i wEYiaWptBpf1fdYXIoaSVYL/gSZgj+AMn+yBPV5ewl9pvsftxT8De8uCNOgxW3wY T7kFOenKl4egKEM3pJsGhpEeLxhtvWK5hjJi3P8fwyhfsbzO42t2qtC/CLXUhZpb bwum8uBgIqOJuPtG3HbRQdQiJ08YhvHT/DULd/olDb1VAryfRAmg8y/uiGEr9p1i /M+/fkDMVgVcNgua1xwywmMnaIWBB9wkto6rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjQVkfCQ+1Us+YX8VTIK1GOfY2KYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pRVmtmQ1EtMVVzLVlYOFZU SUsxR09mWTJLWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n4AwDQYJKoZIhvcNAQELBQADggEBAEEvkGlVrs0MTY8gHEXkjMADArsGmOe+MI0g CXzsLqy1DTb0gDQx/jusKNxkasGWgfitINjgb+tqaWki7Qa2UtGgbj+sfL3285CS z48+nGhJxBwxykOuuTrK/AGGqx0TyNFp969cX6cjlWFMWZa0kls9zD0IqdRi5LTz Y7nMGg/iySL4ZS4YNHDKclU9JCiDgptXFClbBK8QF0xkF7sGt1UGIlAYF/+3WMP3 3hZZtXSFVOxRMEPgoq1DH3q9sbC76s88lx/5yBVcfI8gj/XuMUptPi2XA9j/RMmO inXPkg7z6Umnszb43q4hnjvU5GgOYnpw89olDP7KaQaEZJ48SZ4= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:00 2025 by rpki-client