$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kW78x275HMEPzJEHq_WeejBnIUE.roa File: kW78x275HMEPzJEHq_WeejBnIUE.roa (raw, json) Hash identifier: BMMwTYScMvIul/Wi6QWqgVjRQ881exUKEKFLYn1YNdQ= Subject key identifier: 91:6E:FC:C7:6E:F9:1C:C1:0F:CC:91:07:AB:F5:9E:7A:30:67:21:41 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2703 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kW78x275HMEPzJEHq_WeejBnIUE.roa Signing time: Fri 22 Aug 2025 08:43:29 +0000 ROA not before: Fri 22 Aug 2025 08:43:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 180.218.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9987 (0x2703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=916EFCC76EF91CC10FCC9107ABF59E7A30672141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:28:9c:be:74:9a:c8:ab:cb:b7:a4:61:76: be:f2:e0:ab:30:f2:5e:01:de:80:de:60:52:c5:b1: 38:8b:a6:e6:5a:2a:04:dc:66:23:4e:00:b6:bf:e7: d3:2d:35:47:b6:c3:ed:bf:a1:58:b3:c9:4a:d9:6e: 92:f7:9a:b1:dd:ee:b6:bd:79:7a:f1:01:4e:55:9f: d6:93:4a:0a:c2:97:74:74:b9:22:84:1e:5d:f7:c2: 3e:b7:5e:67:88:18:1c:3a:5c:32:1a:dd:b2:e7:55: 16:15:64:a4:72:bf:a9:c6:00:76:ab:48:c9:aa:1a: 29:d3:b4:a4:4c:15:09:c0:f6:1b:69:53:74:af:8e: 19:70:10:28:e5:c2:b9:40:f3:dd:ab:22:1a:da:59: 1c:6a:e4:76:dd:69:8d:2c:5f:b5:2a:c3:68:ea:70: 7a:57:53:19:01:53:e8:68:cc:83:74:aa:3d:7c:4a: 75:c4:76:65:48:b1:ac:2c:e5:d7:d1:39:b3:c4:42: 19:4a:01:c9:4f:c6:e9:a9:c9:63:90:cb:0a:e6:55: 8c:1d:5c:7c:29:d9:a6:7e:5f:03:c8:65:b7:61:d0: b1:8f:7e:42:02:e0:d7:24:88:9b:63:73:85:fe:b0: d4:05:30:a2:56:51:56:bb:31:8a:c6:95:c8:49:58: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6E:FC:C7:6E:F9:1C:C1:0F:CC:91:07:AB:F5:9E:7A:30:67:21:41 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kW78x275HMEPzJEHq_WeejBnIUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:cc:c8:12:62:fd:2a:21:26:72:c6:97:be:f9:8b:44:3f:58: 44:66:27:08:7c:2a:c1:ad:65:1a:41:d2:71:11:d7:87:16:ba: 17:97:6e:0e:6f:81:29:2d:7a:3b:c1:5a:74:74:ab:2a:82:3f: e6:e7:01:a7:af:18:26:23:b9:f0:44:6a:44:0f:04:ef:c1:05: e9:fb:b6:7f:78:7d:93:d6:91:c4:fe:77:2e:a8:22:d4:d9:a9: 30:5f:f9:fe:ef:2d:bd:87:c9:0a:31:73:52:62:83:af:a9:58: 3a:43:32:13:65:b7:c3:2a:00:54:bb:a8:14:9a:50:8e:ef:72: 9a:04:b9:03:0d:38:d2:24:5a:58:21:ef:f3:fa:6d:55:37:c5: 82:ab:aa:9e:d4:f8:71:d5:b6:67:e1:ea:b5:db:19:1c:2c:d9: c8:32:15:37:f3:60:ec:72:62:77:6a:da:3b:81:20:82:72:b8: ae:08:a7:e5:42:a9:33:1e:d6:63:7b:f0:c9:0f:05:6c:38:b5: 49:5f:cf:55:41:bc:53:66:d0:8f:ba:c5:5e:dc:b1:57:09:a1: 12:ee:c7:38:f5:10:92:97:f7:dc:08:56:9e:9f:29:9b:0b:2c: d4:63:d3:b2:17:72:5d:35:a4:78:78:fd:34:db:b5:a0:d0:fe: 12:25:8b:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkxNkVGQ0M3NkVGOTFD QzEwRkNDOTEwN0FCRjU5RTdBMzA2NzIxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCY7SicvnSayKvLt6Rhdr7y4Ksw8l4B3oDeYFLFsTiLpuZaKgTc ZiNOALa/59MtNUe2w+2/oVizyUrZbpL3mrHd7ra9eXrxAU5Vn9aTSgrCl3R0uSKE Hl33wj63XmeIGBw6XDIa3bLnVRYVZKRyv6nGAHarSMmqGinTtKRMFQnA9htpU3Sv jhlwECjlwrlA892rIhraWRxq5HbdaY0sX7Uqw2jqcHpXUxkBU+hozIN0qj18SnXE dmVIsaws5dfRObPEQhlKAclPxumpyWOQywrmVYwdXHwp2aZ+XwPIZbdh0LGPfkIC 4NckiJtjc4X+sNQFMKJWUVa7MYrGlchJWCWLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkW78x275HMEPzJEHq/WeejBnIUEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tXNzh4Mjc1SE1FUHpKRUhx X1dlZWpCbklVRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2mAwDQYJKoZIhvcNAQELBQADggEBAF3MyBJi/SohJnLGl775i0Q/WERmJwh8KsGt ZRpB0nER14cWuheXbg5vgSktejvBWnR0qyqCP+bnAaevGCYjufBEakQPBO/BBen7 tn94fZPWkcT+dy6oItTZqTBf+f7vLb2HyQoxc1Jig6+pWDpDMhNlt8MqAFS7qBSa UI7vcpoEuQMNONIkWlgh7/P6bVU3xYKrqp7U+HHVtmfh6rXbGRws2cgyFTfzYOxy Yndq2juBIIJyuK4Ip+VCqTMe1mN78MkPBWw4tUlfz1VBvFNm0I+6xV7csVcJoRLu xzj1EJKX99wIVp6fKZsLLNRj07IXcl01pHh4/TTbtaDQ/hIli7o= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:45 2025 by rpki-client