$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kXyG8gyu0RneTbhBM8judZwdWEc.roa File: kXyG8gyu0RneTbhBM8judZwdWEc.roa (raw, json) Hash identifier: l14waisR1yA8JyPHLJvRTf/N8DLP60HhAAQIqm0/iMg= Subject key identifier: 91:7C:86:F2:0C:AE:D1:19:DE:4D:B8:41:33:C8:EE:75:9C:1D:58:47 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 267E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kXyG8gyu0RneTbhBM8judZwdWEc.roa Signing time: Fri 22 Aug 2025 08:42:58 +0000 ROA not before: Fri 22 Aug 2025 08:42:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 180.218.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9854 (0x267e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=917C86F20CAED119DE4DB84133C8EE759C1D5847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:d1:d7:d8:00:52:c9:62:1f:3b:23:a9:81: 4e:33:67:87:83:8a:e5:76:d1:4d:25:e8:30:21:29: f8:8b:d2:f9:1c:70:ad:dc:ff:5c:db:ae:55:a1:17: ef:fb:f1:1b:0a:c5:6a:a0:92:a4:a6:b3:09:05:f5: dd:28:2c:63:4d:ac:43:66:29:ae:08:ea:67:a1:d7: c0:1d:6d:be:61:07:dc:08:db:39:61:ad:e8:47:99: d1:74:b0:26:dd:11:46:39:d8:99:39:6a:29:b8:80: f0:d4:11:a5:f9:db:37:36:11:f3:a6:be:81:12:c1: 9e:c6:cf:8d:32:d9:f3:c2:f2:41:17:fc:06:ba:e0: 67:cb:f9:32:34:cd:43:82:7f:d5:64:59:40:06:3b: 8b:4d:dd:65:2e:76:45:be:14:a1:3d:e7:cf:6a:f6: c2:5c:c7:91:68:0e:a0:87:c4:3b:2a:1f:34:c7:9f: 2c:ec:59:87:b7:89:46:02:26:ff:25:04:fd:0d:32: 20:be:14:98:0b:59:b1:46:3c:09:0a:95:4d:74:4b: c0:0b:c6:3b:be:06:20:31:f9:35:a3:9e:f5:ac:6f: f8:9d:2a:fa:00:06:3f:22:1f:eb:29:25:14:96:8a: d5:b7:56:57:6a:5a:7d:57:84:94:e5:07:aa:ff:61: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:86:F2:0C:AE:D1:19:DE:4D:B8:41:33:C8:EE:75:9C:1D:58:47 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kXyG8gyu0RneTbhBM8judZwdWEc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.108.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:c5:ce:f7:c7:96:60:e3:5c:cb:a9:e1:9a:5a:3e:98:36:a4: b7:c2:cf:a4:45:e7:a9:64:81:77:3c:45:e1:56:09:7b:c6:5f: ab:9a:7d:95:22:8f:8f:ab:b5:1a:45:ec:2a:35:c6:42:dc:9d: 14:a1:46:0d:43:12:a5:7e:3b:f0:3a:e6:da:00:55:88:b8:a4: 76:68:74:24:18:7f:4d:da:e4:d8:14:32:57:82:e9:16:bf:7f: 3c:1a:f1:d8:03:d6:38:f7:a2:7b:2a:fd:74:a3:c8:f4:40:24: 12:12:c0:ad:c7:ec:78:76:59:99:9c:08:03:db:2c:ed:96:2b: 0b:79:06:62:b6:a6:55:d7:9d:8c:76:d5:b6:0e:14:2f:5d:5b: 46:a8:56:64:df:0b:26:e0:63:56:0e:9e:02:34:4f:5f:31:9b: 36:20:d1:82:95:2b:40:d4:7a:7d:a5:43:aa:6a:ed:11:c9:94: 5d:46:18:3c:d7:75:ee:a2:4f:c3:e6:d8:5c:a9:9a:6f:42:21: f1:fa:c6:07:ed:08:b5:df:c6:e6:c4:d1:b6:85:34:61:ec:8e: dc:8f:a3:50:28:57:43:3c:97:c2:92:05:ca:bc:d0:e5:5c:09: 58:a7:01:9c:2e:f3:84:28:c5:26:11:dd:c6:86:64:ab:14:60: 3f:8f:37:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkxN0M4NkYyMENBRUQx MTlERTREQjg0MTMzQzhFRTc1OUMxRDU4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCof9HX2ABSyWIfOyOpgU4zZ4eDiuV20U0l6DAhKfiL0vkccK3c /1zbrlWhF+/78RsKxWqgkqSmswkF9d0oLGNNrENmKa4I6meh18Adbb5hB9wI2zlh rehHmdF0sCbdEUY52Jk5aim4gPDUEaX52zc2EfOmvoESwZ7Gz40y2fPC8kEX/Aa6 4GfL+TI0zUOCf9VkWUAGO4tN3WUudkW+FKE9589q9sJcx5FoDqCHxDsqHzTHnyzs WYe3iUYCJv8lBP0NMiC+FJgLWbFGPAkKlU10S8ALxju+BiAx+TWjnvWsb/idKvoA Bj8iH+spJRSWitW3VldqWn1XhJTlB6r/YemZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkXyG8gyu0RneTbhBM8judZwdWEcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tYeUc4Z3l1MFJuZVRiaEJN OGp1ZFp3ZFdFYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2mwwDQYJKoZIhvcNAQELBQADggEBAJ3FzvfHlmDjXMup4ZpaPpg2pLfCz6RF56lk gXc8ReFWCXvGX6uafZUij4+rtRpF7Co1xkLcnRShRg1DEqV+O/A65toAVYi4pHZo dCQYf03a5NgUMleC6Ra/fzwa8dgD1jj3onsq/XSjyPRAJBISwK3H7Hh2WZmcCAPb LO2WKwt5BmK2plXXnYx21bYOFC9dW0aoVmTfCybgY1YOngI0T18xmzYg0YKVK0DU en2lQ6pq7RHJlF1GGDzXde6iT8Pm2Fypmm9CIfH6xgftCLXfxubE0baFNGHsjtyP o1AoV0M8l8KSBcq80OVcCVinAZwu84QoxSYR3caGZKsUYD+PN6w= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:49 2025 by rpki-client