$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9u8mW4UZqim0swkcQLCl_Cwm4g.roa File: l9u8mW4UZqim0swkcQLCl_Cwm4g.roa (raw, json) Hash identifier: ozWNFPKwRWtNLI2dCI/aYudsejp652UhgNPxD6MAguQ= Subject key identifier: 97:DB:BC:99:6E:14:66:A8:A6:D2:CC:24:71:02:C2:97:F0:B0:9B:88 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2654 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9u8mW4UZqim0swkcQLCl_Cwm4g.roa Signing time: Fri 22 Aug 2025 08:42:49 +0000 ROA not before: Fri 22 Aug 2025 08:42:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 123.0.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9812 (0x2654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=97DBBC996E1466A8A6D2CC247102C297F0B09B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:66:85:89:dd:55:cd:b3:d5:a6:b2:1e:d0: f6:35:55:2f:d4:53:c2:67:5d:09:93:e2:5e:8d:ef: 59:5a:82:0c:fc:27:08:a7:e2:80:50:84:8a:c6:5f: fd:14:b8:fb:2c:c5:31:0e:12:05:db:50:64:6e:52: 5a:aa:31:68:e8:7f:dd:83:4f:4e:aa:40:42:27:fd: 74:04:e6:37:d1:b4:c1:f5:75:aa:de:35:b4:ef:93: 13:dd:3f:8f:ea:07:fa:f0:31:b5:02:65:24:74:88: fa:13:ec:24:0e:8e:bd:d9:84:21:4e:bf:ec:71:be: 5b:b9:9e:74:a9:56:14:8e:b9:ca:6d:5f:04:73:f0: 69:87:a4:30:cb:ab:d6:b7:aa:3e:85:11:e4:16:1b: de:8f:ae:82:65:4c:da:ae:ea:55:9e:da:98:37:5b: 17:8e:a0:5c:f4:65:11:f2:60:d0:0b:f0:da:60:52: 9e:d7:7e:a1:16:96:ca:d8:b7:d5:a6:3a:7f:1c:cb: b8:21:b9:fb:24:ed:f8:f1:10:55:31:95:1a:8c:73: 73:b0:ab:57:27:28:e5:92:ae:73:58:01:5c:47:2a: 0d:58:c5:cf:44:e0:b0:82:2b:6e:a7:70:95:2d:78: 70:a7:95:60:af:0c:99:d0:c4:f9:7c:26:18:b3:2c: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DB:BC:99:6E:14:66:A8:A6:D2:CC:24:71:02:C2:97:F0:B0:9B:88 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9u8mW4UZqim0swkcQLCl_Cwm4g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.44.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:9e:26:22:51:ee:3f:f9:9b:87:f3:b5:c5:ca:c5:5c:92:f6: f0:75:d8:1e:d6:b3:63:43:c9:84:d4:c9:44:ac:e1:29:05:e7: 9a:0d:cd:dc:b3:93:06:66:4e:1b:bc:2a:e0:42:2d:7d:5a:53: 3d:45:9e:fa:28:12:cc:c4:31:6a:b7:0b:9c:1d:89:c6:c1:86: 9c:a8:50:0d:d5:91:97:d6:18:c3:32:4a:9f:69:15:1b:d8:5a: 52:73:11:b8:d5:67:5f:e0:6e:c8:ff:07:59:83:92:69:f4:bf: 1a:09:f5:99:aa:51:d4:f2:85:d9:5f:73:a2:e1:ac:c0:2b:f5: 5e:27:60:29:7f:fe:9d:8a:10:f6:90:11:b3:9c:b8:34:8d:dc: 5c:f9:61:a0:4e:b6:cc:d1:c9:93:4f:6d:c4:b3:be:59:2b:e6: 37:8d:8c:7c:93:20:5e:88:19:2e:6e:0a:99:08:0c:e7:eb:7c: 2c:72:48:b9:17:52:34:2f:8b:a4:b0:e4:20:c0:9a:7e:20:46: 51:ce:0d:59:e4:9c:a3:c0:ce:97:73:64:a4:69:7e:5f:21:6e: 52:b2:fe:da:e3:d1:64:65:23:2a:3d:3e:5f:02:e3:f2:9c:2e: 63:4c:9f:95:45:0e:4e:5d:d1:4d:f3:ee:8a:09:a4:56:9a:20: 88:60:bf:3d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJlQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3REJCQzk5NkUxNDY2 QThBNkQyQ0MyNDcxMDJDMjk3RjBCMDlCODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4a2aFid1VzbPVprIe0PY1VS/UU8JnXQmT4l6N71laggz8Jwin 4oBQhIrGX/0UuPssxTEOEgXbUGRuUlqqMWjof92DT06qQEIn/XQE5jfRtMH1dare NbTvkxPdP4/qB/rwMbUCZSR0iPoT7CQOjr3ZhCFOv+xxvlu5nnSpVhSOucptXwRz 8GmHpDDLq9a3qj6FEeQWG96ProJlTNqu6lWe2pg3WxeOoFz0ZRHyYNAL8NpgUp7X fqEWlsrYt9WmOn8cy7ghufsk7fjxEFUxlRqMc3Owq1cnKOWSrnNYAVxHKg1Yxc9E 4LCCK26ncJUteHCnlWCvDJnQxPl8JhizLCadAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUl9u8mW4UZqim0swkcQLCl/Cwm4gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2w5dThtVzRVWnFpbTBzd2tj UUxDbF9Dd200Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 ACwwDQYJKoZIhvcNAQELBQADggEBAE2eJiJR7j/5m4fztcXKxVyS9vB12B7Ws2ND yYTUyUSs4SkF55oNzdyzkwZmThu8KuBCLX1aUz1FnvooEszEMWq3C5wdicbBhpyo UA3VkZfWGMMySp9pFRvYWlJzEbjVZ1/gbsj/B1mDkmn0vxoJ9ZmqUdTyhdlfc6Lh rMAr9V4nYCl//p2KEPaQEbOcuDSN3Fz5YaBOtszRyZNPbcSzvlkr5jeNjHyTIF6I GS5uCpkIDOfrfCxySLkXUjQvi6Sw5CDAmn4gRlHODVnknKPAzpdzZKRpfl8hblKy /trj0WRlIyo9Pl8C4/KcLmNMn5VFDk5d0U3z7ooJpFaaIIhgvz0= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:30 2025 by rpki-client