$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/la8puvqX-kWU7eTdIsDbSOZgR_4.roa File: la8puvqX-kWU7eTdIsDbSOZgR_4.roa (raw, json) Hash identifier: l+0Uf7JfNMZcTou2ggapvgiR0FPI5eloym/nltC7oUg= Subject key identifier: 95:AF:29:BA:FA:97:FA:45:94:ED:E4:DD:22:C0:DB:48:E6:60:47:FE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 25DA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/la8puvqX-kWU7eTdIsDbSOZgR_4.roa Signing time: Fri 22 Aug 2025 08:42:19 +0000 ROA not before: Fri 22 Aug 2025 08:42:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 180.218.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9690 (0x25da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=95AF29BAFA97FA4594EDE4DD22C0DB48E66047FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:1f:d1:19:d2:cd:98:44:c7:db:3d:74:34: 77:b9:4d:31:5b:66:14:b1:3e:80:ae:47:2b:c6:cb: ef:58:9c:d1:1a:35:bd:08:5f:07:ef:bc:9b:f7:6a: c6:0e:8a:51:4a:48:54:38:82:b4:ce:c5:29:f2:47: ba:0f:b8:1d:d2:41:27:4f:f9:53:80:1b:db:4a:cd: da:1d:58:fa:0c:65:ec:ca:54:2d:44:71:0e:a5:6d: de:17:d6:c9:e9:4b:4c:20:bb:36:c2:42:04:f8:aa: d8:6e:86:b3:09:46:cd:63:f6:0d:ca:9e:df:e0:34: 7f:24:7d:42:b6:77:7a:76:0b:6f:9f:05:94:0a:f5: 2e:84:99:fe:58:f5:4f:69:0f:5d:3e:ba:f0:44:31: 74:76:1a:65:e1:dc:21:83:8a:c0:3f:9d:c0:da:18: dc:b5:a9:87:2e:01:d4:d9:6d:6e:6e:71:79:1f:e2: ff:f2:01:db:dc:a1:b1:6b:99:bc:40:03:1a:73:b6: c4:b1:73:af:ba:6d:40:19:6a:45:a9:22:20:8b:bd: 37:09:4f:c5:d7:00:fb:b3:39:56:25:11:d2:39:7d: d4:d3:e1:c2:68:28:55:27:36:53:03:7c:97:85:2e: 69:71:8a:48:10:45:13:ee:ed:ca:92:65:25:1d:66: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:29:BA:FA:97:FA:45:94:ED:E4:DD:22:C0:DB:48:E6:60:47:FE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/la8puvqX-kWU7eTdIsDbSOZgR_4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.88.0/22 Signature Algorithm: sha256WithRSAEncryption 33:f9:86:02:0b:49:1a:bd:98:23:1b:fa:8a:46:0e:d2:21:43: 7a:3b:db:7b:67:39:7f:8b:76:c0:71:3f:9a:b3:eb:cb:91:1b: e9:fc:b2:f4:da:52:77:ae:c4:52:4b:f7:da:aa:29:a1:53:a3: 24:87:34:b2:7b:5f:6a:5b:14:85:84:49:32:d4:2d:e3:ed:69: 75:cd:28:3d:46:c7:71:3a:53:eb:4b:b1:81:f5:91:8c:0d:93: 42:26:5f:5d:58:21:4d:1d:6b:82:ea:08:5d:ca:07:bd:4a:11: 71:51:65:52:7d:3b:2f:0f:f8:45:a9:74:ca:69:26:a4:72:dc: 70:77:c1:78:88:05:49:1a:82:e8:1e:4b:b5:a8:49:82:b5:5c: 9f:22:77:f5:66:ee:5d:c9:d6:99:aa:7b:c6:79:6a:33:1d:1e: 2e:25:5c:ec:c3:64:9d:61:1c:2f:72:e8:89:76:de:db:f5:5f: 41:09:b3:77:ba:73:54:7b:b8:ed:7c:1a:1e:27:77:6b:1f:ff: 89:36:6b:b8:2d:a2:fe:aa:f1:8c:16:30:0f:ee:95:ce:8b:ce: 60:0d:ad:d9:d9:c7:fc:00:fe:1b:f4:c8:14:0c:7a:b0:63:ce: 6a:a8:b6:67:fb:84:bd:8e:f2:46:d8:9f:00:b9:01:29:22:fd: 62:ae:af:40 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1QUYyOUJBRkE5N0ZB NDU5NEVERTRERDIyQzBEQjQ4RTY2MDQ3RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Mh/RGdLNmETH2z10NHe5TTFbZhSxPoCuRyvGy+9YnNEaNb0I XwfvvJv3asYOilFKSFQ4grTOxSnyR7oPuB3SQSdP+VOAG9tKzdodWPoMZezKVC1E cQ6lbd4X1snpS0wguzbCQgT4qthuhrMJRs1j9g3Knt/gNH8kfUK2d3p2C2+fBZQK 9S6Emf5Y9U9pD10+uvBEMXR2GmXh3CGDisA/ncDaGNy1qYcuAdTZbW5ucXkf4v/y AdvcobFrmbxAAxpztsSxc6+6bUAZakWpIiCLvTcJT8XXAPuzOVYlEdI5fdTT4cJo KFUnNlMDfJeFLmlxikgQRRPu7cqSZSUdZnulAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUla8puvqX+kWU7eTdIsDbSOZgR/4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xhOHB1dnFYLWtXVTdlVGRJ c0RiU09aZ1JfNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2lgwDQYJKoZIhvcNAQELBQADggEBADP5hgILSRq9mCMb+opGDtIhQ3o723tnOX+L dsBxP5qz68uRG+n8svTaUneuxFJL99qqKaFToySHNLJ7X2pbFIWESTLULePtaXXN KD1Gx3E6U+tLsYH1kYwNk0ImX11YIU0da4LqCF3KB71KEXFRZVJ9Oy8P+EWpdMpp JqRy3HB3wXiIBUkagugeS7WoSYK1XJ8id/Vm7l3J1pmqe8Z5ajMdHi4lXOzDZJ1h HC9y6Il23tv1X0EJs3e6c1R7uO18Gh4nd2sf/4k2a7gtov6q8YwWMA/ulc6LzmAN rdnZx/wA/hv0yBQMerBjzmqotmf7hL2O8kbYnwC5ASki/WKur0A= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:11 2025 by rpki-client