$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mB4BBc-VtRDrB2TCJHKDq2rKUv4.roa File: mB4BBc-VtRDrB2TCJHKDq2rKUv4.roa (raw, json) Hash identifier: dFfaO2bl76axT4EZs4YoCQtqn2eLEZEHWd5wokr4F4o= Subject key identifier: 98:1E:01:05:CF:95:B5:10:EB:07:64:C2:24:72:83:AB:6A:CA:52:FE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2736 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mB4BBc-VtRDrB2TCJHKDq2rKUv4.roa Signing time: Fri 22 Aug 2025 08:43:40 +0000 ROA not before: Fri 22 Aug 2025 08:43:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10038 (0x2736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=981E0105CF95B510EB0764C2247283AB6ACA52FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:33:1c:2a:2a:49:06:17:07:5c:f8:00:b0: 5d:b6:e9:c5:4f:03:c5:83:77:cc:ec:83:85:da:fc: d2:e1:db:1b:1b:18:ab:f7:8f:71:1b:c5:00:26:ae: 97:1f:25:4a:ac:fa:b7:f5:45:88:a3:dd:90:ed:a5: 8d:53:f0:0a:a0:98:a0:6f:d6:62:35:9d:ce:43:52: 02:25:01:9d:fd:84:8b:d8:06:a1:bc:68:8a:9a:28: 43:b5:a2:8a:a3:e7:4b:ca:72:c8:38:0a:c5:d2:ad: 43:18:d9:f1:21:16:ea:1e:a2:2d:94:36:40:78:30: b3:f8:25:d7:82:b1:ab:10:4f:49:95:81:cc:3b:39: be:4d:cc:0e:f8:22:bb:40:c2:a8:9b:05:6e:d7:38: 6d:3c:83:cd:f0:ba:63:91:11:01:84:4c:b3:f2:81: 4b:6e:58:6b:2d:c1:6c:0c:90:9a:74:20:63:b3:76: 41:84:30:49:5a:07:c4:a1:40:12:f3:ae:e8:4c:d5: cf:dc:75:f9:77:68:d3:80:e1:82:9a:98:b4:e7:ab: f4:f3:2f:24:58:2f:0b:89:7e:ce:d6:86:fc:04:6d: 54:5c:d7:8e:5a:40:8c:f2:4d:e0:4c:12:a9:34:91: 3f:a8:b6:81:4b:fd:9a:a7:6e:80:32:19:bb:4c:58: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:01:05:CF:95:B5:10:EB:07:64:C2:24:72:83:AB:6A:CA:52:FE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mB4BBc-VtRDrB2TCJHKDq2rKUv4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/21 Signature Algorithm: sha256WithRSAEncryption 0f:52:5e:4d:07:18:a4:74:e3:54:c3:8f:01:99:e7:bc:59:71: 19:50:bf:f5:7c:fc:ba:7b:93:7c:25:b8:56:62:7a:fa:10:1a: 5a:4d:67:15:0e:d8:22:66:d3:36:88:4f:46:3c:ca:42:12:ed: 3e:e1:e5:5d:80:e9:e5:82:bc:c2:2b:3f:80:e4:b1:88:3f:38: 77:a7:a4:43:06:c7:4a:3f:98:d6:8b:cc:bd:70:b1:54:79:9c: 06:92:ed:c6:37:c9:0b:fa:75:69:ec:73:4b:f1:4f:32:c5:ee: 11:20:86:a1:34:0b:ff:f8:52:eb:2f:e1:2e:6a:29:12:2a:72: 3b:2b:ff:52:30:54:a9:11:56:97:4a:cf:f6:a1:83:45:76:2c: b6:eb:a4:af:4c:c3:e7:ec:90:ca:13:fb:74:35:19:dd:24:cd: 7b:0e:83:bd:f6:93:11:f9:12:9b:f9:80:5c:e4:4e:33:13:d5: af:5b:5c:95:67:f0:83:24:f1:88:f2:2f:25:71:56:a1:be:ab: 81:d4:58:52:62:02:a4:c0:fa:39:fe:56:ab:17:51:cd:c0:9b: 4e:29:a2:16:45:06:a8:b6:50:79:45:c3:f9:37:79:c9:7b:06: 4c:b2:83:01:08:b6:cc:59:03:05:4b:ac:36:8a:b8:8f:97:d5: 8e:fa:ab:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk4MUUwMTA1Q0Y5NUI1 MTBFQjA3NjRDMjI0NzI4M0FCNkFDQTUyRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHfDMcKipJBhcHXPgAsF226cVPA8WDd8zsg4Xa/NLh2xsbGKv3 j3EbxQAmrpcfJUqs+rf1RYij3ZDtpY1T8AqgmKBv1mI1nc5DUgIlAZ39hIvYBqG8 aIqaKEO1ooqj50vKcsg4CsXSrUMY2fEhFuoeoi2UNkB4MLP4JdeCsasQT0mVgcw7 Ob5NzA74IrtAwqibBW7XOG08g83wumOREQGETLPygUtuWGstwWwMkJp0IGOzdkGE MElaB8ShQBLzruhM1c/cdfl3aNOA4YKamLTnq/TzLyRYLwuJfs7WhvwEbVRc145a QIzyTeBMEqk0kT+otoFL/ZqnboAyGbtMWE19AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmB4BBc+VtRDrB2TCJHKDq2rKUv4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21CNEJCYy1WdFJEckIyVENK SEtEcTJyS1V2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2pAwDQYJKoZIhvcNAQELBQADggEBAA9SXk0HGKR041TDjwGZ57xZcRlQv/V8/Lp7 k3wluFZievoQGlpNZxUO2CJm0zaIT0Y8ykIS7T7h5V2A6eWCvMIrP4DksYg/OHen pEMGx0o/mNaLzL1wsVR5nAaS7cY3yQv6dWnsc0vxTzLF7hEghqE0C//4Uusv4S5q KRIqcjsr/1IwVKkRVpdKz/ahg0V2LLbrpK9Mw+fskMoT+3Q1Gd0kzXsOg732kxH5 Epv5gFzkTjMT1a9bXJVn8IMk8YjyLyVxVqG+q4HUWFJiAqTA+jn+VqsXUc3Am04p ohZFBqi2UHlFw/k3ecl7BkyygwEItsxZAwVLrDaKuI+X1Y76q2Q= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:13 2025 by rpki-client