$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nGkRjioE1kD6DMOo0iUmeLpLAsI.roa File: nGkRjioE1kD6DMOo0iUmeLpLAsI.roa (raw, json) Hash identifier: qSkTJKs/OyVvT0fxeemZsiq1/YIaZPnqJFQa31BH0Sg= Subject key identifier: 9C:69:11:8E:2A:04:D6:40:FA:0C:C3:A8:D2:25:26:78:BA:4B:02:C2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2643 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nGkRjioE1kD6DMOo0iUmeLpLAsI.roa Signing time: Fri 22 Aug 2025 08:42:45 +0000 ROA not before: Fri 22 Aug 2025 08:42:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 119.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9795 (0x2643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9C69118E2A04D640FA0CC3A8D2252678BA4B02C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:a0:68:69:82:43:20:6a:9c:fa:bf:d0:b8: 90:53:8c:05:42:1a:e1:f1:ee:32:e1:a7:eb:a1:0d: 0a:df:18:86:7c:86:46:09:fd:53:aa:f3:fc:ce:21: 45:43:bb:58:44:77:79:3c:1c:bf:c2:b9:dc:83:f4: 69:5f:21:cc:7c:22:d1:9b:fe:b8:ac:76:07:e7:a4: 7f:29:cf:c2:91:ef:df:3a:9f:b5:a8:62:bc:af:31: 9a:73:d1:90:a5:0f:fa:08:4f:1c:fc:7c:a0:bf:03: 08:d3:f4:6b:6f:47:8c:16:56:e2:59:ff:0a:f1:55: c4:9a:d5:89:f7:67:7c:66:9c:23:7c:cd:ef:c6:42: 22:cc:91:d7:b4:79:02:28:f6:7a:8c:12:d9:7c:80: 98:e0:fa:15:80:61:0b:3c:df:6b:96:36:24:7d:ef: a8:bb:35:22:b4:ff:ab:d4:a9:98:8a:92:3f:d3:ea: d2:7f:3d:35:79:df:16:8a:44:6d:05:fa:97:1b:b5: 3b:48:b4:c5:f8:be:b6:c7:73:45:c2:20:b4:a2:6f: e4:54:d9:00:b0:73:ca:36:9b:3b:25:5e:9d:44:ad: 5c:26:5f:98:60:b5:74:46:be:e7:4a:b1:9c:0a:a5: 9f:e2:4f:58:ac:29:14:a2:e6:20:f7:1a:5d:a6:8d: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:11:8E:2A:04:D6:40:FA:0C:C3:A8:D2:25:26:78:BA:4B:02:C2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nGkRjioE1kD6DMOo0iUmeLpLAsI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 20:d5:1d:4f:c5:79:68:d6:59:3a:59:e3:d7:85:2c:c4:1f:67: f1:b5:b7:4c:08:90:66:c6:61:90:b6:d2:7d:ad:ad:eb:09:35: cb:3d:bc:bc:62:42:8d:69:d4:b2:63:74:4c:49:1e:b1:c5:53: f3:49:ea:e2:9c:14:f4:8a:8f:17:c4:df:dc:ff:d3:a0:88:23: 97:1c:2d:87:8a:a0:5d:a8:11:0b:fe:04:9b:55:e7:b7:71:3d: 3f:aa:72:c2:fd:5a:32:b2:52:40:7f:9b:9e:a5:58:55:e3:35: 79:42:c2:86:dd:5b:2a:95:1b:f9:ca:87:2b:28:47:3f:64:f9: 36:53:ae:f7:e5:62:18:67:ec:8a:bf:23:de:a2:66:c8:9e:4b: f7:ab:6a:02:06:5e:e1:bf:50:c2:fc:54:b0:9d:3d:f5:60:a3: 39:33:ec:0d:fe:70:d0:51:6b:64:d3:a6:50:cd:e4:dd:79:0b: b7:70:0d:7e:80:e5:4d:75:d4:b5:b5:5b:99:b1:04:a6:ef:6b: 8a:2a:94:87:dc:f1:17:8a:5a:eb:84:cd:a6:48:78:e4:6f:ac: fd:6a:79:98:71:68:0f:de:ee:c3:8f:5e:44:1c:55:49:4e:05: 10:d4:52:b0:c0:7c:88:f9:e0:f0:88:55:e9:6e:42:02:81:e9: 93:fb:da:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlDNjkxMThFMkEwNEQ2 NDBGQTBDQzNBOEQyMjUyNjc4QkE0QjAyQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPE6BoaYJDIGqc+r/QuJBTjAVCGuHx7jLhp+uhDQrfGIZ8hkYJ /VOq8/zOIUVDu1hEd3k8HL/CudyD9GlfIcx8ItGb/risdgfnpH8pz8KR7986n7Wo YryvMZpz0ZClD/oITxz8fKC/AwjT9GtvR4wWVuJZ/wrxVcSa1Yn3Z3xmnCN8ze/G QiLMkde0eQIo9nqMEtl8gJjg+hWAYQs832uWNiR976i7NSK0/6vUqZiKkj/T6tJ/ PTV53xaKRG0F+pcbtTtItMX4vrbHc0XCILSib+RU2QCwc8o2mzslXp1ErVwmX5hg tXRGvudKsZwKpZ/iT1isKRSi5iD3Gl2mjcvvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnGkRjioE1kD6DMOo0iUmeLpLAsIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25Ha1JqaW9FMWtENkRNT28w aVVtZUxwTEFzSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 TYAwDQYJKoZIhvcNAQELBQADggEBACDVHU/FeWjWWTpZ49eFLMQfZ/G1t0wIkGbG YZC20n2tresJNcs9vLxiQo1p1LJjdExJHrHFU/NJ6uKcFPSKjxfE39z/06CII5cc LYeKoF2oEQv+BJtV57dxPT+qcsL9WjKyUkB/m56lWFXjNXlCwobdWyqVG/nKhyso Rz9k+TZTrvflYhhn7Iq/I96iZsieS/eragIGXuG/UML8VLCdPfVgozkz7A3+cNBR a2TTplDN5N15C7dwDX6A5U111LW1W5mxBKbva4oqlIfc8ReKWuuEzaZIeORvrP1q eZhxaA/e7sOPXkQcVUlOBRDUUrDAfIj54PCIVeluQgKB6ZP72hI= -----END CERTIFICATE-----Generated at Sat Oct 25 06:50:41 2025 by rpki-client