$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nTZ0QjbDa6JvwcoFz__0BR9TCf0.roa File: nTZ0QjbDa6JvwcoFz__0BR9TCf0.roa (raw, json) Hash identifier: vUoI1rXMzqZ9LBjQrVJpCMEIz5n/dfVoqjZogdwkeQc= Subject key identifier: 9D:36:74:42:36:C3:6B:A2:6F:C1:CA:05:CF:FF:F4:05:1F:53:09:FD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2698 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nTZ0QjbDa6JvwcoFz__0BR9TCf0.roa Signing time: Fri 22 Aug 2025 08:43:05 +0000 ROA not before: Fri 22 Aug 2025 08:43:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 49.158.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9880 (0x2698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9D36744236C36BA26FC1CA05CFFFF4051F5309FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:87:23:b4:c8:e5:58:39:ab:bd:c0:85:5e:33: a6:b7:b5:6e:5c:e8:13:4a:1d:ea:f6:1c:29:5f:4f: 0d:cc:a2:9c:06:85:2b:fa:eb:f3:91:67:ff:bc:67: 6f:88:c2:18:3d:42:b7:d2:cb:a9:d1:e6:41:9d:52: 04:6a:84:bf:eb:28:a0:3f:5c:a4:4b:77:c8:e3:1e: 40:cd:6d:0d:f1:0d:6c:3b:36:1b:be:1e:5c:e1:36: fa:c8:3a:65:56:60:32:d0:1b:c1:c4:83:d2:63:a7: 66:38:a6:f1:ba:93:4f:87:be:d6:ed:6b:23:2e:9c: 04:47:5f:c0:56:98:b8:9e:1b:db:5a:1d:aa:ad:e2: 4f:04:c4:7a:69:0f:c7:e6:c1:87:36:a0:7e:09:29: 5a:5b:c4:9b:20:ac:62:29:f6:6a:14:8f:06:cf:57: 28:c8:1a:b2:34:83:54:51:e8:29:6a:4f:0d:23:47: bc:6f:48:eb:90:fb:ac:f7:3a:ae:5c:52:11:96:b8: 59:f6:59:96:9a:b5:59:22:f0:49:df:1c:7e:fb:48: bb:6e:e0:63:80:f2:dc:b8:c1:55:e9:dc:d4:bd:81: 43:6c:d2:8d:cb:8c:76:83:f8:dc:92:b6:26:58:a2: 9e:b5:36:27:42:62:39:8f:37:1c:d1:1e:3b:6e:50: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:74:42:36:C3:6B:A2:6F:C1:CA:05:CF:FF:F4:05:1F:53:09:FD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nTZ0QjbDa6JvwcoFz__0BR9TCf0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.120.0/21 Signature Algorithm: sha256WithRSAEncryption 05:52:53:eb:e7:de:4d:e9:c4:eb:d6:ad:68:e1:b8:56:51:75: 14:44:06:22:ef:e8:f9:48:80:09:3e:3a:d3:2f:60:88:a5:63: d4:4d:f5:ec:ab:73:05:db:ee:49:28:6a:d0:71:d7:7a:62:45: 5b:86:1a:d8:34:1d:76:5f:f5:c5:50:f6:18:0d:d6:7b:ce:07: ca:87:7f:3b:94:30:4b:c4:3d:ae:49:f6:55:c6:57:46:46:04: 3c:83:d5:a2:21:84:b4:15:92:1c:1f:d0:2a:71:2f:09:ad:f3: b2:bd:fd:c6:de:16:78:a9:ba:d9:dc:32:aa:6c:c6:e1:d5:a7: 47:c0:23:4d:e3:ae:46:1b:91:30:4a:02:3c:c2:ee:b0:b3:fc: 58:b0:a2:c9:65:67:07:d3:c4:a3:8d:b8:d3:7c:9e:f0:86:86: f3:e0:5a:41:5f:b2:53:4f:4a:59:03:d0:c0:60:f7:2b:89:e6: a2:56:9c:40:0b:6e:b8:62:76:e8:2c:98:66:0f:48:1d:cf:59: 55:6b:a2:84:55:c7:72:4d:5f:29:0a:28:32:cf:81:ab:5b:5a: 49:1a:a1:c9:57:09:cd:2b:bc:e9:8d:d9:bc:dd:93:0a:06:7a: a5:ff:6b:e7:5e:b2:5f:36:dd:1d:2b:2b:3d:ed:6e:68:64:f4: 87:f4:d1:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlEMzY3NDQyMzZDMzZC QTI2RkMxQ0EwNUNGRkZGNDA1MUY1MzA5RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnhyO0yOVYOau9wIVeM6a3tW5c6BNKHer2HClfTw3MopwGhSv6 6/ORZ/+8Z2+Iwhg9QrfSy6nR5kGdUgRqhL/rKKA/XKRLd8jjHkDNbQ3xDWw7Nhu+ HlzhNvrIOmVWYDLQG8HEg9Jjp2Y4pvG6k0+HvtbtayMunARHX8BWmLieG9taHaqt 4k8ExHppD8fmwYc2oH4JKVpbxJsgrGIp9moUjwbPVyjIGrI0g1RR6ClqTw0jR7xv SOuQ+6z3Oq5cUhGWuFn2WZaatVki8EnfHH77SLtu4GOA8ty4wVXp3NS9gUNs0o3L jHaD+NyStiZYop61NidCYjmPNxzRHjtuUE0dAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnTZ0QjbDa6JvwcoFz//0BR9TCf0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25UWjBRamJEYTZKdndjb0Z6 X18wQlI5VENmMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nngwDQYJKoZIhvcNAQELBQADggEBAAVSU+vn3k3pxOvWrWjhuFZRdRREBiLv6PlI gAk+OtMvYIilY9RN9eyrcwXb7kkoatBx13piRVuGGtg0HXZf9cVQ9hgN1nvOB8qH fzuUMEvEPa5J9lXGV0ZGBDyD1aIhhLQVkhwf0CpxLwmt87K9/cbeFniputncMqps xuHVp0fAI03jrkYbkTBKAjzC7rCz/FiwosllZwfTxKONuNN8nvCGhvPgWkFfslNP SlkD0MBg9yuJ5qJWnEALbrhidugsmGYPSB3PWVVrooRVx3JNXykKKDLPgatbWkka oclXCc0rvOmN2bzdkwoGeqX/a+desl823R0rKz3tbmhk9If00YI= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:14 2025 by rpki-client