$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdIRuMf0CM61P6oiWpI3ZDXojkk.roa File: qdIRuMf0CM61P6oiWpI3ZDXojkk.roa (raw, json) Hash identifier: hL0TcB5zGVBhINouw1QIZ7e6xSHQsVMD/agGVJF8Q4E= Subject key identifier: A9:D2:11:B8:C7:F4:08:CE:B5:3F:AA:22:5A:92:37:64:35:E8:8E:49 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2659 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdIRuMf0CM61P6oiWpI3ZDXojkk.roa Signing time: Fri 22 Aug 2025 08:42:50 +0000 ROA not before: Fri 22 Aug 2025 08:42:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 61.60.215.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9817 (0x2659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A9D211B8C7F408CEB53FAA225A92376435E88E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:57:92:28:ff:cf:42:5a:e5:f9:8e:35:c2:79: 53:e3:b9:c2:5b:d6:20:d0:ce:18:a2:b0:61:56:37: 95:dc:5b:d5:e4:59:bf:2e:5d:b9:40:84:ec:83:17: 6f:b7:6f:30:13:45:f4:b1:ed:b4:74:06:21:4b:c7: 51:35:f6:98:39:5b:a4:a3:47:5b:41:a3:37:2d:29: 4e:79:81:ee:72:7f:31:15:d0:48:21:69:0f:e1:86: 6b:0f:b9:67:ff:10:13:f5:5e:7a:9f:d2:ad:31:7a: 4f:31:2c:69:60:2f:0e:f1:35:52:37:3f:28:7f:a0: 3e:65:c8:a0:d8:ee:11:2d:43:2a:30:34:b6:b5:6e: 19:a9:4d:7c:ac:16:f1:4d:0c:bd:65:83:ca:b1:96: 4f:89:32:73:e4:d8:7c:7d:32:3b:55:c9:e8:6a:fe: 22:d6:22:d6:76:b5:b3:bb:bf:24:9f:77:f2:7d:0a: d3:77:ef:1b:6d:03:02:b7:5e:fd:07:20:a4:f0:d0: 33:58:bf:33:d2:d0:64:63:b5:17:bc:2c:ea:2f:6e: 35:37:61:59:58:6e:8c:00:1b:71:69:60:0c:dd:96: a8:5d:51:37:7a:27:ad:27:0b:f1:15:04:f7:61:a4: 72:59:e2:1e:fa:3d:6a:32:b3:38:fe:0d:27:3f:44: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D2:11:B8:C7:F4:08:CE:B5:3F:AA:22:5A:92:37:64:35:E8:8E:49 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdIRuMf0CM61P6oiWpI3ZDXojkk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.215.128/25 Signature Algorithm: sha256WithRSAEncryption 73:a1:7d:07:52:05:71:ab:c9:4e:9e:41:1c:68:5e:96:3b:de: 86:2e:68:9b:49:43:86:66:b9:bc:f8:ec:c5:74:c5:95:7d:49: 5a:59:b0:9e:1a:74:e8:9a:5d:04:25:11:cd:bd:2f:41:be:cf: 35:75:9d:4e:1b:94:d7:a5:bb:8d:bb:f4:61:58:da:b6:5b:90: bd:a8:11:0f:22:62:a5:5e:29:7f:43:0d:9d:ae:0d:ff:1f:44: e5:51:1f:95:bf:9f:ba:b2:b3:e6:36:c5:98:84:fd:2e:29:46: 8c:73:db:5b:17:3f:86:40:9e:eb:ed:e7:30:03:39:16:fe:1d: 01:db:71:2d:73:55:2f:ee:91:f9:56:36:e4:24:ec:76:2f:e2: ca:18:15:42:a3:eb:9f:33:26:f7:1b:99:ca:b9:3b:38:09:32: 0f:0f:6a:cf:32:e5:b8:57:e7:f6:b0:c5:55:6a:c8:a3:a7:df: fb:b3:0c:1c:ed:02:ab:50:6c:20:f4:36:01:f8:c8:34:6b:7d: 05:dd:de:12:15:01:91:48:f7:5d:a6:82:dd:9d:fd:f2:b5:ae: d0:40:22:3d:cd:48:63:ae:ca:28:91:7e:f6:e8:63:f7:06:8c: 70:cb:92:42:a6:62:96:b1:9d:11:12:b1:6d:ba:ad:c4:8f:c5: 89:56:2c:3c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICJlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE5RDIxMUI4QzdGNDA4 Q0VCNTNGQUEyMjVBOTIzNzY0MzVFODhFNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfV5Io/89CWuX5jjXCeVPjucJb1iDQzhiisGFWN5XcW9XkWb8u XblAhOyDF2+3bzATRfSx7bR0BiFLx1E19pg5W6SjR1tBozctKU55ge5yfzEV0Egh aQ/hhmsPuWf/EBP1Xnqf0q0xek8xLGlgLw7xNVI3Pyh/oD5lyKDY7hEtQyowNLa1 bhmpTXysFvFNDL1lg8qxlk+JMnPk2Hx9MjtVyehq/iLWItZ2tbO7vySfd/J9CtN3 7xttAwK3Xv0HIKTw0DNYvzPS0GRjtRe8LOovbjU3YVlYbowAG3FpYAzdlqhdUTd6 J60nC/EVBPdhpHJZ4h76PWoyszj+DSc/RA3NAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUqdIRuMf0CM61P6oiWpI3ZDXojkkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3FkSVJ1TWYwQ002MVA2b2lX cEkzWkRYb2pray5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQc9 PNeAMA0GCSqGSIb3DQEBCwUAA4IBAQBzoX0HUgVxq8lOnkEcaF6WO96GLmibSUOG Zrm8+OzFdMWVfUlaWbCeGnToml0EJRHNvS9Bvs81dZ1OG5TXpbuNu/RhWNq2W5C9 qBEPImKlXil/Qw2drg3/H0TlUR+Vv5+6srPmNsWYhP0uKUaMc9tbFz+GQJ7r7ecw AzkW/h0B23Etc1Uv7pH5VjbkJOx2L+LKGBVCo+ufMyb3G5nKuTs4CTIPD2rPMuW4 V+f2sMVVasijp9/7swwc7QKrUGwg9DYB+Mg0a30F3d4SFQGRSPddpoLdnf3yta7Q QCI9zUhjrsookX726GP3Boxwy5JCpmKWsZ0RErFtuq3Ej8WJViw8 -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:15 2025 by rpki-client