$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qm0oLUZTFIWh9jYJLqfcb5XyI2c.roa File: qm0oLUZTFIWh9jYJLqfcb5XyI2c.roa (raw, json) Hash identifier: y2Kr4zaqnzeIjPeAk2uY2agNKcLav04HlR3A2IO0QuE= Subject key identifier: AA:6D:28:2D:46:53:14:85:A1:F6:36:09:2E:A7:DC:6F:95:F2:23:67 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2748 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qm0oLUZTFIWh9jYJLqfcb5XyI2c.roa Signing time: Fri 22 Aug 2025 08:43:44 +0000 ROA not before: Fri 22 Aug 2025 08:43:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 180.218.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10056 (0x2748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AA6D282D46531485A1F636092EA7DC6F95F22367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:0c:3a:ef:fc:8b:77:5a:40:a4:09:27:25: 8d:4c:18:64:13:85:82:b5:a5:b6:1a:81:d6:e4:7e: 4b:68:23:87:a5:2a:b3:12:fc:dd:3e:38:3d:42:6e: 01:7e:51:54:31:e5:4b:ad:33:d6:a2:6b:f5:0f:41: e0:f6:40:ff:a4:67:b3:ad:73:86:d4:ec:13:8f:33: c3:46:4d:56:f5:5d:22:33:f2:ff:c3:62:94:a8:10: d6:52:7a:32:5f:27:7e:38:f9:1e:cd:3d:e1:12:09: e1:15:78:d5:9c:50:34:a4:b0:9d:4e:6d:56:4f:f1: f7:8a:58:97:90:ce:02:13:77:aa:d8:fb:8c:6d:7d: c4:3d:46:c9:f7:90:de:f9:b8:d2:76:c3:a3:90:d0: 01:cd:8d:2c:98:73:86:fb:b3:98:cd:b2:12:e7:02: 8a:58:0d:3c:d8:70:e4:58:89:fb:be:04:a0:c8:29: 24:94:63:c5:87:a6:2f:8d:5f:89:e4:bc:a3:25:bc: d6:8b:97:b6:d0:0d:14:13:40:ee:84:27:ad:b1:ef: c7:5e:c2:45:70:de:8a:8a:99:ce:79:2e:4a:1f:70: cd:05:ad:47:a0:25:52:ec:88:c2:c3:56:64:ae:a2: 45:57:f6:41:10:9b:99:d2:3f:ad:40:09:7c:31:fb: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6D:28:2D:46:53:14:85:A1:F6:36:09:2E:A7:DC:6F:95:F2:23:67 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qm0oLUZTFIWh9jYJLqfcb5XyI2c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:89:16:07:f5:4a:a7:5f:dd:d9:82:46:da:80:84:66:26:d1: ef:e1:93:fe:7f:e4:8a:2c:db:a2:4b:18:a6:12:79:99:36:cb: 83:30:ea:35:14:79:f7:aa:2a:de:f5:fe:f9:6c:93:bf:3c:bd: db:cf:8b:43:eb:7b:14:b4:c6:fe:66:b1:90:c1:bd:b2:de:1d: 21:22:f9:18:96:94:43:89:55:27:09:d7:4f:7b:ff:4a:61:30: f0:96:bc:94:1e:64:05:6a:e9:44:9f:8f:f2:2e:c9:9b:15:2d: 44:d3:25:c2:1c:e9:2f:5e:66:77:06:cb:dc:38:48:e9:5c:e7: ab:c5:a1:4d:63:19:ec:03:a8:e0:b9:37:aa:13:97:73:4f:2d: 45:e6:7f:e2:76:9c:1f:71:e9:2e:10:68:d9:ee:98:ff:d1:c2: 44:e8:ec:23:9d:a0:0c:df:46:79:c4:62:01:0c:ab:cd:38:8a: 64:82:d5:07:8c:6b:76:2a:6f:ca:12:6e:cf:48:fd:f9:91:f7: 70:fe:78:50:35:c8:a7:f9:9c:90:64:bc:90:4c:b9:6d:ce:2b: d1:79:ad:03:ef:f8:60:d6:8f:89:00:1d:69:c9:ca:82:ae:ae: 67:43:63:80:0a:8b:ed:2e:ba:fb:8f:40:29:24:0b:e7:74:ad: 16:51:7e:4e -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICJ0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFBNkQyODJENDY1MzE0 ODVBMUY2MzYwOTJFQTdEQzZGOTVGMjIzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/3gw67/yLd1pApAknJY1MGGQThYK1pbYagdbkfktoI4elKrMS /N0+OD1CbgF+UVQx5UutM9aia/UPQeD2QP+kZ7Otc4bU7BOPM8NGTVb1XSIz8v/D YpSoENZSejJfJ344+R7NPeESCeEVeNWcUDSksJ1ObVZP8feKWJeQzgITd6rY+4xt fcQ9Rsn3kN75uNJ2w6OQ0AHNjSyYc4b7s5jNshLnAopYDTzYcORYifu+BKDIKSSU Y8WHpi+NX4nkvKMlvNaLl7bQDRQTQO6EJ62x78dewkVw3oqKmc55LkofcM0FrUeg JVLsiMLDVmSuokVX9kEQm5nSP61ACXwx+wB9AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUqm0oLUZTFIWh9jYJLqfcb5XyI2cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3FtMG9MVVpURklXaDlqWUpM cWZjYjVYeUkyYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC0 2jANBgkqhkiG9w0BAQsFAAOCAQEAFYkWB/VKp1/d2YJG2oCEZibR7+GT/n/kiizb oksYphJ5mTbLgzDqNRR596oq3vX++WyTvzy928+LQ+t7FLTG/maxkMG9st4dISL5 GJaUQ4lVJwnXT3v/SmEw8Ja8lB5kBWrpRJ+P8i7JmxUtRNMlwhzpL15mdwbL3DhI 6Vznq8WhTWMZ7AOo4Lk3qhOXc08tReZ/4nacH3HpLhBo2e6Y/9HCROjsI52gDN9G ecRiAQyrzTiKZILVB4xrdipvyhJuz0j9+ZH3cP54UDXIp/mckGS8kEy5bc4r0Xmt A+/4YNaPiQAdacnKgq6uZ0NjgAqL7S66+49AKSQL53StFlF+Tg== -----END CERTIFICATE-----Generated at Sat Oct 25 06:45:18 2025 by rpki-client