$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sDEPlB7YZ-K3uJsJhpt8yfv4_P0.roa File: sDEPlB7YZ-K3uJsJhpt8yfv4_P0.roa (raw, json) Hash identifier: LYAaA6n19RaBB7vJyV3RwofsgBGSbUuHclibXURC5V8= Subject key identifier: B0:31:0F:94:1E:D8:67:E2:B7:B8:9B:09:86:9B:7C:C9:FB:F8:FC:FD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2622 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sDEPlB7YZ-K3uJsJhpt8yfv4_P0.roa Signing time: Fri 22 Aug 2025 08:42:37 +0000 ROA not before: Fri 22 Aug 2025 08:42:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 49.159.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9762 (0x2622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B0310F941ED867E2B7B89B09869B7CC9FBF8FCFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:2e:25:85:dd:95:0d:ba:ab:d9:ee:56:d9: 1a:57:d2:d3:6d:7d:5d:15:e4:f9:50:d2:62:9b:5d: 31:23:8f:4a:5d:78:5b:a6:c7:fb:3c:af:06:7e:85: b2:76:24:2c:11:95:f4:fa:99:1e:32:53:6c:e2:b8: 30:81:e8:63:30:cb:7e:19:85:c0:4a:35:0c:9e:69: 0b:75:6a:56:08:11:f1:35:3b:9f:ee:d4:98:54:51: d9:41:fd:a8:eb:b5:d7:05:18:83:ac:4a:d4:f4:42: b8:6d:27:33:ee:ba:dc:7e:ce:86:40:16:5d:c2:c3: 9b:64:6e:2e:18:c4:2b:e7:68:b8:53:e9:9b:8a:2a: 91:6f:c6:96:e0:fa:5f:eb:42:5e:fb:45:5e:97:a3: 3d:09:cb:7a:8f:f4:8f:cc:68:85:33:60:05:2b:5c: 0b:c1:27:0d:b1:d8:70:a1:dc:03:b8:b7:a4:29:e1: b7:85:58:45:90:92:33:6e:48:08:2b:77:35:13:13: 57:32:61:9a:c7:0b:db:c5:8e:1e:50:21:27:5d:a3: 2d:25:cf:7c:ce:e8:4c:03:62:39:22:ab:db:8d:6b: 41:84:17:44:12:6e:d6:f5:91:74:90:5b:58:04:66: 2b:65:74:ac:3c:72:e6:b6:b4:5d:ea:7a:54:32:b7: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:31:0F:94:1E:D8:67:E2:B7:B8:9B:09:86:9B:7C:C9:FB:F8:FC:FD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sDEPlB7YZ-K3uJsJhpt8yfv4_P0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.92.0/22 Signature Algorithm: sha256WithRSAEncryption 37:b8:cf:ab:f4:70:68:23:86:8d:50:be:71:66:82:5b:46:20: 7e:f8:59:ce:83:86:93:46:9b:81:52:49:19:0e:0f:a4:a4:01: d3:05:14:84:c3:2c:18:20:6e:8a:41:ad:9e:5c:c6:72:7f:a9: 7e:ca:f0:fe:2c:3f:eb:0a:3d:93:b6:5b:f3:ad:e2:e9:99:ca: 8b:7f:db:09:04:86:0f:49:8e:58:fd:88:16:67:c9:0b:5a:7e: 18:8d:54:3b:83:31:5a:70:ed:fa:ca:cd:e3:a4:e8:01:5e:58: ab:b8:e2:5e:6c:19:ac:5e:50:35:a6:fa:8a:b1:75:d6:df:3b: f3:5c:47:1a:11:f5:45:da:d5:6b:56:df:86:7a:66:97:c2:f4: 5f:0f:f4:fd:50:18:2d:59:14:71:ad:5f:fc:5b:2b:ce:d1:e6: b7:de:90:81:a8:ce:64:17:11:d2:c7:15:f1:e1:3a:eb:6c:99: cc:cb:16:46:83:57:0f:c6:25:fc:55:0f:d1:22:37:9b:f7:ce: 31:86:8a:b9:b6:e9:3c:2d:42:f4:ba:7d:fb:10:f7:89:2f:95: 8d:89:d4:24:4c:97:b2:03:50:e2:9e:85:51:04:b6:bc:6a:c5: b1:e3:ed:46:53:05:0c:07:1e:03:ae:83:fc:5f:3b:fa:18:b3: c7:e9:6f:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwMzEwRjk0MUVEODY3 RTJCN0I4OUIwOTg2OUI3Q0M5RkJGOEZDRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLhS4lhd2VDbqr2e5W2RpX0tNtfV0V5PlQ0mKbXTEjj0pdeFum x/s8rwZ+hbJ2JCwRlfT6mR4yU2ziuDCB6GMwy34ZhcBKNQyeaQt1alYIEfE1O5/u 1JhUUdlB/ajrtdcFGIOsStT0QrhtJzPuutx+zoZAFl3Cw5tkbi4YxCvnaLhT6ZuK KpFvxpbg+l/rQl77RV6Xoz0Jy3qP9I/MaIUzYAUrXAvBJw2x2HCh3AO4t6Qp4beF WEWQkjNuSAgrdzUTE1cyYZrHC9vFjh5QISddoy0lz3zO6EwDYjkiq9uNa0GEF0QS btb1kXSQW1gEZitldKw8cua2tF3qelQyt8uVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsDEPlB7YZ+K3uJsJhpt8yfv4/P0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NERVBsQjdZWi1LM3VKc0po cHQ4eWZ2NF9QMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n1wwDQYJKoZIhvcNAQELBQADggEBADe4z6v0cGgjho1QvnFmgltGIH74Wc6DhpNG m4FSSRkOD6SkAdMFFITDLBggbopBrZ5cxnJ/qX7K8P4sP+sKPZO2W/Ot4umZyot/ 2wkEhg9Jjlj9iBZnyQtafhiNVDuDMVpw7frKzeOk6AFeWKu44l5sGaxeUDWm+oqx ddbfO/NcRxoR9UXa1WtW34Z6ZpfC9F8P9P1QGC1ZFHGtX/xbK87R5rfekIGozmQX EdLHFfHhOutsmczLFkaDVw/GJfxVD9EiN5v3zjGGirm26TwtQvS6ffsQ94kvlY2J 1CRMl7IDUOKehVEEtrxqxbHj7UZTBQwHHgOug/xfO/oYs8fpbzU= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:10 2025 by rpki-client