$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u0xzAU2garWEr6k9lHrv7GwSVLU.roa File: u0xzAU2garWEr6k9lHrv7GwSVLU.roa (raw, json) Hash identifier: luYBRHnZe0GBiLm3PPOX+il5/6r17BpAbYVDYn8+qIQ= Subject key identifier: BB:4C:73:01:4D:A0:6A:B5:84:AF:A9:3D:94:7A:EF:EC:6C:12:54:B5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 26DD Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u0xzAU2garWEr6k9lHrv7GwSVLU.roa Signing time: Fri 22 Aug 2025 08:43:20 +0000 ROA not before: Fri 22 Aug 2025 08:43:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 122.254.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9949 (0x26dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BB4C73014DA06AB584AFA93D947AEFEC6C1254B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:6d:bc:d1:34:32:c1:58:55:5c:f6:ea:26: 2b:cf:48:63:94:e5:9d:26:66:fb:44:ca:cb:ce:da: b8:6a:50:86:4c:65:94:ff:98:b7:eb:97:4d:61:1c: 6c:55:39:59:4a:d9:6e:06:44:ab:ba:4a:3f:cd:44: 44:46:62:a4:39:5b:41:26:30:fa:39:6d:f4:9a:1b: 48:76:c1:03:62:b4:42:79:c0:a7:3d:7d:a9:d6:7a: 7c:b3:23:ce:5c:6d:2c:3e:2c:a2:78:d8:87:70:75: a1:81:2e:4b:38:c0:ba:52:cb:0f:45:cd:a1:6f:80: f9:5a:8e:85:37:6c:64:a7:75:9d:69:cb:11:50:da: 93:dd:c9:7a:7c:1b:a5:f2:39:79:b6:0b:fb:e5:c0: 05:20:80:11:00:8a:26:23:37:2f:e0:fa:a1:2f:e5: 75:e3:de:39:75:c7:c8:99:e7:13:0d:48:a3:97:06: 0f:cc:38:07:a3:a1:96:c3:a5:02:0c:f6:c4:c9:79: e8:7c:dd:cf:de:89:81:34:d4:9a:88:0a:3f:c1:b3: 54:87:9b:f0:67:16:b8:8e:55:44:58:2f:01:70:b4: 66:1e:3a:93:72:bd:52:f6:15:90:01:60:e4:f2:9a: 5d:67:41:25:f2:47:54:62:59:d1:7f:5d:fd:9f:ca: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4C:73:01:4D:A0:6A:B5:84:AF:A9:3D:94:7A:EF:EC:6C:12:54:B5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u0xzAU2garWEr6k9lHrv7GwSVLU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.0.0/21 Signature Algorithm: sha256WithRSAEncryption 95:0d:94:8b:82:43:45:c0:8f:ce:a9:f0:d4:1e:dc:5a:72:48: ef:d8:65:e4:f9:5b:d4:5a:1f:59:af:7b:45:15:d7:eb:8c:5f: 8f:5b:17:16:2f:08:e0:24:74:e3:b9:f0:46:91:25:00:b6:dd: 07:b8:15:b8:ca:53:bf:1e:c2:76:4e:05:24:cd:59:5b:95:7b: fd:33:82:f5:f5:ec:bf:0f:ef:73:30:2a:81:fa:78:5d:86:1f: 4d:5d:e6:09:52:33:d1:17:84:19:3a:07:f6:a5:68:fa:53:98: f3:c6:df:c7:05:9f:50:6e:ed:1a:8a:10:c8:9f:a2:11:67:7a: a9:93:ff:45:8b:c6:10:1e:45:fb:5b:4b:12:a3:a0:32:84:35: 82:cd:16:c2:7b:98:38:41:20:84:69:04:74:d7:41:74:c2:7f: 67:ac:e3:79:3d:cf:ae:94:73:d2:16:db:30:76:df:ff:e2:b0: 18:29:18:47:b0:20:5a:69:e3:d1:07:8c:67:44:71:df:6e:e6: 49:2f:00:23:35:60:05:2e:94:fa:42:d9:8a:22:82:d4:20:69: 61:bb:aa:89:8f:4a:42:90:b7:f7:51:7a:6b:69:48:11:f5:34: eb:4c:18:11:c3:cb:21:36:8b:87:db:05:48:e6:2d:ca:3c:ef: c7:0e:cc:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJCNEM3MzAxNERBMDZB QjU4NEFGQTkzRDk0N0FFRkVDNkMxMjU0QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsq2280TQywVhVXPbqJivPSGOU5Z0mZvtEysvO2rhqUIZMZZT/ mLfrl01hHGxVOVlK2W4GRKu6Sj/NRERGYqQ5W0EmMPo5bfSaG0h2wQNitEJ5wKc9 fanWenyzI85cbSw+LKJ42IdwdaGBLks4wLpSyw9FzaFvgPlajoU3bGSndZ1pyxFQ 2pPdyXp8G6XyOXm2C/vlwAUggBEAiiYjNy/g+qEv5XXj3jl1x8iZ5xMNSKOXBg/M OAejoZbDpQIM9sTJeeh83c/eiYE01JqICj/Bs1SHm/BnFriOVURYLwFwtGYeOpNy vVL2FZABYOTyml1nQSXyR1RiWdF/Xf2fyv+lAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUu0xzAU2garWEr6k9lHrv7GwSVLUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3UweHpBVTJnYXJXRXI2azls SHJ2N0d3U1ZMVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /gAwDQYJKoZIhvcNAQELBQADggEBAJUNlIuCQ0XAj86p8NQe3FpySO/YZeT5W9Ra H1mve0UV1+uMX49bFxYvCOAkdOO58EaRJQC23Qe4FbjKU78ewnZOBSTNWVuVe/0z gvX17L8P73MwKoH6eF2GH01d5glSM9EXhBk6B/alaPpTmPPG38cFn1Bu7RqKEMif ohFneqmT/0WLxhAeRftbSxKjoDKENYLNFsJ7mDhBIIRpBHTXQXTCf2es43k9z66U c9IW2zB23//isBgpGEewIFpp49EHjGdEcd9u5kkvACM1YAUulPpC2YoigtQgaWG7 qomPSkKQt/dRemtpSBH1NOtMGBHDyyE2i4fbBUjmLco878cOzKE= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:33 2025 by rpki-client