$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uP0WpAx8HSFUnbaiFSR7X81djJs.roa File: uP0WpAx8HSFUnbaiFSR7X81djJs.roa (raw, json) Hash identifier: 2uKVaHwQxoSTINhRwPhBq7pIM1zyXok5TOQyAReLS2I= Subject key identifier: B8:FD:16:A4:0C:7C:1D:21:54:9D:B6:A2:15:24:7B:5F:CD:5D:8C:9B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 263A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uP0WpAx8HSFUnbaiFSR7X81djJs.roa Signing time: Fri 22 Aug 2025 08:42:43 +0000 ROA not before: Fri 22 Aug 2025 08:42:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 61.61.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9786 (0x263a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B8FD16A40C7C1D21549DB6A215247B5FCD5D8C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:52:fd:f5:0b:f8:12:7f:c2:43:32:74:1e:0e: 26:31:75:36:22:81:1e:72:99:c8:94:a7:01:ba:0c: ef:14:2c:42:7e:4c:58:85:c9:32:45:1b:c3:7b:1f: 84:ed:91:e7:99:79:8b:a2:e5:4b:23:08:e4:05:34: e3:e9:de:1c:8f:9e:2e:f4:23:2c:ff:69:25:03:ac: f8:59:c9:09:a0:e7:2d:a9:2f:90:97:76:87:b1:82: 51:49:6a:c1:72:93:cc:0e:9a:1c:2d:01:2a:38:bf: 3f:c0:f1:3b:15:86:a9:be:fb:3f:4e:b2:19:81:24: b8:d5:a5:26:8d:2b:92:a4:3a:21:cd:6b:14:5d:01: 9b:f2:74:41:02:e5:52:91:55:9d:cf:72:b5:28:e1: ce:1d:37:3b:3c:39:4c:f5:42:cf:2b:40:5c:7e:a6: 3d:74:65:cf:2a:68:1c:c3:5c:e9:84:55:15:f9:32: b7:d6:28:eb:52:14:07:04:3f:9b:83:18:00:e3:89: 38:8d:ac:66:dc:ae:a9:98:7d:ec:27:83:b0:ce:20: 4d:b5:88:d3:0a:b3:fc:5b:5d:a5:2a:3c:ff:15:ab: d0:a3:03:15:21:9b:49:c4:41:d4:c6:fe:8f:70:51: 05:3b:9a:57:0c:40:86:25:c2:34:14:84:11:d5:7b: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FD:16:A4:0C:7C:1D:21:54:9D:B6:A2:15:24:7B:5F:CD:5D:8C:9B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uP0WpAx8HSFUnbaiFSR7X81djJs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:74:36:6c:c6:10:bf:a5:13:88:b0:56:22:98:1a:e5:f6:7b: 1d:c2:f1:b1:f9:8e:1a:19:db:ed:c9:40:9a:3e:44:08:25:b4: 1f:bb:71:bc:70:31:f9:e6:bb:34:e1:a9:e3:7c:a7:11:cb:81: d3:c1:f5:44:f9:cd:07:96:04:36:7d:06:90:79:9a:c6:fb:98: a9:f0:a6:46:1c:3c:6b:9e:b9:78:4b:6c:f1:84:2a:0c:dd:cf: 7b:5b:7e:18:42:6d:8d:db:66:3d:57:d9:8d:14:0b:35:73:74: 44:8d:af:89:4f:36:51:fc:06:57:b2:ce:51:51:f9:ef:a4:40: 0d:a2:3d:21:1f:5b:03:aa:fa:89:a3:f4:d9:5b:40:bb:d7:72: 4f:75:df:d1:16:d8:65:7e:09:59:63:b7:85:6f:d6:b6:d2:4c: 7a:27:32:d0:48:a1:7c:fd:a2:4b:fe:7c:c0:bb:89:2f:d8:0e: 02:25:d9:6a:6b:d0:8f:87:5c:5a:24:0a:83:b7:b7:5f:da:aa: 92:b4:7e:a2:bb:08:68:fa:8d:25:0d:cc:e6:a5:13:7d:0b:9e: dd:a7:9f:01:c3:d2:f5:89:d1:5a:80:7e:48:76:e5:f8:7e:06: 3d:7f:c6:1a:da:dd:0c:24:05:38:a0:50:b9:5b:76:a2:5f:99: 9c:ad:ca:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI4RkQxNkE0MEM3QzFE MjE1NDlEQjZBMjE1MjQ3QjVGQ0Q1RDhDOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhUv31C/gSf8JDMnQeDiYxdTYigR5ymciUpwG6DO8ULEJ+TFiF yTJFG8N7H4TtkeeZeYui5UsjCOQFNOPp3hyPni70Iyz/aSUDrPhZyQmg5y2pL5CX doexglFJasFyk8wOmhwtASo4vz/A8TsVhqm++z9OshmBJLjVpSaNK5KkOiHNaxRd AZvydEEC5VKRVZ3PcrUo4c4dNzs8OUz1Qs8rQFx+pj10Zc8qaBzDXOmEVRX5MrfW KOtSFAcEP5uDGADjiTiNrGbcrqmYfewng7DOIE21iNMKs/xbXaUqPP8Vq9CjAxUh m0nEQdTG/o9wUQU7mlcMQIYlwjQUhBHVezoZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuP0WpAx8HSFUnbaiFSR7X81djJswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VQMFdwQXg4SFNGVW5iYWlG U1I3WDgxZGpKcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PdgwDQYJKoZIhvcNAQELBQADggEBAC50NmzGEL+lE4iwViKYGuX2ex3C8bH5jhoZ 2+3JQJo+RAgltB+7cbxwMfnmuzThqeN8pxHLgdPB9UT5zQeWBDZ9BpB5msb7mKnw pkYcPGueuXhLbPGEKgzdz3tbfhhCbY3bZj1X2Y0UCzVzdESNr4lPNlH8BleyzlFR +e+kQA2iPSEfWwOq+omj9NlbQLvXck9139EW2GV+CVljt4Vv1rbSTHonMtBIoXz9 okv+fMC7iS/YDgIl2Wpr0I+HXFokCoO3t1/aqpK0fqK7CGj6jSUNzOalE30Lnt2n nwHD0vWJ0VqAfkh25fh+Bj1/xhra3QwkBTigULlbdqJfmZytynY= -----END CERTIFICATE-----Generated at Sat Oct 25 06:45:37 2025 by rpki-client