$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uZSGpUXIlYqnNddUAaLrEZQ9AfY.roa File: uZSGpUXIlYqnNddUAaLrEZQ9AfY.roa (raw, json) Hash identifier: //jeV7BNKGkve7GokD16lSMp8ju01XweUc13GW1e1I4= Subject key identifier: B9:94:86:A5:45:C8:95:8A:A7:35:D7:54:01:A2:EB:11:94:3D:01:F6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 267A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uZSGpUXIlYqnNddUAaLrEZQ9AfY.roa Signing time: Fri 22 Aug 2025 08:42:58 +0000 ROA not before: Fri 22 Aug 2025 08:42:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 119.77.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9850 (0x267a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B99486A545C8958AA735D75401A2EB11943D01F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:e8:c1:dd:d5:2c:6f:3e:d8:b6:7c:70:c3: a9:98:9c:76:20:f7:08:14:ad:4f:cb:b9:52:65:f1: 8c:dd:e0:1b:b3:c9:7d:88:a1:5c:b2:4a:cb:0e:0a: 34:12:fb:3a:44:58:b4:06:11:20:82:c0:5d:72:b9: c7:f9:e1:9e:83:44:0a:23:58:55:2f:e9:70:33:e5: 91:2b:ef:56:07:02:9d:1a:df:6b:48:00:b6:60:61: cd:5c:10:78:32:ca:a3:a9:e7:71:4c:52:59:db:ef: e7:76:c4:9d:e3:72:5f:e4:9d:3d:25:8e:d6:68:28: a7:7a:98:5c:5f:47:d0:1a:ee:24:79:c4:24:49:66: cd:6b:22:97:6d:fe:b1:28:bf:21:9c:a1:1a:11:c1: d8:88:20:96:c1:48:cb:1a:83:eb:e9:b4:c9:42:6d: 1c:41:41:13:aa:5d:10:3d:7a:8b:b2:a2:90:20:69: 00:1a:8b:e6:c6:45:76:f6:3b:f6:4b:c4:aa:f5:0d: bc:c7:df:32:26:92:63:16:af:bf:8c:3e:7d:ed:28: 60:4a:f8:d1:02:d7:ee:48:35:a7:9f:b7:da:ce:b0: bd:bb:b3:d4:46:58:6a:f0:8d:19:dd:2a:20:d9:0e: 24:57:35:60:0e:1d:2f:15:cd:17:a6:38:7b:f4:d0: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:94:86:A5:45:C8:95:8A:A7:35:D7:54:01:A2:EB:11:94:3D:01:F6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uZSGpUXIlYqnNddUAaLrEZQ9AfY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 65:30:52:76:e9:8d:2d:d9:c1:34:d1:4b:a8:7e:83:44:85:b8: 71:04:a1:91:ea:95:cd:60:e3:70:fb:f5:d8:9d:3d:f4:ea:e3: 59:7d:81:77:4e:37:78:2e:66:f1:af:fd:02:cd:47:90:62:39: 03:97:df:7c:24:dc:b5:81:2d:68:66:2e:19:ac:de:4a:86:24: e0:af:c7:ce:f4:29:70:d5:59:9a:dd:b4:5a:09:42:9f:fa:dd: b7:aa:3e:d0:bf:88:db:0d:32:60:28:80:05:27:10:7e:46:9f: 9b:a8:88:2c:4a:c7:20:f8:50:6a:69:b0:8e:e6:f4:71:fc:e8: 58:7e:a3:75:78:e6:4e:bc:e3:22:a1:e7:00:63:93:1e:42:08: 56:9a:c0:d0:da:83:b2:87:0e:89:6c:79:e4:21:ac:bf:60:00: cb:05:d8:5b:14:3d:47:ab:f8:0c:eb:aa:57:ec:98:89:ba:fa: da:84:a1:d5:81:fb:fd:98:0f:45:8c:3d:12:56:a1:e8:81:0f: c7:27:ea:3b:86:23:84:5d:41:70:9a:88:c1:53:6a:0d:78:17: c7:23:6d:05:da:d1:6c:66:5c:d2:31:dd:f8:59:71:d6:34:1f: 87:bd:b6:4b:dc:ae:d2:65:5c:45:4e:cb:e3:92:92:25:79:2f: ae:a0:04:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI5OTQ4NkE1NDVDODk1 OEFBNzM1RDc1NDAxQTJFQjExOTQzRDAxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVWujB3dUsbz7Ytnxww6mYnHYg9wgUrU/LuVJl8Yzd4BuzyX2I oVyySssOCjQS+zpEWLQGESCCwF1yucf54Z6DRAojWFUv6XAz5ZEr71YHAp0a32tI ALZgYc1cEHgyyqOp53FMUlnb7+d2xJ3jcl/knT0ljtZoKKd6mFxfR9Aa7iR5xCRJ Zs1rIpdt/rEovyGcoRoRwdiIIJbBSMsag+vptMlCbRxBQROqXRA9eouyopAgaQAa i+bGRXb2O/ZLxKr1DbzH3zImkmMWr7+MPn3tKGBK+NEC1+5INaeft9rOsL27s9RG WGrwjRndKiDZDiRXNWAOHS8VzRemOHv00GlbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuZSGpUXIlYqnNddUAaLrEZQ9AfYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VaU0dwVVhJbFlxbk5kZFVB YUxyRVpROUFmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 TYAwDQYJKoZIhvcNAQELBQADggEBAGUwUnbpjS3ZwTTRS6h+g0SFuHEEoZHqlc1g 43D79didPfTq41l9gXdON3guZvGv/QLNR5BiOQOX33wk3LWBLWhmLhms3kqGJOCv x870KXDVWZrdtFoJQp/63beqPtC/iNsNMmAogAUnEH5Gn5uoiCxKxyD4UGppsI7m 9HH86Fh+o3V45k684yKh5wBjkx5CCFaawNDag7KHDolseeQhrL9gAMsF2FsUPUer +AzrqlfsmIm6+tqEodWB+/2YD0WMPRJWoeiBD8cn6juGI4RdQXCaiMFTag14F8cj bQXa0WxmXNIx3fhZcdY0H4e9tkvcrtJlXEVOy+OSkiV5L66gBNA= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:31 2025 by rpki-client