$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xU_8RDlcy0fxn4vdTzeOKh4LaOU.roa File: xU_8RDlcy0fxn4vdTzeOKh4LaOU.roa (raw, json) Hash identifier: 6d2lkHyLuhiddqwoRQnOlNcapf0+6gSlFCVohPgjWfg= Subject key identifier: C5:4F:FC:44:39:5C:CB:47:F1:9F:8B:DD:4F:37:8E:2A:1E:0B:68:E5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 269A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xU_8RDlcy0fxn4vdTzeOKh4LaOU.roa Signing time: Fri 22 Aug 2025 08:43:06 +0000 ROA not before: Fri 22 Aug 2025 08:43:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 122.254.0.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9882 (0x269a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C54FFC44395CCB47F19F8BDD4F378E2A1E0B68E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:32:30:07:b7:5f:dc:6d:4d:ec:6d:12:01: 6f:2d:42:3c:98:f8:b5:ed:6c:d1:9c:fb:bf:d4:47: e2:c1:d0:4d:1d:18:74:d8:4b:4f:d9:80:0d:10:b2: e8:ae:80:ff:06:d6:19:dc:e7:83:54:50:4b:64:dd: db:1c:a5:b5:47:3d:a3:51:d8:93:54:7e:09:36:bd: c9:21:7d:7c:9d:e7:d6:42:80:93:d3:63:fd:6a:8e: 47:d6:44:eb:42:6e:a9:bc:3f:3d:e4:b3:05:a2:5d: df:7d:ec:24:4f:6d:63:fa:21:7e:8f:f9:b9:18:3c: 54:7e:02:4a:06:04:47:74:46:3a:1f:d4:a5:7d:18: 83:9f:84:1c:63:3c:29:0e:00:dd:fe:f3:cc:0c:a0: d5:02:ad:eb:58:67:07:66:4e:8f:3e:a1:ce:44:16: bb:bc:97:9e:05:9d:4c:59:60:63:45:6c:1f:c2:dc: 33:d3:95:65:60:4c:d2:ee:bc:81:54:32:dc:3d:4b: f2:15:31:b1:75:07:a2:92:88:5a:db:f8:f4:b2:c1: da:4a:25:ae:da:a1:37:03:6e:70:b4:5e:30:ce:9f: 5c:8b:ae:f4:47:a2:18:fd:a6:06:bc:3b:b5:4d:18: 65:ff:a9:e3:eb:b2:b9:df:77:a7:b6:90:70:a2:dd: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:FC:44:39:5C:CB:47:F1:9F:8B:DD:4F:37:8E:2A:1E:0B:68:E5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xU_8RDlcy0fxn4vdTzeOKh4LaOU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.0.0/18 Signature Algorithm: sha256WithRSAEncryption 73:9b:ad:88:57:a7:22:8a:96:7c:fe:ef:03:9b:95:45:a5:d1: 2c:28:aa:e6:c4:d3:3d:ba:a8:38:fe:f0:35:06:87:06:eb:7d: 01:70:93:f7:b3:0e:b0:35:06:9b:40:39:ed:f8:dc:bb:68:70: 57:42:c5:c3:22:3a:ac:a2:c4:ff:cb:9c:c6:68:f3:34:bf:b5: 09:f7:2a:82:46:01:3d:09:42:75:ab:f9:db:a9:cc:02:c6:4d: 70:1f:74:cb:5e:55:d4:23:ab:6d:ec:77:7d:2d:13:73:13:37: 96:39:cb:7b:8d:d4:86:aa:56:18:c4:82:9b:99:5c:67:62:bf: 09:dd:9d:e7:7d:52:04:bb:c5:9f:86:c7:e0:5b:7c:0f:e3:96: 3f:35:1e:3e:5c:40:3b:8a:82:49:a9:42:53:f5:d4:4e:f4:41: 1c:d6:65:08:06:f1:9a:5c:cf:37:29:73:90:a2:95:b8:0f:42: f1:12:01:c4:37:82:37:58:13:ae:78:5c:1e:a4:6e:3e:49:ca: 33:11:0d:43:a6:c3:53:91:7d:6b:87:5d:3c:28:38:a2:d9:ca: bd:e0:a6:99:e2:39:7a:9c:23:a3:e6:10:b1:ed:e2:c2:99:f3: b2:27:14:d2:ea:eb:82:df:63:2f:80:7d:aa:3a:e0:86:e1:b6: b5:ac:5e:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzMDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1NEZGQzQ0Mzk1Q0NC NDdGMTlGOEJERDRGMzc4RTJBMUUwQjY4RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO8DIwB7df3G1N7G0SAW8tQjyY+LXtbNGc+7/UR+LB0E0dGHTY S0/ZgA0QsuiugP8G1hnc54NUUEtk3dscpbVHPaNR2JNUfgk2vckhfXyd59ZCgJPT Y/1qjkfWROtCbqm8Pz3kswWiXd997CRPbWP6IX6P+bkYPFR+AkoGBEd0Rjof1KV9 GIOfhBxjPCkOAN3+88wMoNUCretYZwdmTo8+oc5EFru8l54FnUxZYGNFbB/C3DPT lWVgTNLuvIFUMtw9S/IVMbF1B6KSiFrb+PSywdpKJa7aoTcDbnC0XjDOn1yLrvRH ohj9pga8O7VNGGX/qePrsrnfd6e2kHCi3bn5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxU/8RDlcy0fxn4vdTzeOKh4LaOUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hVXzhSRGxjeTBmeG40dmRU emVPS2g0TGFPVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 /gAwDQYJKoZIhvcNAQELBQADggEBAHObrYhXpyKKlnz+7wOblUWl0SwoqubE0z26 qDj+8DUGhwbrfQFwk/ezDrA1BptAOe343LtocFdCxcMiOqyixP/LnMZo8zS/tQn3 KoJGAT0JQnWr+dupzALGTXAfdMteVdQjq23sd30tE3MTN5Y5y3uN1IaqVhjEgpuZ XGdivwndned9UgS7xZ+Gx+BbfA/jlj81Hj5cQDuKgkmpQlP11E70QRzWZQgG8Zpc zzcpc5CilbgPQvESAcQ3gjdYE654XB6kbj5JyjMRDUOmw1ORfWuHXTwoOKLZyr3g ppniOXqcI6PmELHt4sKZ87InFNLq64LfYy+Afao64IbhtrWsXjQ= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:10 2025 by rpki-client