$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xkA2hK-GvkuEQKqvh4ox97ne2oI.roa File: xkA2hK-GvkuEQKqvh4ox97ne2oI.roa (raw, json) Hash identifier: cjy9GdcrTLNXSDKXC1fPJp2d9hsrZ38mj4FH35p3Swc= Subject key identifier: C6:40:36:84:AF:86:BE:4B:84:40:AA:AF:87:8A:31:F7:B9:DE:DA:82 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2667 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xkA2hK-GvkuEQKqvh4ox97ne2oI.roa Signing time: Fri 22 Aug 2025 08:42:54 +0000 ROA not before: Fri 22 Aug 2025 08:42:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 49.158.192.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9831 (0x2667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C6403684AF86BE4B8440AAAF878A31F7B9DEDA82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:a0:ec:9a:bd:24:a1:c1:e4:92:29:49:d8: 29:1a:e9:9c:50:e8:f6:87:92:86:74:c6:37:e0:f9: 68:59:8f:ff:d9:a3:3f:1b:e8:c7:4d:d2:38:53:09: fe:06:fb:ec:96:c5:48:64:73:c5:2f:de:d1:d3:c7: 00:12:1c:bf:7f:04:ce:cc:d6:7b:73:e9:52:93:cc: 38:da:ff:6f:bf:48:57:e5:f9:35:8d:52:e2:69:99: 8f:50:53:fb:e6:ec:6e:b3:a1:11:bb:06:e3:32:61: 89:5f:0f:f0:bd:a1:ad:69:80:02:12:93:c7:74:70: 88:c2:5c:5e:80:c6:91:f4:16:b0:98:a0:90:48:15: 3d:7a:89:ba:2c:60:2d:cb:6d:31:bd:9b:50:61:86: 1a:09:fe:a1:23:e0:75:99:a2:56:10:cd:d4:0d:8a: d6:09:a7:29:45:89:2f:ab:a7:4a:82:36:f8:e7:1c: 07:db:a1:f3:55:f1:11:30:9a:10:c8:e0:2f:27:2d: aa:f3:29:0d:d1:3d:4c:f3:07:30:d7:53:10:cf:d4: d3:17:b3:c4:e7:75:9a:be:3f:a0:59:83:11:36:6e: ce:49:a0:0a:55:e9:13:6c:08:39:2a:e3:fb:fa:54: 2f:bc:c0:49:71:b1:1b:7b:33:31:a1:9c:be:60:94: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:40:36:84:AF:86:BE:4B:84:40:AA:AF:87:8A:31:F7:B9:DE:DA:82 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xkA2hK-GvkuEQKqvh4ox97ne2oI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.192.0/20 Signature Algorithm: sha256WithRSAEncryption 66:89:cf:59:7b:be:a5:7e:f0:73:67:36:a2:93:83:e0:9e:eb: fe:ac:b8:77:bd:cb:f0:29:4d:49:88:99:7b:44:08:0c:9f:69: 58:dc:d2:d3:c9:d1:54:69:7b:83:d8:e8:ff:0f:fb:3d:4f:e8: f2:9c:fa:f8:09:b6:68:9f:c0:8a:c2:40:7a:46:7a:0d:a2:7d: ab:ed:1e:fd:f2:d8:06:11:3d:a3:55:2b:bb:dd:e8:9e:4e:18: 67:98:42:6d:d6:fb:f0:94:77:92:58:39:95:92:41:24:cd:27: db:a5:26:5d:5c:5c:dc:50:ab:2f:98:3f:88:8a:49:4c:e5:02: 06:48:d6:fb:81:3e:ea:ec:75:72:9c:e6:2d:34:fe:5a:cb:4b: 3d:57:4c:76:91:86:2b:25:2b:07:0a:45:8f:66:54:0e:80:38: 7a:13:80:86:c4:db:9f:5a:07:90:77:ad:5a:96:a6:6c:39:2b: 50:61:5f:97:57:08:a8:03:65:3b:6e:96:66:b4:02:86:b4:6c: 19:94:f0:15:44:01:95:18:89:1b:9b:4c:10:d7:2f:91:76:b1: 67:6c:29:1d:df:ce:55:46:5a:27:82:e6:7a:6b:ba:91:4a:00: be:40:7f:3f:0d:52:77:75:1d:19:9f:a3:0c:a1:26:48:fa:c0: ad:97:85:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2NDAzNjg0QUY4NkJF NEI4NDQwQUFBRjg3OEEzMUY3QjlERURBODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyXqDsmr0kocHkkilJ2Cka6ZxQ6PaHkoZ0xjfg+WhZj//Zoz8b 6MdN0jhTCf4G++yWxUhkc8Uv3tHTxwASHL9/BM7M1ntz6VKTzDja/2+/SFfl+TWN UuJpmY9QU/vm7G6zoRG7BuMyYYlfD/C9oa1pgAISk8d0cIjCXF6AxpH0FrCYoJBI FT16ibosYC3LbTG9m1BhhhoJ/qEj4HWZolYQzdQNitYJpylFiS+rp0qCNvjnHAfb ofNV8REwmhDI4C8nLarzKQ3RPUzzBzDXUxDP1NMXs8TndZq+P6BZgxE2bs5JoApV 6RNsCDkq4/v6VC+8wElxsRt7MzGhnL5glIeRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxkA2hK+GvkuEQKqvh4ox97ne2oIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hrQTJoSy1Hdmt1RVFLcXZo NG94OTduZTJvSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx nsAwDQYJKoZIhvcNAQELBQADggEBAGaJz1l7vqV+8HNnNqKTg+Ce6/6suHe9y/Ap TUmImXtECAyfaVjc0tPJ0VRpe4PY6P8P+z1P6PKc+vgJtmifwIrCQHpGeg2ifavt Hv3y2AYRPaNVK7vd6J5OGGeYQm3W+/CUd5JYOZWSQSTNJ9ulJl1cXNxQqy+YP4iK SUzlAgZI1vuBPursdXKc5i00/lrLSz1XTHaRhislKwcKRY9mVA6AOHoTgIbE259a B5B3rVqWpmw5K1BhX5dXCKgDZTtulma0Aoa0bBmU8BVEAZUYiRubTBDXL5F2sWds KR3fzlVGWieC5nprupFKAL5Afz8NUnd1HRmfowyhJkj6wK2Xhfk= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:38 2025 by rpki-client