$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/AS24613.roa File: AS24613.roa (raw, json) Hash identifier: BOMFv12VWuDFcMo0MLAvEUpJABw6zTK+45yaZfd4C5Q= Subject key identifier: 4C:4B:46:41:83:22:10:21:0D:C9:1C:E0:A8:89:E6:EE:A0:7C:92:D7 Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Certificate serial: 5760C324194049FE633120F64DC17EC3E83FB6BC Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS24613.roa Signing time: Mon 11 May 2026 17:27:41 +0000 ROA not before: Mon 11 May 2026 17:22:41 +0000 ROA not after: Mon 10 May 2027 17:27:41 +0000 asID: 24613 IP address blocks: 122.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 14:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:60:c3:24:19:40:49:fe:63:31:20:f6:4d:c1:7e:c3:e8:3f:b6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Validity Not Before: May 11 17:22:41 2026 GMT Not After : May 10 17:27:41 2027 GMT Subject: CN=4C4B4641832210210DC91CE0A889E6EEA07C92D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:fb:30:69:de:f8:ee:be:4a:da:54:4a:a1: fb:ea:c8:0e:76:be:3e:a8:36:a8:2e:7d:21:40:ff: ea:19:d0:37:0f:ed:11:23:4a:24:67:54:b9:01:b0: 0c:87:ff:62:15:4f:ec:f8:1d:e1:bb:51:98:6c:ed: 0a:36:f7:60:18:ee:bb:77:01:fd:db:61:8a:2b:51: ef:57:68:0b:a6:c0:9d:24:43:a9:bd:61:95:c6:ca: db:61:c1:60:55:37:10:1c:3e:0a:1b:c0:60:76:51: 33:a7:9d:f2:e3:1e:8a:86:40:5e:8e:92:bf:18:f0: ea:45:bb:17:a8:7d:10:e2:14:ce:ff:d4:83:f1:fd: 5e:43:8c:de:ff:f9:f5:80:88:06:6e:12:7e:76:71: aa:0d:1c:72:9d:d9:47:b9:11:85:dc:8d:ac:2b:90: 8e:1e:9b:cc:57:3f:7f:de:c9:c2:7f:f3:48:32:78: 6e:ca:25:84:64:eb:c0:e0:f8:f7:7b:59:d4:4e:9b: 05:ac:a7:79:b3:8a:a1:4f:1a:37:41:49:1a:97:83: 76:b2:ed:84:ca:b8:8e:4d:78:42:d8:50:98:be:4c: 76:ae:b6:fd:86:41:db:90:15:70:ac:d3:88:25:50: e9:cf:58:b5:7b:46:53:dd:ee:33:92:b2:5d:85:c0: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4B:46:41:83:22:10:21:0D:C9:1C:E0:A8:89:E6:EE:A0:7C:92:D7 X509v3 Authority Key Identifier: keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS24613.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption cd:a5:cf:19:b0:87:4d:4c:84:3a:06:d8:7a:10:38:1a:b9:d7: 01:90:e4:2a:2b:96:c0:fb:26:7d:27:bd:ad:9c:6c:fa:ea:75: 80:d6:b7:15:6c:27:82:e6:ba:e4:dc:7a:8d:8e:7e:fa:20:4e: 8a:c7:96:e2:11:9d:0e:b5:36:4f:68:b5:cf:e7:5b:f2:40:6a: 25:80:e0:e0:91:9e:f2:2d:92:15:4f:1a:5c:db:16:24:95:4f: 2a:b1:2a:5a:4e:00:06:19:f7:e1:7c:e0:6f:1b:75:20:61:1e: 11:0f:a5:fc:61:3e:27:06:76:a3:72:d8:f6:19:89:88:bc:f7: 94:88:d1:c2:e6:8e:a6:ae:e1:a7:d0:0b:a4:81:bf:5e:da:69: 6d:5b:25:78:1d:05:2c:97:48:66:00:5b:b9:dd:f0:ed:33:81: 93:41:35:0a:04:25:57:9c:bf:82:b3:cc:aa:ee:c7:f0:fb:1a: 94:ae:66:ce:25:d9:42:b5:f8:a4:db:26:e8:a2:d5:01:28:b2: 47:40:76:9a:f0:87:dc:78:26:e1:54:c0:0e:8b:ec:9c:89:ed: cd:9b:59:d9:e4:a2:7f:e5:6a:16:c6:d1:8b:6a:44:6c:44:48: 3b:f4:48:32:8b:0e:76:a7:41:d2:22:17:54:fb:50:9c:46:34: e4:2b:f9:3f -----BEGIN CERTIFICATE----- MIIEqjCCA5KgAwIBAgIUV2DDJBlASf5jMSD2TcF+w+g/trwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4 QkVFM0EwRTAeFw0yNjA1MTExNzIyNDFaFw0yNzA1MTAxNzI3NDFaMDMxMTAvBgNV BAMTKDRDNEI0NjQxODMyMjEwMjEwREM5MUNFMEE4ODlFNkVFQTA3QzkyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRfswad747r5K2lRKofvqyA52 vj6oNqgufSFA/+oZ0DcP7REjSiRnVLkBsAyH/2IVT+z4HeG7UZhs7Qo292AY7rt3 Af3bYYorUe9XaAumwJ0kQ6m9YZXGytthwWBVNxAcPgobwGB2UTOnnfLjHoqGQF6O kr8Y8OpFuxeofRDiFM7/1IPx/V5DjN7/+fWAiAZuEn52caoNHHKd2Ue5EYXcjawr kI4em8xXP3/eycJ/80gyeG7KJYRk68Dg+Pd7WdROmwWsp3mziqFPGjdBSRqXg3ay 7YTKuI5NeELYUJi+THautv2GQduQFXCs04glUOnPWLV7RlPd7jOSsl2FwKYjAgMB AAGjggG0MIIBsDAdBgNVHQ4EFgQUTEtGQYMiECENyRzgqInm7qB8ktcwHwYDVR0j BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx NzM1QzhCRUUzQTBFLmNlcjBNBggrBgEFBQcBCwRBMD8wPQYIKwYBBQUHMAuGMXJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvQVMyNDYxMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBnpkQDANBgkqhkiG9w0BAQsFAAOCAQEAzaXPGbCHTUyEOgbYehA4GrnX AZDkKiuWwPsmfSe9rZxs+up1gNa3FWwngua65Nx6jY5++iBOiseW4hGdDrU2T2i1 z+db8kBqJYDg4JGe8i2SFU8aXNsWJJVPKrEqWk4ABhn34Xzgbxt1IGEeEQ+l/GE+ JwZ2o3LY9hmJiLz3lIjRwuaOpq7hp9ALpIG/XtppbVsleB0FLJdIZgBbud3w7TOB k0E1CgQlV5y/grPMqu7H8PsalK5mziXZQrX4pNsm6KLVASiyR0B2mvCH3Hgm4VTA DovsnIntzZtZ2eSif+VqFsbRi2pEbERIO/RIMosOdqdB0iIXVPtQnEY05Cv5Pw== -----END CERTIFICATE-----Generated at Wed May 13 21:08:08 2026 by rpki-client