$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/AS4662.roa File: AS4662.roa (raw, json) Hash identifier: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg= Subject key identifier: F2:27:6E:18:8E:AB:CA:52:A8:97:01:19:2D:83:60:90:1C:62:43:30 Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Certificate serial: 6AD2CA96251156642FD6C697E8B29A75BFBAC31B Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS4662.roa Signing time: Tue 12 May 2026 01:46:47 +0000 ROA not before: Tue 12 May 2026 01:41:47 +0000 ROA not after: Tue 11 May 2027 01:46:47 +0000 asID: 4662 IP address blocks: 61.56.160.0/19 maxlen: 19 61.58.96.0/20 maxlen: 20 61.58.112.0/20 maxlen: 20 61.60.208.0/20 maxlen: 20 61.61.208.0/20 maxlen: 20 61.61.224.0/20 maxlen: 20 61.64.0.0/19 maxlen: 19 122.100.64.0/18 maxlen: 18 122.254.0.0/18 maxlen: 18 123.0.32.0/19 maxlen: 19 124.6.0.0/19 maxlen: 19 211.76.32.0/19 maxlen: 19 211.76.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 14:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d2:ca:96:25:11:56:64:2f:d6:c6:97:e8:b2:9a:75:bf:ba:c3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Validity Not Before: May 12 01:41:47 2026 GMT Not After : May 11 01:46:47 2027 GMT Subject: CN=F2276E188EABCA52A89701192D8360901C624330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:1a:14:6f:fc:67:b6:7d:49:e1:c9:a0:58: bf:4a:8a:79:c0:23:5b:a6:41:af:d8:f2:67:76:d1: f0:e6:4e:93:f7:70:52:b1:71:a3:aa:07:80:fc:d0: a0:dc:5e:42:ed:58:df:1f:b5:74:2f:9c:85:ea:12: 69:97:a7:e2:33:10:84:c7:75:7f:17:24:8c:01:7e: 17:48:32:2e:96:df:8f:b0:b5:4b:4d:10:13:99:40: c8:3f:f0:76:4c:b9:ea:e0:44:43:8a:8e:e5:37:0f: 56:a0:51:a5:5b:a4:a7:e5:40:15:d5:67:5b:94:ea: fd:16:33:bc:42:b5:96:bf:f4:2f:a1:63:21:3f:b5: ae:0a:11:c2:de:14:ed:7d:f5:99:76:cd:a9:27:dc: 2f:de:3f:8a:3a:12:bd:16:e5:68:7a:01:26:93:d0: e5:99:3c:95:1e:55:a9:31:2b:81:aa:78:43:46:a0: 23:8d:b0:1a:a8:d5:d7:e1:a2:8a:eb:15:f3:31:d6: 68:9a:3a:86:bd:46:ab:0f:80:fd:63:d8:fc:f5:3d: c6:05:67:2a:ba:b5:df:98:92:77:7a:50:9f:4a:7e: b3:79:5e:b4:e7:d9:c1:73:aa:88:5f:82:d3:75:c8: 33:3d:26:4b:15:5e:8e:57:a0:3f:bc:a6:34:f4:d5: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:27:6E:18:8E:AB:CA:52:A8:97:01:19:2D:83:60:90:1C:62:43:30 X509v3 Authority Key Identifier: keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS4662.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.56.160.0/19 61.58.96.0/19 61.60.208.0/20 61.61.208.0-61.61.239.255 61.64.0.0/19 122.100.64.0/18 122.254.0.0/18 123.0.32.0/19 124.6.0.0/19 211.76.32.0-211.76.79.255 Signature Algorithm: sha256WithRSAEncryption 01:58:e6:20:9b:bb:9b:e0:96:fc:f2:84:50:b4:dd:40:6d:14: a9:c6:ff:1c:0f:2b:2d:60:7f:f5:fa:5c:88:1d:3b:9d:2c:b3: e0:76:13:7f:95:21:c5:82:33:a0:ed:a8:a7:f2:de:75:1e:cd: a4:57:04:1a:03:81:cd:77:97:0a:26:0c:12:28:7f:13:e2:96: ab:03:67:11:b6:0f:6d:cd:4a:b1:fc:39:c1:0f:28:22:54:28: 88:24:62:98:e0:c1:a6:5b:f6:4d:bd:19:49:cc:e9:aa:a8:60: c9:c0:d6:e9:f7:e7:2d:df:e8:1b:3e:bd:e6:ee:ff:a0:22:67: 73:e7:a6:99:ff:e2:3e:4d:d8:7a:59:91:c6:2a:3e:ae:f0:89: dd:3d:28:d7:83:ca:57:b6:b7:ed:75:e1:94:55:99:86:21:48: 95:26:07:34:e5:8e:57:d2:e2:c8:a5:64:70:52:6e:a7:7e:dd: 73:4b:96:33:1f:a0:b6:60:c2:0b:cd:4d:9f:67:98:ac:36:18: 6d:b5:5c:7e:32:d3:cd:fa:86:32:f8:b1:81:ee:e8:05:03:34: 68:40:31:c8:c5:00:8f:09:3f:b5:7b:3a:bd:4d:f5:8e:35:8a: 39:cf:ce:e2:07:60:2f:0c:ed:93:49:55:9b:ed:4e:52:cf:b3: 13:82:64:94 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUatLKliURVmQv1saX6LKadb+6wxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4 QkVFM0EwRTAeFw0yNjA1MTIwMTQxNDdaFw0yNzA1MTEwMTQ2NDdaMDMxMTAvBgNV BAMTKEYyMjc2RTE4OEVBQkNBNTJBODk3MDExOTJEODM2MDkwMUM2MjQzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIxoUb/xntn1J4cmgWL9KinnA I1umQa/Y8md20fDmTpP3cFKxcaOqB4D80KDcXkLtWN8ftXQvnIXqEmmXp+IzEITH dX8XJIwBfhdIMi6W34+wtUtNEBOZQMg/8HZMuergREOKjuU3D1agUaVbpKflQBXV Z1uU6v0WM7xCtZa/9C+hYyE/ta4KEcLeFO199Zl2zakn3C/eP4o6Er0W5Wh6ASaT 0OWZPJUeVakxK4GqeENGoCONsBqo1dfhoorrFfMx1miaOoa9RqsPgP1j2Pz1PcYF Zyq6td+Yknd6UJ9KfrN5XrTn2cFzqohfgtN1yDM9JksVXo5XoD+8pjT01RaBAgMB AAGjggH5MIIB9TAdBgNVHQ4EFgQU8iduGI6rylKolwEZLYNgkBxiQzAwHwYDVR0j BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx NzM1QzhCRUUzQTBFLmNlcjBMBggrBgEFBQcBCwRAMD4wPAYIKwYBBQUHMAuGMHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvQVM0NjYyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIA ATBMAwQFPTigAwQFPTpgAwQEPTzQMAwDBAQ9PdADBAQ9PeADBAU9QAADBAZ6ZEAD BAZ6/gADBAV7ACADBAV8BgAwDAMEBdNMIAMEBNNMQDANBgkqhkiG9w0BAQsFAAOC AQEAAVjmIJu7m+CW/PKEULTdQG0Uqcb/HA8rLWB/9fpciB07nSyz4HYTf5UhxYIz oO2op/LedR7NpFcEGgOBzXeXCiYMEih/E+KWqwNnEbYPbc1Ksfw5wQ8oIlQoiCRi mODBplv2Tb0ZSczpqqhgycDW6ffnLd/oGz695u7/oCJnc+emmf/iPk3YelmRxio+ rvCJ3T0o14PKV7a37XXhlFWZhiFIlSYHNOWOV9LiyKVkcFJup37dc0uWMx+gtmDC C81Nn2eYrDYYbbVcfjLTzfqGMvixge7oBQM0aEAxyMUAjwk/tXs6vU31jjWKOc/O 4gdgLwztk0lVm+1OUs+zE4JklA== -----END CERTIFICATE-----Generated at Wed May 13 21:08:09 2026 by rpki-client