Why are the timing messages needed? RTKLIB does not use theses timing messages, as they are not definied in ublox.c.
The startup scripts for Reach UBX TIM TIM2 seem to enable the timing messages, but I don’t know why.
I have successfully flashed the SPG firmware and Reach works now with Galileo satellites.
Flashing was a bit complicated because it did work just after several tries. Be aware, that there is no way back at the moment.
The selftest during start-up (Ubloxtest.py) will no more work, it has to be disabled.