$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa File: y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa (raw, json) Hash identifier: 0xpEbFgVDPzsJxafE5Twvo5m+V4djkXdF9ElzL4kp/A= Subject key identifier: CB:FC:DA:F5:90:47:26:20:75:27:D1:E0:F9:35:05:01:53:CB:63:69 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24B2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa Signing time: Mon 10 Feb 2025 14:18:54 +0000 ROA not before: Mon 10 Feb 2025 14:18:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9394 (0x24b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CBFCDAF5904726207527D1E0F935050153CB6369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:2f:09:08:f8:b3:55:a9:e1:f9:72:ca:1e: 92:66:19:0e:a6:4b:8c:61:5a:6e:e8:20:56:de:98: a4:d9:22:54:23:e7:21:b1:ef:71:45:83:08:8d:1e: 9a:6a:4d:62:d4:7d:5c:0b:5b:a7:27:21:8d:69:c1: c6:3e:d8:09:f8:c2:54:7e:81:d4:45:12:16:4a:7d: f3:a3:1d:81:c8:81:3b:3c:ba:67:bc:15:c4:53:7f: 40:c9:8d:4b:f1:14:04:c6:79:76:fe:64:80:39:62: c7:2c:09:5d:a9:52:a0:7a:62:ea:15:60:36:31:5a: 79:e0:d9:f9:8c:e1:7d:ba:94:3e:85:82:3c:d1:6d: 06:e3:d3:25:8a:c5:77:11:d6:59:c4:09:55:fe:37: fd:dc:ae:b4:c4:c0:8b:d1:c6:cc:fb:d4:fa:d1:b6: 26:53:d6:fc:bc:ae:4c:c4:13:fd:c0:00:80:81:29: a8:7d:a4:c3:ea:b5:bb:2e:bb:ce:64:85:51:d6:77: 50:7a:88:f3:34:a6:83:56:dc:d4:41:bb:c9:35:0b: d0:d7:a2:ce:57:f0:84:1c:8f:fd:0a:de:f9:63:8b: eb:59:7f:af:a9:26:34:7d:91:f9:4f:6e:b3:9b:f7: 5d:c4:2c:1f:92:d3:ac:6e:55:c7:fa:e3:c0:64:59: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FC:DA:F5:90:47:26:20:75:27:D1:E0:F9:35:05:01:53:CB:63:69 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.136.0/24 Signature Algorithm: sha256WithRSAEncryption 93:96:d4:9f:b7:25:b3:18:70:24:1c:e2:0a:bb:db:3f:b3:20: b3:25:9d:09:11:e6:d5:de:ce:25:cf:3c:24:ee:0d:47:ef:eb: 5e:cc:96:79:0d:44:51:68:37:cd:6d:33:26:ef:d1:e1:20:59: f6:9e:48:28:f6:d8:6b:7e:f7:c0:dd:01:9c:7f:8e:26:a2:00: b1:a1:2d:17:6a:cb:5a:67:cf:ab:96:12:98:4f:2d:e8:f5:6c: 06:b0:5c:1a:39:5f:70:32:4d:49:a1:11:97:e0:de:6c:31:c9: 5a:8b:5f:c5:e1:27:e9:e3:d6:83:5e:4d:2d:80:70:7a:cf:c6: fc:f1:65:10:a5:06:d4:a0:3b:30:54:d5:79:e5:32:af:15:9f: 63:9b:31:13:9d:da:73:0f:51:55:e0:eb:4a:66:53:eb:90:6e: 1e:b4:db:4e:fa:3b:3a:56:0c:04:a3:05:08:f0:aa:dd:a3:f1: 58:bd:a6:de:25:e2:91:eb:bf:ab:db:00:41:9e:21:27:3d:8b: 31:fa:8a:50:e7:d8:32:37:68:9e:cc:a6:ae:50:a3:73:6a:98: f4:13:9e:e5:97:b9:c6:b9:12:f5:66:25:b9:fb:40:46:ab:f6: a9:ef:48:c9:e9:f0:bf:c3:ad:8c:e1:69:29:96:cb:40:29:97: 94:5d:0b:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENCRkNEQUY1OTA0NzI2 MjA3NTI3RDFFMEY5MzUwNTAxNTNDQjYzNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBly8JCPizVanh+XLKHpJmGQ6mS4xhWm7oIFbemKTZIlQj5yGx 73FFgwiNHppqTWLUfVwLW6cnIY1pwcY+2An4wlR+gdRFEhZKffOjHYHIgTs8ume8 FcRTf0DJjUvxFATGeXb+ZIA5YscsCV2pUqB6YuoVYDYxWnng2fmM4X26lD6FgjzR bQbj0yWKxXcR1lnECVX+N/3crrTEwIvRxsz71PrRtiZT1vy8rkzEE/3AAICBKah9 pMPqtbsuu85khVHWd1B6iPM0poNW3NRBu8k1C9DXos5X8IQcj/0K3vlji+tZf6+p JjR9kflPbrOb913ELB+S06xuVcf648BkWfiPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUy/za9ZBHJiB1J9Hg+TUFAVPLY2kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lfemE5WkJISmlCMUo5SGct VFVGQVZQTFkyay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx nogwDQYJKoZIhvcNAQELBQADggEBAJOW1J+3JbMYcCQc4gq72z+zILMlnQkR5tXe ziXPPCTuDUfv617MlnkNRFFoN81tMybv0eEgWfaeSCj22Gt+98DdAZx/jiaiALGh LRdqy1pnz6uWEphPLej1bAawXBo5X3AyTUmhEZfg3mwxyVqLX8XhJ+nj1oNeTS2A cHrPxvzxZRClBtSgOzBU1XnlMq8Vn2ObMROd2nMPUVXg60pmU+uQbh602076OzpW DASjBQjwqt2j8Vi9pt4l4pHrv6vbAEGeISc9izH6ilDn2DI3aJ7Mpq5Qo3NqmPQT nuWXuca5EvVmJbn7QEar9qnvSMnp8L/DrYzhaSmWy0Apl5RdC9s= -----END CERTIFICATE-----Generated at Thu Jul 24 08:26:15 2025 by rpki-client