$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1qOfn0VGCm0le4gA8U5SEozlDs8.roa File: 1qOfn0VGCm0le4gA8U5SEozlDs8.roa (raw, json) Hash identifier: OWx+1bl1UbT+CZf4CaMCVAn4svESOiVg5YxhE/3E2gQ= Subject key identifier: D6:A3:9F:9F:45:46:0A:6D:25:7B:88:00:F1:4E:52:12:8C:E5:0E:CF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23E8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1qOfn0VGCm0le4gA8U5SEozlDs8.roa Signing time: Mon 10 Feb 2025 14:18:04 +0000 ROA not before: Mon 10 Feb 2025 14:18:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.158.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9192 (0x23e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6A39F9F45460A6D257B8800F14E52128CE50ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:4e:31:e5:d6:eb:ab:97:a7:a8:7c:43:8d: bc:d3:a9:24:b6:0a:45:47:90:45:48:b8:c4:01:c8: ce:c0:77:4f:06:c5:a0:7a:fa:35:38:6e:d1:de:63: c6:1b:2a:fb:47:b8:fb:6a:b1:d9:3d:58:b6:7a:fb: 1a:0c:7b:ca:32:9e:d3:fd:a4:ef:25:4a:42:b8:e8: 36:28:18:a2:40:c7:1c:20:08:b6:d5:1a:99:98:61: f4:03:f6:c9:ba:7b:22:25:85:1b:c8:65:37:f6:af: 28:b9:db:52:bd:0d:57:16:2d:f2:2e:fb:88:9e:24: d1:29:f2:06:cf:13:c2:bf:5f:da:e5:1c:a1:2a:ad: 3d:af:e7:5b:10:b3:2d:87:14:9d:67:20:87:6e:96: 0d:6a:42:80:51:74:16:30:1a:ec:8c:47:e2:b8:ad: 11:40:6d:7d:e0:43:33:5c:66:5c:9d:90:11:a6:bf: 58:86:16:6e:a1:5a:bd:90:5a:5f:fa:44:ca:0a:85: 5a:b2:5d:1a:28:8d:ef:dd:17:01:3b:3f:4a:8f:db: 6d:f6:53:26:62:83:c4:f9:44:d2:d3:d0:53:be:a2: 45:6e:9f:cd:86:f4:a2:a2:5a:9e:7b:dd:bd:4b:2e: 16:fe:70:83:9c:c1:bd:83:11:53:13:bd:e5:a9:72: 71:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A3:9F:9F:45:46:0A:6D:25:7B:88:00:F1:4E:52:12:8C:E5:0E:CF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1qOfn0VGCm0le4gA8U5SEozlDs8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.132.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:94:d8:39:f0:8b:5b:c2:fe:1e:b1:19:da:c8:a3:d3:cf:57: d1:60:f0:c3:cc:f8:f9:9f:7c:7c:6b:c9:5d:13:a9:12:3e:84: e1:e2:8f:af:3a:0d:52:35:55:4d:38:27:52:e7:0d:36:1d:f5: 89:66:23:66:e8:e4:7d:7c:90:a5:50:56:f7:f7:12:7a:3c:a2: cf:68:fa:1d:19:60:40:16:22:3d:7c:ec:c1:91:fe:49:e1:02: fe:09:c3:4b:ae:63:e1:85:be:a6:97:89:58:33:c4:13:17:0d: bc:a5:ac:d9:a4:cf:43:52:98:59:00:a6:80:9c:b8:0c:37:7d: 80:16:c9:1c:3d:a0:39:fc:50:c2:5f:fe:ab:44:0c:bb:13:ad: 36:8e:e9:67:bd:40:e0:98:88:41:72:84:3b:73:3b:59:9d:d5: aa:4d:c9:33:74:87:df:25:09:8d:df:e2:46:95:12:5e:10:b8: 99:e9:e6:02:18:23:f9:7c:e9:4e:65:ab:3e:cc:84:b0:5b:11: b6:45:b8:fd:c2:eb:3d:b7:35:02:d5:fc:9c:b3:c5:4b:e6:c4: 10:99:0c:88:65:0a:b6:66:62:b0:bc:ba:20:d0:94:0e:84:61: e1:03:95:b7:5d:62:04:8a:41:2a:54:ba:ad:6c:ee:bc:60:6e: 37:4d:58:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2QTM5RjlGNDU0NjBB NkQyNTdCODgwMEYxNEU1MjEyOENFNTBFQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9YU4x5dbrq5enqHxDjbzTqSS2CkVHkEVIuMQByM7Ad08GxaB6 +jU4btHeY8YbKvtHuPtqsdk9WLZ6+xoMe8oyntP9pO8lSkK46DYoGKJAxxwgCLbV GpmYYfQD9sm6eyIlhRvIZTf2ryi521K9DVcWLfIu+4ieJNEp8gbPE8K/X9rlHKEq rT2v51sQsy2HFJ1nIIdulg1qQoBRdBYwGuyMR+K4rRFAbX3gQzNcZlydkBGmv1iG Fm6hWr2QWl/6RMoKhVqyXRooje/dFwE7P0qP2232UyZig8T5RNLT0FO+okVun82G 9KKiWp573b1LLhb+cIOcwb2DEVMTveWpcnFNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1qOfn0VGCm0le4gA8U5SEozlDs8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFxT2ZuMFZHQ20wbGU0Z0E4 VTVTRW96bERzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx noQwDQYJKoZIhvcNAQELBQADggEBACuU2Dnwi1vC/h6xGdrIo9PPV9Fg8MPM+Pmf fHxryV0TqRI+hOHij686DVI1VU04J1LnDTYd9YlmI2bo5H18kKVQVvf3Eno8os9o +h0ZYEAWIj187MGR/knhAv4Jw0uuY+GFvqaXiVgzxBMXDbylrNmkz0NSmFkApoCc uAw3fYAWyRw9oDn8UMJf/qtEDLsTrTaO6We9QOCYiEFyhDtzO1md1apNyTN0h98l CY3f4kaVEl4QuJnp5gIYI/l86U5lqz7MhLBbEbZFuP3C6z23NQLV/JyzxUvmxBCZ DIhlCrZmYrC8uiDQlA6EYeEDlbddYgSKQSpUuq1s7rxgbjdNWK8= -----END CERTIFICATE-----Generated at Thu Apr 17 21:00:14 2025 by rpki-client