$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2lX_GW3GZJineutDVVbi3xSzwzM.roa File: 2lX_GW3GZJineutDVVbi3xSzwzM.roa (raw, json) Hash identifier: Dy+OpNuni7G3lA0JoBu78otRZT9oaX/KWq14UdgdcuA= Subject key identifier: DA:55:FF:19:6D:C6:64:98:A7:7A:EB:43:55:56:E2:DF:14:B3:C3:33 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24B4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2lX_GW3GZJineutDVVbi3xSzwzM.roa Signing time: Mon 10 Feb 2025 14:18:54 +0000 ROA not before: Mon 10 Feb 2025 14:18:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9396 (0x24b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DA55FF196DC66498A77AEB435556E2DF14B3C333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:20:08:91:1b:42:b3:4d:b8:5d:04:43:d2: 47:85:bb:94:43:2b:f2:7e:88:d9:a3:14:48:0c:bd: e9:c1:74:85:fd:db:be:d3:9f:5b:1f:0c:d4:b9:4d: c0:14:00:43:5b:52:d4:bb:1a:16:26:28:16:fa:4f: a4:47:af:12:4c:b7:74:8b:c2:f8:45:7d:02:be:f3: 02:7b:99:a5:cc:a9:ce:e9:28:e9:7d:9e:14:de:7f: 57:88:e8:a0:3f:b5:84:51:da:63:ab:b5:4f:df:77: 50:1f:03:8d:42:02:6d:cf:73:59:64:5e:d8:46:c6: a9:ef:cd:6f:58:41:b2:20:07:27:30:27:4f:c4:0b: 10:93:bb:7b:a7:52:3f:b3:ea:3f:5c:6b:77:ca:c3: d1:e9:6a:06:28:a0:42:b7:16:52:96:bc:d6:b5:1a: 05:2d:f1:e8:83:16:10:c6:92:61:75:d2:a3:70:d7: e2:0f:c1:73:2d:a3:f8:32:dc:26:16:6d:e4:22:11: 91:e0:16:93:28:34:3a:19:0e:e0:58:5a:ed:1e:f6: 01:ad:6a:50:f7:9a:59:e4:17:b2:26:50:60:ea:da: 4c:ab:6f:9b:5e:34:87:dc:99:0e:10:d5:5a:a4:38: a4:e3:ab:f2:2a:51:87:58:ed:fd:99:b1:cd:e7:05: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:55:FF:19:6D:C6:64:98:A7:7A:EB:43:55:56:E2:DF:14:B3:C3:33 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2lX_GW3GZJineutDVVbi3xSzwzM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.144.0/22 Signature Algorithm: sha256WithRSAEncryption 33:8c:29:be:a1:ad:e7:c3:27:50:08:e8:8b:8a:b0:0c:46:6e: fe:67:03:a2:fc:64:3f:38:03:d0:7f:ca:c2:f5:5e:fb:3f:34: 87:bb:d0:e3:69:62:06:52:34:80:15:80:96:2e:01:6a:57:16: a0:3e:1b:c7:13:cc:4c:57:b0:30:91:b1:74:c1:a9:7c:1d:e9: c5:43:8c:b9:be:6f:f4:23:97:f3:b4:88:9b:97:9f:08:1e:dd: 61:2b:bc:a1:50:2c:07:f2:09:0e:fc:df:91:29:7d:57:d8:71: 53:3c:e2:ff:15:cb:f9:e1:a1:c0:4a:cc:4d:c6:8a:44:dd:2f: e1:5c:24:da:5d:6f:cd:83:5b:75:4f:ca:ec:d7:57:17:61:76: c6:cf:5d:6a:e6:b6:43:00:51:5b:c9:2a:8d:53:b8:c3:99:09: b0:00:d8:45:3c:f9:82:00:24:bc:23:74:20:d3:19:c5:9b:23: 95:91:6d:fd:82:dc:4a:86:87:fb:08:5c:dc:7d:88:e2:0b:13: 37:a3:0d:96:c0:3c:d2:4c:30:75:89:6f:ec:5a:c3:81:af:1f: ae:cc:91:fb:de:f9:8f:23:2d:cc:a4:d7:5b:97:a5:80:52:41: 8a:55:fa:d2:91:f5:aa:6a:f4:0b:c4:9b:df:82:ec:09:9d:74: b8:97:a0:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBNTVGRjE5NkRDNjY0 OThBNzdBRUI0MzU1NTZFMkRGMTRCM0MzMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiMyAIkRtCs024XQRD0keFu5RDK/J+iNmjFEgMvenBdIX9277T n1sfDNS5TcAUAENbUtS7GhYmKBb6T6RHrxJMt3SLwvhFfQK+8wJ7maXMqc7pKOl9 nhTef1eI6KA/tYRR2mOrtU/fd1AfA41CAm3Pc1lkXthGxqnvzW9YQbIgBycwJ0/E CxCTu3unUj+z6j9ca3fKw9HpagYooEK3FlKWvNa1GgUt8eiDFhDGkmF10qNw1+IP wXMto/gy3CYWbeQiEZHgFpMoNDoZDuBYWu0e9gGtalD3mlnkF7ImUGDq2kyrb5te NIfcmQ4Q1VqkOKTjq/IqUYdY7f2Zsc3nBZJrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2lX/GW3GZJineutDVVbi3xSzwzMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJsWF9HVzNHWkppbmV1dERW VmJpM3hTend6TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n5AwDQYJKoZIhvcNAQELBQADggEBADOMKb6hrefDJ1AI6IuKsAxGbv5nA6L8ZD84 A9B/ysL1Xvs/NIe70ONpYgZSNIAVgJYuAWpXFqA+G8cTzExXsDCRsXTBqXwd6cVD jLm+b/Qjl/O0iJuXnwge3WErvKFQLAfyCQ7835EpfVfYcVM84v8Vy/nhocBKzE3G ikTdL+FcJNpdb82DW3VPyuzXVxdhdsbPXWrmtkMAUVvJKo1TuMOZCbAA2EU8+YIA JLwjdCDTGcWbI5WRbf2C3EqGh/sIXNx9iOILEzejDZbAPNJMMHWJb+xaw4GvH67M kfve+Y8jLcyk11uXpYBSQYpV+tKR9apq9AvEm9+C7AmddLiXoIA= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:18 2025 by rpki-client