$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6IBPLmt_iRXM5_0pqsNRHic1U3c.roa File: 6IBPLmt_iRXM5_0pqsNRHic1U3c.roa (raw, json) Hash identifier: EajVLyGjnPtVNkfM30nAoKiYqsDXVx1D7AKru9p6+1s= Subject key identifier: E8:80:4F:2E:6B:7F:89:15:CC:E7:FD:29:AA:C3:51:1E:27:35:53:77 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2368 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6IBPLmt_iRXM5_0pqsNRHic1U3c.roa Signing time: Mon 10 Feb 2025 14:17:34 +0000 ROA not before: Mon 10 Feb 2025 14:17:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9064 (0x2368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E8804F2E6B7F8915CCE7FD29AAC3511E27355377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:44:1a:dd:8a:78:21:16:57:50:d9:cd:ef: 25:75:ed:49:fc:1d:b2:98:ab:0f:59:28:de:85:8b: a6:62:96:96:41:d8:1c:8a:59:8f:0e:fc:6c:6a:6b: cf:58:3a:90:9b:c4:77:35:c3:ea:5a:c3:cc:94:95: 7d:2b:42:2c:9b:a7:81:5c:c4:e0:c8:d9:5c:90:7d: 55:4e:60:b7:81:06:6e:e9:46:50:58:74:f4:94:13: d3:ed:4a:72:75:21:2b:93:40:81:23:97:0c:fc:49: 33:12:00:f6:c4:77:cf:f5:62:37:73:ed:18:fb:fd: 9c:2a:fc:51:00:52:73:4e:9f:03:a0:2f:90:74:a8: db:0f:31:0f:44:18:f9:9c:0a:08:2d:c9:de:90:39: a2:6f:49:83:82:00:ae:61:ee:6c:ea:b4:d9:59:00: 84:75:bd:0c:cc:1f:c5:7d:ae:55:37:6b:51:dc:2f: 52:39:a2:4b:ef:34:7d:45:aa:8c:13:ab:79:e6:9a: 6d:2d:0e:d0:57:e2:9f:c0:c4:f7:12:44:9b:c0:82: 0e:6c:51:b4:1c:b4:05:ef:8a:5f:e8:e8:63:50:11: 31:50:df:96:d6:62:7b:2f:3b:bb:a8:7c:03:58:5f: 5b:e8:c0:c3:bf:bc:22:6f:fe:c8:59:11:52:31:dc: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:80:4F:2E:6B:7F:89:15:CC:E7:FD:29:AA:C3:51:1E:27:35:53:77 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6IBPLmt_iRXM5_0pqsNRHic1U3c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.168.0/21 Signature Algorithm: sha256WithRSAEncryption 40:82:de:0a:61:5e:33:2c:93:04:ac:73:a8:73:ca:1a:3b:ce: fa:92:24:a5:4c:62:53:69:16:bb:e3:a4:2f:39:f1:5f:66:02: fd:64:9c:89:48:48:96:4b:2e:f1:31:92:63:e8:94:03:9a:57: 21:8f:05:d8:19:f0:10:84:01:f2:1b:58:f4:c3:59:e4:b0:51: 4f:81:61:78:50:73:66:8d:e0:c2:c9:eb:fb:6a:fe:0d:d2:a4: 96:6a:86:1b:a3:42:a4:b4:4c:b2:0c:e7:a8:56:8b:d1:c3:62: cd:e0:5a:4e:a8:c0:e4:c8:c9:a9:5a:64:67:da:c1:79:3c:70: 93:73:88:11:81:c7:ac:8e:69:a9:c8:c9:31:c4:36:62:07:c2: 40:68:40:6c:51:ed:58:55:66:26:58:1a:ac:c8:0d:bf:39:1d: 18:15:68:11:0e:08:d9:a9:41:7a:25:e2:40:61:dd:48:08:07: 00:2f:eb:95:f3:87:91:ec:6c:3d:fc:c9:7e:b9:c7:7a:ab:8a: d2:19:0f:80:f7:bc:50:1a:01:33:4a:20:d0:20:bd:fd:a0:65: 0e:8d:a5:c9:b7:44:c4:e9:c4:6e:de:96:d2:0a:8b:22:ef:d9: 49:02:88:b7:54:fd:12:9a:b8:71:90:1e:4f:a3:25:db:3e:07: 2a:10:7b:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4ODA0RjJFNkI3Rjg5 MTVDQ0U3RkQyOUFBQzM1MTFFMjczNTUzNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDILEQa3Yp4IRZXUNnN7yV17Un8HbKYqw9ZKN6Fi6ZilpZB2ByK WY8O/Gxqa89YOpCbxHc1w+paw8yUlX0rQiybp4FcxODI2VyQfVVOYLeBBm7pRlBY dPSUE9PtSnJ1ISuTQIEjlwz8STMSAPbEd8/1Yjdz7Rj7/Zwq/FEAUnNOnwOgL5B0 qNsPMQ9EGPmcCggtyd6QOaJvSYOCAK5h7mzqtNlZAIR1vQzMH8V9rlU3a1HcL1I5 okvvNH1FqowTq3nmmm0tDtBX4p/AxPcSRJvAgg5sUbQctAXvil/o6GNQETFQ35bW YnsvO7uofANYX1vowMO/vCJv/shZEVIx3A3hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6IBPLmt/iRXM5/0pqsNRHic1U3cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzZJQlBMbXRfaVJYTTVfMHBx c05SSGljMVUzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n6gwDQYJKoZIhvcNAQELBQADggEBAECC3gphXjMskwSsc6hzyho7zvqSJKVMYlNp FrvjpC858V9mAv1knIlISJZLLvExkmPolAOaVyGPBdgZ8BCEAfIbWPTDWeSwUU+B YXhQc2aN4MLJ6/tq/g3SpJZqhhujQqS0TLIM56hWi9HDYs3gWk6owOTIyalaZGfa wXk8cJNziBGBx6yOaanIyTHENmIHwkBoQGxR7VhVZiZYGqzIDb85HRgVaBEOCNmp QXol4kBh3UgIBwAv65Xzh5HsbD38yX65x3qritIZD4D3vFAaATNKINAgvf2gZQ6N pcm3RMTpxG7eltIKiyLv2UkCiLdU/RKauHGQHk+jJds+ByoQewQ= -----END CERTIFICATE-----Generated at Fri Apr 18 16:42:51 2025 by rpki-client