$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87dczooJAGMJZZM6oHBan9vON0c.roa File: 87dczooJAGMJZZM6oHBan9vON0c.roa (raw, json) Hash identifier: LC1vYwvYCdrHh7T0uJ7fdMCqt8kKQBwuVLiXiZXrBf0= Subject key identifier: F3:B7:5C:CE:8A:09:00:63:09:65:93:3A:A0:70:5A:9F:DB:CE:37:47 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23CE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87dczooJAGMJZZM6oHBan9vON0c.roa Signing time: Mon 10 Feb 2025 14:17:56 +0000 ROA not before: Mon 10 Feb 2025 14:17:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9166 (0x23ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F3B75CCE8A0900630965933AA0705A9FDBCE3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:8e:1f:b5:70:14:c5:c2:2a:ad:b5:f5:be: cc:f5:7a:15:be:da:da:a0:26:60:77:a9:c0:10:7e: 2a:08:1c:1c:19:48:57:fe:ff:b6:47:20:8e:d2:09: 14:f8:7b:c9:fa:89:3e:58:6d:2e:b9:b8:67:73:15: 89:54:a9:4c:cc:30:fd:a8:54:3b:b9:aa:1e:e0:f7: 20:be:5b:c0:4c:f7:be:71:b6:e8:8b:73:51:a3:b7: 12:3a:39:1f:65:20:38:e9:0d:18:1c:d4:3b:1b:12: 22:33:c3:0e:97:c2:10:02:79:9e:f3:61:f2:cc:0d: a9:87:90:4e:b6:be:24:9c:2e:a1:68:70:b5:7d:93: 90:be:de:90:55:61:36:fc:2f:1d:74:7f:cc:be:98: 6f:48:c1:ea:95:b6:50:61:27:71:df:d2:8c:5e:bf: 11:98:0b:a4:db:9d:5e:0f:5a:8e:e0:50:a0:db:f1: 97:49:fd:2c:7d:7b:14:58:b4:28:72:f9:3c:4e:63: 05:f8:7d:94:09:84:b0:62:77:63:93:cb:2f:bf:14: b1:88:4c:24:d5:e3:ab:c8:e3:59:99:97:0a:49:fe: fd:38:78:f7:4e:d6:c3:4d:5a:b6:64:ac:83:25:c4: 70:ef:a9:4a:de:09:71:f1:03:00:b2:43:95:6c:31: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B7:5C:CE:8A:09:00:63:09:65:93:3A:A0:70:5A:9F:DB:CE:37:47 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87dczooJAGMJZZM6oHBan9vON0c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.32.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:d1:4a:d1:74:ad:a0:1d:2c:f4:51:f9:d8:ed:2f:1f:65:ff: e2:4e:95:69:5a:ec:37:f3:2b:40:11:ad:d2:9d:93:47:c5:09: 4e:60:b7:d2:d2:e3:06:9f:77:50:a4:46:be:14:44:80:29:24: 3e:5d:f2:b7:84:d4:19:b9:f3:3c:a9:ad:a0:41:56:49:a0:95: 19:41:da:9c:df:1c:b9:98:93:36:16:2d:12:cd:18:bf:ad:f7: f4:05:af:39:6a:12:10:df:dd:c7:b5:c7:84:93:6a:31:50:1b: 27:f0:ad:44:2a:bd:54:9e:6b:2e:50:33:be:d4:3a:2c:4a:c6: 86:44:02:4f:bd:83:73:a0:b4:a3:22:47:89:b8:48:c4:1f:6e: e2:61:be:c9:3c:6e:cb:e8:59:a3:f4:57:17:c5:70:68:9a:94: 86:5e:50:fc:30:a5:51:e2:c7:47:04:01:22:89:db:c7:ca:69: ad:70:14:cc:03:76:4c:27:97:e5:4c:c3:b0:d9:59:7c:2c:a8: a0:1e:e9:ad:b9:b7:59:19:4b:e3:79:17:0d:13:15:22:63:94: 22:40:1f:02:6b:f0:7b:2e:d1:ab:0a:f4:c1:cd:22:c2:ca:1e: a5:ca:7b:28:02:4c:d9:d8:f8:72:f7:60:b8:57:1f:a7:d4:aa: 95:4c:e8:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzQjc1Q0NFOEEwOTAw NjMwOTY1OTMzQUEwNzA1QTlGREJDRTM3NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4Ho4ftXAUxcIqrbX1vsz1ehW+2tqgJmB3qcAQfioIHBwZSFf+ /7ZHII7SCRT4e8n6iT5YbS65uGdzFYlUqUzMMP2oVDu5qh7g9yC+W8BM975xtuiL c1GjtxI6OR9lIDjpDRgc1DsbEiIzww6XwhACeZ7zYfLMDamHkE62viScLqFocLV9 k5C+3pBVYTb8Lx10f8y+mG9IweqVtlBhJ3Hf0oxevxGYC6TbnV4PWo7gUKDb8ZdJ /Sx9exRYtChy+TxOYwX4fZQJhLBid2OTyy+/FLGITCTV46vI41mZlwpJ/v04ePdO 1sNNWrZkrIMlxHDvqUreCXHxAwCyQ5VsMeiFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU87dczooJAGMJZZM6oHBan9vON0cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzg3ZGN6b29KQUdNSlpaTTZv SEJhbjl2T04wYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx niAwDQYJKoZIhvcNAQELBQADggEBAAvRStF0raAdLPRR+djtLx9l/+JOlWla7Dfz K0ARrdKdk0fFCU5gt9LS4wafd1CkRr4URIApJD5d8reE1Bm58zypraBBVkmglRlB 2pzfHLmYkzYWLRLNGL+t9/QFrzlqEhDf3ce1x4STajFQGyfwrUQqvVSeay5QM77U OixKxoZEAk+9g3OgtKMiR4m4SMQfbuJhvsk8bsvoWaP0VxfFcGialIZeUPwwpVHi x0cEASKJ28fKaa1wFMwDdkwnl+VMw7DZWXwsqKAe6a25t1kZS+N5Fw0TFSJjlCJA HwJr8Hsu0asK9MHNIsLKHqXKeygCTNnY+HL3YLhXH6fUqpVM6OM= -----END CERTIFICATE-----Generated at Fri Apr 18 16:43:05 2025 by rpki-client