$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AjEDX07GlwkzD3AtZszVoCmFCtk.roa File: AjEDX07GlwkzD3AtZszVoCmFCtk.roa (raw, json) Hash identifier: vYYLp4+A+UxLRC/x4tZ7eyxYwCJrewy8607Zm/+mXr4= Subject key identifier: 02:31:03:5F:4E:C6:97:09:33:0F:70:2D:66:CC:D5:A0:29:85:0A:D9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2482 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AjEDX07GlwkzD3AtZszVoCmFCtk.roa Signing time: Mon 10 Feb 2025 14:18:43 +0000 ROA not before: Mon 10 Feb 2025 14:18:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9346 (0x2482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0231035F4EC69709330F702D66CCD5A029850AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:8e:da:2b:2f:a0:7f:ac:2f:17:d6:f0:52: 16:91:47:3d:4b:35:3c:0f:2e:1b:42:67:55:31:93: 57:1e:b8:fb:b7:d9:23:b6:f0:2c:d9:5f:86:92:6c: fb:b1:17:44:9d:08:d6:55:2c:98:5b:a8:f6:9c:8d: c9:14:3c:32:ac:32:0c:b6:7c:76:4a:aa:f6:38:7d: 15:f2:a4:fa:ff:90:94:b8:04:17:e5:8e:ad:bf:7f: 8c:f5:52:42:fb:d0:df:d6:f7:44:fc:48:76:79:97: 1d:de:dc:d3:74:13:eb:3c:97:2b:a1:74:bb:82:54: 0e:39:2e:b1:0b:44:0a:8f:59:f9:a5:b7:fd:4a:0e: 7f:be:47:6b:01:20:57:70:34:9f:3b:9a:89:e2:d0: e1:66:c0:cf:24:51:13:a9:e8:93:cb:8d:18:d8:14: cc:00:d7:2d:d3:c9:77:c8:58:b6:fe:a3:be:77:6a: ae:bf:67:a1:56:f1:00:8e:ec:a3:48:0b:4e:e3:15: db:98:25:e1:25:79:f4:b8:33:fa:99:a0:d9:e3:c7: 51:1e:0a:d1:d0:07:88:1d:cc:cc:e9:e8:e4:7e:ad: 1e:68:09:3d:8e:a3:f9:3f:30:39:c1:5f:55:f7:5a: 5f:c8:6f:e7:38:21:95:e4:b9:be:a8:82:fa:34:d6: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:31:03:5F:4E:C6:97:09:33:0F:70:2D:66:CC:D5:A0:29:85:0A:D9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AjEDX07GlwkzD3AtZszVoCmFCtk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.57.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:17:55:7d:e5:eb:53:22:63:a2:86:71:79:c8:13:ce:42:eb: 68:ae:b1:09:93:dc:44:e7:07:69:cd:df:d1:09:b5:ed:bd:0d: 45:74:3b:a1:de:fb:78:92:ac:3a:2f:51:4b:dc:ec:4d:65:0f: 7f:86:3d:17:fc:87:62:c4:eb:97:d0:39:3f:8d:ca:11:4c:a0: 7c:94:b4:27:2f:32:7d:26:a2:c0:18:6b:87:6d:65:47:fd:2f: 3c:e6:4e:e1:e6:c2:b5:bd:70:79:9e:47:c8:06:e4:df:25:32: 6a:29:7e:bd:c2:f4:c6:f4:ec:52:13:15:8c:d2:a5:a3:13:f5: 4d:d6:f2:1f:2c:45:e7:b3:db:bc:63:7e:72:6d:89:fe:99:7c: 70:c2:bc:e5:20:82:f2:7a:c7:2b:7d:18:17:b1:bf:4d:53:9d: b4:90:84:d6:5c:f4:46:f6:21:c3:34:b7:f7:26:3c:b6:ac:09: ab:54:a0:51:3f:5a:1d:42:be:71:d8:3e:f0:07:df:c8:e0:74: 64:27:bd:6f:e1:19:3d:65:48:26:41:c2:38:12:28:86:38:4b: 68:38:f3:88:9b:87:73:80:15:48:cc:01:c0:c8:54:a1:4f:53: 05:99:60:10:69:9e:22:9b:9f:e9:a4:ff:8e:c0:20:86:0e:41: e0:4e:02:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyMzEwMzVGNEVDNjk3 MDkzMzBGNzAyRDY2Q0NENUEwMjk4NTBBRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQk47aKy+gf6wvF9bwUhaRRz1LNTwPLhtCZ1Uxk1ceuPu32SO2 8CzZX4aSbPuxF0SdCNZVLJhbqPacjckUPDKsMgy2fHZKqvY4fRXypPr/kJS4BBfl jq2/f4z1UkL70N/W90T8SHZ5lx3e3NN0E+s8lyuhdLuCVA45LrELRAqPWfmlt/1K Dn++R2sBIFdwNJ87moni0OFmwM8kUROp6JPLjRjYFMwA1y3TyXfIWLb+o753aq6/ Z6FW8QCO7KNIC07jFduYJeElefS4M/qZoNnjx1EeCtHQB4gdzMzp6OR+rR5oCT2O o/k/MDnBX1X3Wl/Ib+c4IZXkub6ogvo01vCnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAjEDX07GlwkzD3AtZszVoCmFCtkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FqRURYMDdHbHdrekQzQXRa c3pWb0NtRkN0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx njkwDQYJKoZIhvcNAQELBQADggEBAGsXVX3l61MiY6KGcXnIE85C62iusQmT3ETn B2nN39EJte29DUV0O6He+3iSrDovUUvc7E1lD3+GPRf8h2LE65fQOT+NyhFMoHyU tCcvMn0mosAYa4dtZUf9LzzmTuHmwrW9cHmeR8gG5N8lMmopfr3C9Mb07FITFYzS paMT9U3W8h8sReez27xjfnJtif6ZfHDCvOUggvJ6xyt9GBexv01TnbSQhNZc9Eb2 IcM0t/cmPLasCatUoFE/Wh1CvnHYPvAH38jgdGQnvW/hGT1lSCZBwjgSKIY4S2g4 84ibh3OAFUjMAcDIVKFPUwWZYBBpniKbn+mk/47AIIYOQeBOAvs= -----END CERTIFICATE-----Generated at Fri Apr 18 16:43:03 2025 by rpki-client