$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B1i-RHvhj8mb9ktIdLf4a0l6sic.roa File: B1i-RHvhj8mb9ktIdLf4a0l6sic.roa (raw, json) Hash identifier: R1YVegeuJjzTohGamKFVF/b8OhuAjvcT836cdaS9fUw= Subject key identifier: 07:58:BE:44:7B:E1:8F:C9:9B:F6:4B:48:74:B7:F8:6B:49:7A:B2:27 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23A0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B1i-RHvhj8mb9ktIdLf4a0l6sic.roa Signing time: Mon 10 Feb 2025 14:17:45 +0000 ROA not before: Mon 10 Feb 2025 14:17:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9120 (0x23a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0758BE447BE18FC99BF64B4874B7F86B497AB227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:d1:4e:a1:48:c6:4e:13:b8:3c:1f:a2:5b: c6:80:68:38:d7:d4:ba:08:13:e0:6b:4a:ae:45:54: 2f:1f:00:54:fc:17:a8:b0:c2:4b:04:3f:af:2d:6e: 88:2e:f4:ea:dd:36:8f:f1:ad:fa:87:3e:52:bb:82: 76:37:c7:31:16:38:b1:81:e8:6d:54:bc:5c:f4:09: c0:b7:9a:81:9e:85:d1:c1:63:e5:58:86:1f:c3:71: 3d:58:6d:4d:51:99:89:06:75:fd:97:f0:42:83:cd: 8c:b1:fe:47:24:5a:05:a6:d8:23:6a:58:93:33:35: 42:f2:ca:aa:95:e3:e2:24:0b:5a:08:75:12:ad:55: 3a:88:5e:81:27:c9:9c:66:d8:da:90:a8:10:f5:4b: 5f:07:36:b2:08:11:1a:b9:79:87:af:ca:d4:bd:85: 44:28:23:ab:7b:1c:53:4a:22:3e:b8:de:41:3e:99: 93:42:8e:ed:eb:6e:40:7c:89:fd:dd:18:81:ed:a9: ad:fb:84:0e:d1:04:08:df:fa:9a:fb:ab:eb:60:a4: c6:d1:48:ff:8d:ee:26:08:bb:7b:bb:4d:8d:c7:57: 06:7e:f8:cd:d3:99:a9:bb:a5:18:39:31:8b:e8:5a: 5d:3a:03:32:fe:e8:d7:7b:a9:fd:8a:f2:dc:0f:ac: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:58:BE:44:7B:E1:8F:C9:9B:F6:4B:48:74:B7:F8:6B:49:7A:B2:27 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B1i-RHvhj8mb9ktIdLf4a0l6sic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.124.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:cf:bd:6c:b3:ac:cc:4b:43:49:e3:31:a0:35:e4:17:19:3c: 3c:59:fb:de:83:b4:c3:47:03:45:4a:bd:b0:5f:2a:f8:b5:d7: 67:41:a5:6b:dd:55:2d:25:a0:cf:89:d4:0c:28:f7:90:ff:56: 3d:6c:3e:e0:fe:6e:f0:2b:c4:91:de:1c:ed:bd:38:3c:a5:a1: 74:9e:7c:ee:7c:8d:5b:5b:ae:8b:6a:46:da:10:c7:18:db:b4: f7:9c:19:86:bd:62:27:28:57:32:50:bd:89:c1:d4:47:d8:29: 10:3c:2e:d5:b2:7a:c1:79:9e:18:3c:c7:cb:e6:bb:21:4b:e7: 0a:a6:f0:89:e3:a9:6e:2a:a6:b8:ae:32:48:61:94:7d:89:23: bb:66:db:f7:c1:05:e5:a6:33:b0:89:bc:27:0a:1a:b5:0b:61: 34:73:4c:00:ca:b9:47:28:9a:22:30:cc:48:28:2c:06:c9:dc: dc:b9:25:88:ff:e6:94:5f:8c:28:ce:ed:ca:d3:c1:a5:ba:49: d5:80:e1:c5:ef:8e:52:19:c3:84:a2:8c:95:3d:f2:2a:8b:ea: 62:8d:c4:47:2b:8e:8e:dc:41:00:7a:cd:94:0f:cd:d5:1c:76: b7:0c:9d:a9:18:5f:b4:0c:f0:5b:2c:37:8a:bc:4d:e3:19:e1: 08:77:a8:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3NThCRTQ0N0JFMThG Qzk5QkY2NEI0ODc0QjdGODZCNDk3QUIyMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp9NFOoUjGThO4PB+iW8aAaDjX1LoIE+BrSq5FVC8fAFT8F6iw wksEP68tbogu9OrdNo/xrfqHPlK7gnY3xzEWOLGB6G1UvFz0CcC3moGehdHBY+VY hh/DcT1YbU1RmYkGdf2X8EKDzYyx/kckWgWm2CNqWJMzNULyyqqV4+IkC1oIdRKt VTqIXoEnyZxm2NqQqBD1S18HNrIIERq5eYevytS9hUQoI6t7HFNKIj643kE+mZNC ju3rbkB8if3dGIHtqa37hA7RBAjf+pr7q+tgpMbRSP+N7iYIu3u7TY3HVwZ++M3T mam7pRg5MYvoWl06AzL+6Nd7qf2K8twPrLSvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB1i+RHvhj8mb9ktIdLf4a0l6sicwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0IxaS1SSHZoajhtYjlrdElk TGY0YTBsNnNpYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nnwwDQYJKoZIhvcNAQELBQADggEBAEvPvWyzrMxLQ0njMaA15BcZPDxZ+96DtMNH A0VKvbBfKvi112dBpWvdVS0loM+J1Awo95D/Vj1sPuD+bvArxJHeHO29ODyloXSe fO58jVtbrotqRtoQxxjbtPecGYa9YicoVzJQvYnB1EfYKRA8LtWyesF5nhg8x8vm uyFL5wqm8InjqW4qpriuMkhhlH2JI7tm2/fBBeWmM7CJvCcKGrULYTRzTADKuUco miIwzEgoLAbJ3Ny5JYj/5pRfjCjO7crTwaW6SdWA4cXvjlIZw4SijJU98iqL6mKN xEcrjo7cQQB6zZQPzdUcdrcMnakYX7QM8FssN4q8TeMZ4Qh3qJA= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:45 2025 by rpki-client