$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BIovVKQjHqMIRL_9Vk0ZzOhJoPE.roa File: BIovVKQjHqMIRL_9Vk0ZzOhJoPE.roa (raw, json) Hash identifier: mpwiGrbx1GV3j+a6uBYWy0OT5zgRWP/Q0JeI2HWyBTM= Subject key identifier: 04:8A:2F:54:A4:23:1E:A3:08:44:BF:FD:56:4D:19:CC:E8:49:A0:F1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2467 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BIovVKQjHqMIRL_9Vk0ZzOhJoPE.roa Signing time: Mon 10 Feb 2025 14:18:35 +0000 ROA not before: Mon 10 Feb 2025 14:18:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9319 (0x2467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=048A2F54A4231EA30844BFFD564D19CCE849A0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:ee:26:e6:b3:af:12:97:13:e3:0f:f2:90: 2f:48:71:b1:01:61:5b:51:b9:37:22:64:12:dd:c4: 2d:2c:b5:fe:29:0e:b1:7e:59:27:2d:32:5c:58:b2: 78:27:1a:68:c1:93:92:9f:e0:52:6f:c0:e7:53:f2: 2f:40:84:fa:11:75:7c:57:9f:d8:81:0b:84:06:9d: f4:f8:80:d2:dd:4a:87:7f:21:86:c2:15:49:2a:55: ca:47:36:20:a8:71:3e:b8:d5:f8:6b:e8:38:7d:de: 0a:b3:79:14:26:f0:21:6c:54:6d:5c:17:c0:50:59: f0:e1:9d:e5:59:73:78:7a:1a:05:b6:a7:75:dc:d5: 0a:79:b9:f1:53:07:15:3e:7b:dc:a9:f4:f6:b1:1b: fc:8f:66:94:f5:ca:7c:73:5e:64:11:92:77:e4:7c: 16:c8:f4:3f:d5:2f:86:bd:ac:48:d1:c4:d1:2c:56: 66:22:e2:e2:8e:65:8b:76:05:d3:03:96:ed:7a:51: e7:5e:b6:35:e0:9c:53:42:54:43:e0:bc:25:c4:9f: 64:81:f6:d5:f7:94:0e:2a:2f:7e:df:86:33:5f:f2: e1:ad:61:1b:00:fc:c7:c9:7b:29:90:18:3e:14:3a: 62:08:92:91:f4:a8:de:cd:e6:2e:61:ba:9d:71:7e: 0d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:2F:54:A4:23:1E:A3:08:44:BF:FD:56:4D:19:CC:E8:49:A0:F1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BIovVKQjHqMIRL_9Vk0ZzOhJoPE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.64.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:7b:2d:cb:cc:91:24:b4:7d:82:11:88:f9:2d:56:2c:c6:45: 59:fc:09:1a:11:34:53:8c:99:c0:d7:7e:ad:81:78:d3:6d:57: ab:5a:66:9f:3e:77:fd:2e:04:88:a4:81:d8:e5:95:47:9b:da: 18:76:ce:33:b4:f1:4d:57:d9:97:77:42:ef:fd:15:f7:0b:b2: 3a:cd:7c:2e:d3:29:1e:fd:4b:2e:6b:e9:21:45:af:b3:d6:9d: 40:ca:83:0b:7f:f1:81:56:ad:ca:26:67:3f:13:9c:f3:d8:01: e3:c4:51:f0:c2:66:ac:6f:ce:80:b3:ad:5b:5c:14:ec:72:fc: 55:b2:31:70:cf:83:2f:a7:e8:28:64:14:d2:ad:63:d8:f0:72: 55:e1:cf:40:c3:c3:33:59:99:97:da:95:d2:00:e3:fc:27:09: eb:02:48:b6:b2:94:72:87:ac:57:21:42:9d:f3:d1:aa:44:45: 8a:2e:7a:e1:97:6c:e1:11:21:6d:fd:8e:3f:68:99:54:bb:5f: ed:03:c3:e5:28:ed:25:91:51:b5:31:e9:5f:6a:aa:98:6e:76: c7:77:c7:25:03:05:40:fd:25:fa:25:42:83:4d:76:b6:47:f1: 13:29:2d:36:98:96:07:f6:2c:f7:8d:bd:a1:25:d7:dc:95:6f: 56:34:ba:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0OEEyRjU0QTQyMzFF QTMwODQ0QkZGRDU2NEQxOUNDRTg0OUEwRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ2O4m5rOvEpcT4w/ykC9IcbEBYVtRuTciZBLdxC0stf4pDrF+ WSctMlxYsngnGmjBk5Kf4FJvwOdT8i9AhPoRdXxXn9iBC4QGnfT4gNLdSod/IYbC FUkqVcpHNiCocT641fhr6Dh93gqzeRQm8CFsVG1cF8BQWfDhneVZc3h6GgW2p3Xc 1Qp5ufFTBxU+e9yp9PaxG/yPZpT1ynxzXmQRknfkfBbI9D/VL4a9rEjRxNEsVmYi 4uKOZYt2BdMDlu16UedetjXgnFNCVEPgvCXEn2SB9tX3lA4qL37fhjNf8uGtYRsA /MfJeymQGD4UOmIIkpH0qN7N5i5hup1xfg1BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBIovVKQjHqMIRL/9Vk0ZzOhJoPEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JJb3ZWS1FqSHFNSVJMXzlW azBaek9oSm9QRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nkAwDQYJKoZIhvcNAQELBQADggEBAH97LcvMkSS0fYIRiPktVizGRVn8CRoRNFOM mcDXfq2BeNNtV6taZp8+d/0uBIikgdjllUeb2hh2zjO08U1X2Zd3Qu/9FfcLsjrN fC7TKR79Sy5r6SFFr7PWnUDKgwt/8YFWrcomZz8TnPPYAePEUfDCZqxvzoCzrVtc FOxy/FWyMXDPgy+n6ChkFNKtY9jwclXhz0DDwzNZmZfaldIA4/wnCesCSLaylHKH rFchQp3z0apERYoueuGXbOERIW39jj9omVS7X+0Dw+Uo7SWRUbUx6V9qqphudsd3 xyUDBUD9JfolQoNNdrZH8RMpLTaYlgf2LPeNvaEl19yVb1Y0uq8= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:12 2025 by rpki-client