$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BcK01WTAwBHIpyNbCz7m2rX6X0Q.roa File: BcK01WTAwBHIpyNbCz7m2rX6X0Q.roa (raw, json) Hash identifier: cSllQxoZ4GrqbKM6LOvCN9wWK/JcVnMpNzkkiElDrCQ= Subject key identifier: 05:C2:B4:D5:64:C0:C0:11:C8:A7:23:5B:0B:3E:E6:DA:B5:FA:5F:44 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23F1 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BcK01WTAwBHIpyNbCz7m2rX6X0Q.roa Signing time: Mon 10 Feb 2025 14:18:06 +0000 ROA not before: Mon 10 Feb 2025 14:18:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 49.158.192.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9201 (0x23f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=05C2B4D564C0C011C8A7235B0B3EE6DAB5FA5F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:9c:2e:66:08:34:94:23:a5:f3:9c:cd:0f: 5d:15:99:61:61:59:91:a3:5d:89:ee:46:34:e7:c8: 7a:99:7c:c1:a7:28:81:88:98:56:06:21:30:24:e8: dc:7c:9b:35:ff:43:65:5c:85:d5:18:e9:8a:36:ef: da:93:03:dd:21:64:68:08:b2:81:f2:af:ed:a7:69: bf:63:95:e3:81:d3:e5:0f:01:3b:6d:7d:08:98:b2: 3d:5d:8f:e0:8c:0f:99:84:24:52:fb:4f:83:5c:5c: 2c:7d:30:11:18:ce:05:8f:3e:d6:4a:05:dc:8c:f5: f0:8c:4a:cd:3d:e8:09:65:a8:7c:6f:eb:f3:f9:1a: bb:f5:1a:5b:3e:0c:22:bb:4a:3e:bc:c6:2c:a4:f5: 1b:75:8c:a8:56:25:8c:c6:0b:af:26:33:20:d5:8f: ac:08:aa:c5:da:a9:d6:b2:ae:c1:f6:d0:9e:3c:99: 5e:44:ae:58:36:e6:6f:28:2a:94:eb:08:95:80:8f: 19:2a:be:29:5f:75:17:9e:91:65:c8:54:f7:5b:6d: 01:7c:13:9d:87:18:3c:1a:25:29:3a:f0:1d:2e:bd: 4c:7d:4b:c8:e6:2c:cb:e9:db:8d:1e:80:70:5e:94: 21:97:ca:90:1b:2d:24:7b:d2:5e:8b:27:4c:f7:c3: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C2:B4:D5:64:C0:C0:11:C8:A7:23:5B:0B:3E:E6:DA:B5:FA:5F:44 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BcK01WTAwBHIpyNbCz7m2rX6X0Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.192.0/20 Signature Algorithm: sha256WithRSAEncryption 9c:50:b0:0e:00:9c:f6:b4:4f:8b:46:c5:58:38:40:5c:45:9c: 58:c3:d8:71:66:0f:a1:88:5e:52:93:a1:ad:07:e6:c4:c8:bc: aa:8e:97:04:e5:96:4c:0f:39:e3:69:b2:83:e8:cc:46:4c:f3: d8:27:07:9e:03:80:8a:db:59:9f:92:43:fb:a0:54:2c:6e:27: f0:59:a7:0b:8d:6c:51:8b:b0:70:ee:a7:c0:42:96:94:5b:6e: c9:46:04:fe:ea:49:47:0e:18:a4:59:69:02:32:39:58:8f:87: 2d:f8:99:ea:7a:ad:87:99:74:dd:3a:d6:79:6a:50:36:fd:6e: 6c:57:8c:fd:aa:77:86:32:2f:ee:af:a7:6b:96:08:09:f5:93: 71:a1:1f:07:c5:1a:89:5d:dc:b6:b0:b2:ab:e9:2a:ef:4c:0c: 43:41:2b:a5:25:53:79:53:59:36:d2:57:db:8a:1e:d9:d0:ed: b6:5b:b5:27:fa:bf:a7:54:5f:83:39:49:45:52:cd:e3:6e:ad: 2d:9b:e7:6d:59:18:15:3c:77:a9:99:af:6d:87:96:32:55:27: ec:2e:14:b4:8e:33:db:50:0d:70:4a:9c:87:38:1b:cd:17:48: 59:5e:f9:5f:a2:39:ad:a8:98:5d:14:d4:66:57:d6:76:13:9e: c1:da:08:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1QzJCNEQ1NjRDMEMw MTFDOEE3MjM1QjBCM0VFNkRBQjVGQTVGNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnsJwuZgg0lCOl85zND10VmWFhWZGjXYnuRjTnyHqZfMGnKIGI mFYGITAk6Nx8mzX/Q2VchdUY6Yo279qTA90hZGgIsoHyr+2nab9jleOB0+UPATtt fQiYsj1dj+CMD5mEJFL7T4NcXCx9MBEYzgWPPtZKBdyM9fCMSs096AllqHxv6/P5 Grv1Gls+DCK7Sj68xiyk9Rt1jKhWJYzGC68mMyDVj6wIqsXaqdayrsH20J48mV5E rlg25m8oKpTrCJWAjxkqvilfdReekWXIVPdbbQF8E52HGDwaJSk68B0uvUx9S8jm LMvp240egHBelCGXypAbLSR70l6LJ0z3wwsJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBcK01WTAwBHIpyNbCz7m2rX6X0QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JjSzAxV1RBd0JISXB5TmJD ejdtMnJYNlgwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx nsAwDQYJKoZIhvcNAQELBQADggEBAJxQsA4AnPa0T4tGxVg4QFxFnFjD2HFmD6GI XlKToa0H5sTIvKqOlwTllkwPOeNpsoPozEZM89gnB54DgIrbWZ+SQ/ugVCxuJ/BZ pwuNbFGLsHDup8BClpRbbslGBP7qSUcOGKRZaQIyOViPhy34mep6rYeZdN061nlq UDb9bmxXjP2qd4YyL+6vp2uWCAn1k3GhHwfFGold3LawsqvpKu9MDENBK6UlU3lT WTbSV9uKHtnQ7bZbtSf6v6dUX4M5SUVSzeNurS2b521ZGBU8d6mZr22HljJVJ+wu FLSOM9tQDXBKnIc4G80XSFle+V+iOa2omF0U1GZX1nYTnsHaCO0= -----END CERTIFICATE-----Generated at Thu Apr 17 21:08:57 2025 by rpki-client