$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EMZFBP41s6wZmdWLocaITaqSe2Q.roa File: EMZFBP41s6wZmdWLocaITaqSe2Q.roa (raw, json) Hash identifier: jMdxj8GbvqnhMFawohKb+nLXvb7GZZmgv6CpbfafgAI= Subject key identifier: 10:C6:45:04:FE:35:B3:AC:19:99:D5:8B:A1:C6:88:4D:AA:92:7B:64 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2413 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EMZFBP41s6wZmdWLocaITaqSe2Q.roa Signing time: Mon 10 Feb 2025 14:18:14 +0000 ROA not before: Mon 10 Feb 2025 14:18:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9235 (0x2413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=10C64504FE35B3AC1999D58BA1C6884DAA927B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ca:96:33:7f:97:83:67:4f:e8:0a:5f:8f:75: 31:8a:2c:f0:5d:8b:4a:47:9f:e6:e6:c0:c4:78:9f: 56:e0:b9:19:4f:8c:ef:89:4d:98:9c:3c:01:3b:28: 53:a7:54:97:f2:33:c4:51:d8:66:bf:b9:09:65:80: b6:82:15:74:53:c5:b1:72:11:71:de:f0:bf:c9:13: 32:44:2b:bb:13:47:b3:38:2b:95:9b:db:00:8d:66: 99:0f:51:d4:e0:4a:3a:d6:56:4d:93:d2:13:3e:81: e2:8a:b9:bd:65:f9:da:3f:6f:79:80:90:15:2c:fc: a7:bf:85:01:5a:3c:82:f1:f9:ea:40:1a:b9:aa:83: a5:24:71:6f:c0:4b:a7:04:b8:11:c7:06:3f:74:82: 4d:3c:1c:70:81:37:27:84:51:57:6d:a1:71:5d:d9: 8e:d2:33:c9:9a:b8:fa:86:c3:68:51:b3:4d:e9:33: 0a:fb:c2:55:3e:20:90:6a:1c:bb:c5:df:27:33:04: 92:2a:f8:91:d4:6b:10:23:98:0c:80:ed:d4:b6:2f: 09:16:73:11:c9:7d:b2:dc:59:f2:da:74:32:d6:b6: 54:bf:1e:92:2f:c0:dc:b5:fc:70:72:69:f2:67:25: 92:28:b1:c1:d4:2e:f4:f7:de:ce:14:62:24:8b:27: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C6:45:04:FE:35:B3:AC:19:99:D5:8B:A1:C6:88:4D:AA:92:7B:64 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EMZFBP41s6wZmdWLocaITaqSe2Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.152.0/21 Signature Algorithm: sha256WithRSAEncryption 22:fa:bf:ae:ca:74:94:79:81:47:71:dd:ae:f6:3c:3e:6d:33: 55:bc:93:df:15:15:5b:bc:8d:c3:d9:03:23:69:3a:4b:be:a4: 39:d2:0c:51:b5:fa:b9:17:36:97:9f:ae:5d:a8:17:7a:06:c1: b4:56:1e:7a:03:4d:46:a2:63:57:92:88:cc:01:ee:3c:ac:17: d0:ec:d7:db:15:6b:3b:17:2d:44:7b:f9:fd:d0:97:bb:af:ed: b7:cf:2c:c4:24:6a:5c:49:47:7c:2e:2e:70:12:72:16:17:e1: 78:1e:cb:59:27:c3:91:d5:4d:14:fb:c9:d7:5c:48:52:31:d3: 2f:9f:26:50:3c:44:43:72:a1:0f:60:cc:04:dc:de:d5:78:fc: 54:44:8b:d9:43:f3:d6:ff:19:e3:53:ad:9c:cc:83:09:49:19: 1d:4f:11:99:bf:98:96:07:0e:4e:5e:83:eb:14:04:ec:2f:9a: 12:0f:4e:26:ca:4f:3a:c2:4d:cf:62:5b:93:2a:a3:a0:da:45: 18:d6:45:1c:c4:94:67:9b:1e:a9:ce:bd:b2:a6:e0:4b:d3:7f: 3d:c8:5c:56:45:d1:b9:88:ce:e3:25:ad:96:a5:64:91:89:2e: e1:f7:29:c0:36:8c:9d:38:36:d4:76:6e:3a:46:6c:ce:40:6e: 9c:e8:b5:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJBMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEwQzY0NTA0RkUzNUIz QUMxOTk5RDU4QkExQzY4ODREQUE5MjdCNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuypYzf5eDZ0/oCl+PdTGKLPBdi0pHn+bmwMR4n1bguRlPjO+J TZicPAE7KFOnVJfyM8RR2Ga/uQllgLaCFXRTxbFyEXHe8L/JEzJEK7sTR7M4K5Wb 2wCNZpkPUdTgSjrWVk2T0hM+geKKub1l+do/b3mAkBUs/Ke/hQFaPILx+epAGrmq g6UkcW/AS6cEuBHHBj90gk08HHCBNyeEUVdtoXFd2Y7SM8mauPqGw2hRs03pMwr7 wlU+IJBqHLvF3yczBJIq+JHUaxAjmAyA7dS2LwkWcxHJfbLcWfLadDLWtlS/HpIv wNy1/HByafJnJZIoscHULvT33s4UYiSLJ3C1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEMZFBP41s6wZmdWLocaITaqSe2QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VNWkZCUDQxczZ3Wm1kV0xv Y2FJVGFxU2UyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n5gwDQYJKoZIhvcNAQELBQADggEBACL6v67KdJR5gUdx3a72PD5tM1W8k98VFVu8 jcPZAyNpOku+pDnSDFG1+rkXNpefrl2oF3oGwbRWHnoDTUaiY1eSiMwB7jysF9Ds 19sVazsXLUR7+f3Ql7uv7bfPLMQkalxJR3wuLnASchYX4Xgey1knw5HVTRT7yddc SFIx0y+fJlA8RENyoQ9gzATc3tV4/FREi9lD89b/GeNTrZzMgwlJGR1PEZm/mJYH Dk5eg+sUBOwvmhIPTibKTzrCTc9iW5Mqo6DaRRjWRRzElGebHqnOvbKm4EvTfz3I XFZF0bmIzuMlrZalZJGJLuH3KcA2jJ04NtR2bjpGbM5AbpzotY0= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:39 2025 by rpki-client