$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FWvvsfcpz5lVN5s_D72tBsc5pDE.roa File: FWvvsfcpz5lVN5s_D72tBsc5pDE.roa (raw, json) Hash identifier: k3sgaXkiXmbirdyEfkMw9pgdlwGFN638yG1ROQkNz10= Subject key identifier: 15:6B:EF:B1:F7:29:CF:99:55:37:9B:3F:0F:BD:AD:06:C7:39:A4:31 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2487 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FWvvsfcpz5lVN5s_D72tBsc5pDE.roa Signing time: Mon 10 Feb 2025 14:18:44 +0000 ROA not before: Mon 10 Feb 2025 14:18:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9351 (0x2487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=156BEFB1F729CF9955379B3F0FBDAD06C739A431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:e2:6f:72:6b:e5:b9:05:d2:bd:7f:16:bf: f3:e8:c2:12:7e:69:c4:bc:22:a8:78:7f:d0:53:53: 76:0f:b5:4f:2a:0e:18:d4:9d:6b:7a:43:a0:c4:a9: 4d:5b:f4:3e:8e:bc:61:33:6e:0b:48:28:c1:10:36: fe:d7:0b:56:29:76:bc:d8:43:8a:c8:65:ab:5f:d0: ef:70:1d:44:43:1a:52:17:3c:87:8f:8e:9b:aa:cf: f8:78:86:35:70:8f:ab:ca:ce:4d:1f:2d:a6:6e:5a: 56:7d:26:03:15:fd:99:47:b1:b5:28:fa:38:d0:75: c7:b4:09:dc:d6:d6:7d:98:9f:6f:0d:5e:34:1c:56: c6:98:62:66:05:32:f2:6a:13:44:4b:77:40:ad:fe: 9e:c0:4b:28:69:19:92:c0:d7:26:09:a7:69:d6:4e: fa:12:45:d0:db:50:8d:13:e1:f2:a3:94:eb:51:3f: f2:cd:0a:fd:2e:15:82:8a:4f:9f:0e:97:59:54:9f: fb:bb:ad:b8:31:78:0a:5a:51:6b:1d:88:a4:6c:ea: 3d:50:38:fd:5d:93:25:25:dc:15:d9:60:f3:e0:42: a9:82:aa:d1:e7:29:6f:a8:d6:88:42:78:c4:a9:c3: 9e:a1:90:a8:2d:ea:66:80:ee:90:6c:6e:c2:1b:ac: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6B:EF:B1:F7:29:CF:99:55:37:9B:3F:0F:BD:AD:06:C7:39:A4:31 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FWvvsfcpz5lVN5s_D72tBsc5pDE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.96.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:67:07:91:8a:af:7f:38:f1:1e:0e:f4:f6:5a:07:fb:12:08: 4e:f3:1f:7a:71:d5:fb:1c:d5:ab:44:71:dd:48:09:af:fa:11: b7:38:4b:bf:49:63:1c:af:22:8e:bc:8c:f0:10:69:d7:c9:be: 1a:39:c0:32:a9:5e:d3:ae:04:06:eb:a3:21:be:04:b5:58:88: 4c:b6:8e:bd:8d:29:10:3f:9f:44:7a:8a:50:7b:56:c1:84:7d: 34:c4:f0:67:b3:43:4c:de:f7:f5:5f:90:87:1b:b2:01:47:ff: 71:45:dc:46:10:1e:6a:35:7a:dd:b3:39:4a:5d:9b:fe:68:4b: d3:dc:2a:be:9b:c8:55:38:72:2d:a6:07:ad:6b:9e:1f:c6:40: 4a:b3:29:62:00:53:5d:57:4d:51:0f:1a:40:ed:fd:b8:6e:27: 35:c4:14:98:1f:3a:86:2d:0a:20:4a:c3:45:47:b2:47:b9:8d: 2e:fe:df:a6:4f:4d:d4:6f:4e:61:2d:98:6b:5a:53:b9:8a:f8: c1:8c:04:92:65:07:8f:db:6a:19:74:b1:c4:74:c5:b3:96:8d: f0:ec:e5:2f:09:1d:a6:1f:06:84:bd:ed:04:f7:2a:5f:5c:bf: 8d:7f:c0:f2:d1:27:2e:b5:5a:56:f3:0b:af:7b:d9:2e:08:c3: ef:ef:7a:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE1NkJFRkIxRjcyOUNG OTk1NTM3OUIzRjBGQkRBRDA2QzczOUE0MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIsuJvcmvluQXSvX8Wv/PowhJ+acS8Iqh4f9BTU3YPtU8qDhjU nWt6Q6DEqU1b9D6OvGEzbgtIKMEQNv7XC1YpdrzYQ4rIZatf0O9wHURDGlIXPIeP jpuqz/h4hjVwj6vKzk0fLaZuWlZ9JgMV/ZlHsbUo+jjQdce0CdzW1n2Yn28NXjQc VsaYYmYFMvJqE0RLd0Ct/p7ASyhpGZLA1yYJp2nWTvoSRdDbUI0T4fKjlOtRP/LN Cv0uFYKKT58Ol1lUn/u7rbgxeApaUWsdiKRs6j1QOP1dkyUl3BXZYPPgQqmCqtHn KW+o1ohCeMSpw56hkKgt6maA7pBsbsIbrHgdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFWvvsfcpz5lVN5s/D72tBsc5pDEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZXdnZzZmNwejVsVk41c19E NzJ0QnNjNXBERS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nmAwDQYJKoZIhvcNAQELBQADggEBAJ1nB5GKr3848R4O9PZaB/sSCE7zH3px1fsc 1atEcd1ICa/6Ebc4S79JYxyvIo68jPAQadfJvho5wDKpXtOuBAbroyG+BLVYiEy2 jr2NKRA/n0R6ilB7VsGEfTTE8GezQ0ze9/VfkIcbsgFH/3FF3EYQHmo1et2zOUpd m/5oS9PcKr6byFU4ci2mB61rnh/GQEqzKWIAU11XTVEPGkDt/bhuJzXEFJgfOoYt CiBKw0VHske5jS7+36ZPTdRvTmEtmGtaU7mK+MGMBJJlB4/bahl0scR0xbOWjfDs 5S8JHaYfBoS97QT3Kl9cv41/wPLRJy61WlbzC6972S4Iw+/ver4= -----END CERTIFICATE-----Generated at Thu Apr 17 21:07:53 2025 by rpki-client