$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IBo_2yeQkSo8BTEBtgG90tAufSA.roa File: IBo_2yeQkSo8BTEBtgG90tAufSA.roa (raw, json) Hash identifier: PCnu6AV8HK+XRCfKWIe7hoSzVGcVRbq+WLb34tLyJYU= Subject key identifier: 20:1A:3F:DB:27:90:91:2A:3C:05:31:01:B6:01:BD:D2:D0:2E:7D:20 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23F3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IBo_2yeQkSo8BTEBtgG90tAufSA.roa Signing time: Mon 10 Feb 2025 14:18:07 +0000 ROA not before: Mon 10 Feb 2025 14:18:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9203 (0x23f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=201A3FDB2790912A3C053101B601BDD2D02E7D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:7b:7f:82:ed:3c:c7:0b:b5:ed:4d:df:09: 1e:da:32:31:9f:38:5e:61:c7:43:52:f1:2f:6b:9e: 0a:43:a9:4c:40:be:37:70:a2:45:32:03:a3:83:8c: e1:ea:ec:91:82:47:3e:34:31:dd:39:07:58:c9:0f: a8:24:77:46:fe:d9:6e:57:fc:3d:3a:63:5b:c5:8c: d5:53:57:27:70:d4:7f:f3:a4:6b:2a:fa:f2:c4:03: f8:fb:a3:66:aa:72:86:fa:15:e7:b1:06:01:0b:e2: 3b:27:a1:d9:98:69:9f:26:1d:81:39:5f:a0:e3:79: e4:ce:d7:f4:46:52:ad:c0:02:ee:20:46:14:29:93: 49:dd:ae:b8:64:c0:9a:e1:f1:ea:f7:40:1d:1d:78: 75:7d:4f:6b:de:f5:74:c0:cc:09:f0:2f:e2:4f:2e: c8:dc:66:14:c3:4e:51:7d:7b:85:8b:82:cd:06:2e: 57:03:d1:91:67:f0:6f:9d:ca:f3:27:fa:0f:d0:3b: 55:d5:13:5f:18:e4:28:e5:42:9b:71:db:13:ff:2e: 28:8b:6b:d5:1c:27:9b:22:86:42:0b:20:5f:2b:c8: 21:6d:80:8c:bd:2c:d9:71:75:de:91:e5:79:96:13: 16:3b:fc:f5:20:cc:9d:6a:f4:f5:ae:e4:cb:c5:e2: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1A:3F:DB:27:90:91:2A:3C:05:31:01:B6:01:BD:D2:D0:2E:7D:20 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IBo_2yeQkSo8BTEBtgG90tAufSA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.48.0/20 Signature Algorithm: sha256WithRSAEncryption 26:48:ab:6f:7a:93:b5:0f:af:98:54:10:29:28:d7:d5:fe:fc: e7:26:d9:b2:5e:fd:cb:fc:c1:3e:fe:c9:14:ae:ac:98:a6:60: 1f:6a:4b:5d:32:b2:e6:24:1d:7f:da:57:d2:24:bf:ca:f2:3c: 62:51:89:49:d2:36:ba:9b:51:3f:f9:ba:82:1e:35:cc:5c:e9: f3:d0:ee:b6:b9:86:b9:d8:92:f7:89:2c:d4:11:58:37:c6:60: 7d:83:0e:1b:5d:4d:0b:a2:99:70:fa:53:13:2f:08:21:d2:ce: 7e:0f:d1:fb:66:3e:da:3d:1a:32:38:47:ff:18:da:40:a5:37: a6:47:2d:ab:60:c4:5d:4c:75:66:2e:1c:c9:c1:82:4f:b2:94: 1f:df:c8:48:7a:af:82:4e:7d:ad:19:16:76:fe:2a:55:2f:31: a2:54:d6:f4:bc:2f:97:6c:7a:cf:44:56:02:ad:2e:11:b4:08: de:90:c3:25:a2:97:3e:ff:6b:90:9c:02:2a:d7:a2:f3:fd:07: cb:92:e3:01:3c:c2:08:df:e5:a5:71:6f:c6:ec:c7:a4:1e:3b: 79:2c:9a:99:b2:97:c2:41:f1:77:8f:91:3c:0a:1c:45:1d:36: 25:05:be:cb:48:cc:8c:32:52:c8:2f:2c:b0:b2:64:cc:d6:1b: 63:fa:42:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwMUEzRkRCMjc5MDkx MkEzQzA1MzEwMUI2MDFCREQyRDAyRTdEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqPHt/gu08xwu17U3fCR7aMjGfOF5hx0NS8S9rngpDqUxAvjdw okUyA6ODjOHq7JGCRz40Md05B1jJD6gkd0b+2W5X/D06Y1vFjNVTVydw1H/zpGsq +vLEA/j7o2aqcob6FeexBgEL4jsnodmYaZ8mHYE5X6DjeeTO1/RGUq3AAu4gRhQp k0ndrrhkwJrh8er3QB0deHV9T2ve9XTAzAnwL+JPLsjcZhTDTlF9e4WLgs0GLlcD 0ZFn8G+dyvMn+g/QO1XVE18Y5CjlQptx2xP/LiiLa9UcJ5sihkILIF8ryCFtgIy9 LNlxdd6R5XmWExY7/PUgzJ1q9PWu5MvF4q+NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIBo/2yeQkSo8BTEBtgG90tAufSAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lCb18yeWVRa1NvOEJURUJ0 Z0c5MHRBdWZTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx njAwDQYJKoZIhvcNAQELBQADggEBACZIq296k7UPr5hUECko19X+/Ocm2bJe/cv8 wT7+yRSurJimYB9qS10ysuYkHX/aV9Ikv8ryPGJRiUnSNrqbUT/5uoIeNcxc6fPQ 7ra5hrnYkveJLNQRWDfGYH2DDhtdTQuimXD6UxMvCCHSzn4P0ftmPto9GjI4R/8Y 2kClN6ZHLatgxF1MdWYuHMnBgk+ylB/fyEh6r4JOfa0ZFnb+KlUvMaJU1vS8L5ds es9EVgKtLhG0CN6QwyWilz7/a5CcAirXovP9B8uS4wE8wgjf5aVxb8bsx6QeO3ks mpmyl8JB8XePkTwKHEUdNiUFvstIzIwyUsgvLLCyZMzWG2P6QnU= -----END CERTIFICATE-----Generated at Thu Apr 17 21:07:10 2025 by rpki-client