$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MRTM6SiXamo0GwXayUvTg8BPyHw.roa File: MRTM6SiXamo0GwXayUvTg8BPyHw.roa (raw, json) Hash identifier: V5R3jZf0GUYTQRcUxVWerFEGqSBhnqzFGvBo/KKsHTY= Subject key identifier: 31:14:CC:E9:28:97:6A:6A:34:1B:05:DA:C9:4B:D3:83:C0:4F:C8:7C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2456 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MRTM6SiXamo0GwXayUvTg8BPyHw.roa Signing time: Mon 10 Feb 2025 14:18:31 +0000 ROA not before: Mon 10 Feb 2025 14:18:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9302 (0x2456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3114CCE928976A6A341B05DAC94BD383C04FC87C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:53:0b:3f:c3:cc:86:e3:d9:ea:9a:46:89: 5d:ca:fa:cb:2d:9a:f5:42:99:38:58:53:58:96:57: 6e:5f:61:05:3e:a1:cb:f8:d5:cd:91:5f:d8:03:54: 26:14:0a:d9:4c:5f:73:c8:18:ac:93:b0:80:cd:7a: ab:27:d4:e4:7d:66:84:57:6a:d9:c8:f0:62:93:e9: 3b:ba:e5:1c:b4:60:03:2f:e9:41:3a:23:2e:61:cf: 85:cd:6e:b7:da:9f:11:ff:f7:aa:d8:f9:c1:36:97: ac:ab:5e:5d:47:38:d0:26:75:ad:77:a8:76:58:65: 47:e2:93:4f:36:6a:4d:a4:a5:35:c8:69:9c:b6:3e: bc:10:65:7c:b7:35:0c:28:a4:4c:42:c1:9b:e4:19: e0:45:b2:20:b6:e1:7a:a7:83:ef:40:48:8d:e5:ee: 49:fc:60:86:c8:4e:99:74:ed:6a:de:da:5e:e5:27: d3:ec:34:4b:97:7b:33:1f:2a:95:cb:72:d0:a5:03: e8:10:f8:07:7a:66:1e:4f:ad:3d:e7:de:24:95:a5: 8d:d8:c1:8d:20:9b:49:67:18:30:29:c2:3c:4d:be: fe:a0:8a:f2:e8:56:73:53:15:67:51:b8:04:35:83: 47:5c:b7:69:13:92:75:4c:a7:ab:34:a3:11:28:6f: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:14:CC:E9:28:97:6A:6A:34:1B:05:DA:C9:4B:D3:83:C0:4F:C8:7C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MRTM6SiXamo0GwXayUvTg8BPyHw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.120.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:12:8c:98:58:f5:58:c1:d5:5d:4f:46:93:cf:16:26:20:cc: 9b:33:e1:7d:ce:29:3c:59:b5:3d:34:e8:c6:8d:4f:b4:39:4b: 9b:a4:77:59:80:d2:fc:23:62:34:10:83:f2:35:2a:39:ed:6a: 95:3b:97:e4:54:65:6f:64:d5:0c:33:43:b5:f6:a9:83:0d:74: bc:85:34:2d:6b:0c:a9:3c:7d:32:06:ca:da:25:e9:9f:9a:1c: b3:94:91:1f:63:1b:3d:8c:9e:26:c9:45:9a:8c:69:08:e3:ed: 71:54:a3:e6:9c:4b:96:37:1d:e8:02:60:c8:39:a3:6a:be:58: 6f:ce:ad:b1:d4:6f:cd:d9:33:3c:1d:69:b2:c9:4c:18:bb:12: 10:66:4a:ba:92:02:61:47:53:6e:16:08:c8:59:48:37:08:6b: 8e:03:00:a9:dd:d9:be:ad:99:37:15:ff:96:7c:62:bc:1d:0d: 95:21:b8:36:b8:0c:9f:59:36:c5:4e:69:49:fd:6f:3f:d3:97: 69:d3:42:43:4a:76:28:84:17:b1:e8:37:25:68:a2:87:70:c7: 81:c3:22:8c:81:b8:e2:b8:b8:e3:b2:38:ad:fc:7b:63:e5:74: 35:17:f4:c0:03:32:be:91:29:f6:5f:b1:c7:96:09:49:55:0d: fc:e7:aa:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMxMTRDQ0U5Mjg5NzZB NkEzNDFCMDVEQUM5NEJEMzgzQzA0RkM4N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrNVMLP8PMhuPZ6ppGiV3K+sstmvVCmThYU1iWV25fYQU+ocv4 1c2RX9gDVCYUCtlMX3PIGKyTsIDNeqsn1OR9ZoRXatnI8GKT6Tu65Ry0YAMv6UE6 Iy5hz4XNbrfanxH/96rY+cE2l6yrXl1HONAmda13qHZYZUfik082ak2kpTXIaZy2 PrwQZXy3NQwopExCwZvkGeBFsiC24Xqng+9ASI3l7kn8YIbITpl07Wre2l7lJ9Ps NEuXezMfKpXLctClA+gQ+Ad6Zh5PrT3n3iSVpY3YwY0gm0lnGDApwjxNvv6givLo VnNTFWdRuAQ1g0dct2kTknVMp6s0oxEobysnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMRTM6SiXamo0GwXayUvTg8BPyHwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01SVE02U2lYYW1vMEd3WGF5 VXZUZzhCUHlIdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n3gwDQYJKoZIhvcNAQELBQADggEBAG0SjJhY9VjB1V1PRpPPFiYgzJsz4X3OKTxZ tT006MaNT7Q5S5ukd1mA0vwjYjQQg/I1KjntapU7l+RUZW9k1QwzQ7X2qYMNdLyF NC1rDKk8fTIGytol6Z+aHLOUkR9jGz2MnibJRZqMaQjj7XFUo+acS5Y3HegCYMg5 o2q+WG/OrbHUb83ZMzwdabLJTBi7EhBmSrqSAmFHU24WCMhZSDcIa44DAKnd2b6t mTcV/5Z8YrwdDZUhuDa4DJ9ZNsVOaUn9bz/Tl2nTQkNKdiiEF7HoNyVooodwx4HD IoyBuOK4uOOyOK38e2PldDUX9MADMr6RKfZfsceWCUlVDfznqsE= -----END CERTIFICATE-----Generated at Thu Apr 17 21:00:52 2025 by rpki-client