$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mor7t7eccgfJvQTC-7rgnjQ7fD0.roa File: Mor7t7eccgfJvQTC-7rgnjQ7fD0.roa (raw, json) Hash identifier: tL6hfESDOGdIozuNzlEo0cpVNZfg0PIqRc50LjU6g+Y= Subject key identifier: 32:8A:FB:B7:B7:9C:72:07:C9:BD:04:C2:FB:BA:E0:9E:34:3B:7C:3D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 246B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mor7t7eccgfJvQTC-7rgnjQ7fD0.roa Signing time: Mon 10 Feb 2025 14:18:36 +0000 ROA not before: Mon 10 Feb 2025 14:18:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 115.165.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9323 (0x246b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=328AFBB7B79C7207C9BD04C2FBBAE09E343B7C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:58:e3:3f:b7:8f:ea:be:ce:6a:4c:01:63: f1:1d:05:04:a7:34:c4:8e:44:89:f5:80:c2:af:ac: 7f:87:43:2c:1b:71:c0:af:2d:31:5b:4d:2b:2f:6b: f6:e9:c9:f9:de:7b:02:27:c4:0c:d0:5c:c6:04:35: b4:bd:f4:fa:ee:2a:ae:71:63:3d:42:72:e5:6c:d1: b0:c5:ce:3d:c3:25:cc:90:42:ee:32:8e:fd:fb:54: 94:8e:1f:79:0d:32:5f:e3:cd:19:a5:7f:29:79:11: af:3f:5a:5b:0b:8d:be:02:a9:44:75:90:4b:cf:83: 81:c2:5d:d3:5c:6a:ef:41:73:ce:1f:49:cc:36:dc: 5e:13:45:75:38:96:b5:b9:5a:97:03:8d:f1:63:31: 88:c2:77:11:7d:1c:a2:25:3b:10:8d:c0:51:0d:49: 33:c5:04:54:62:22:c5:4b:dd:2d:3f:60:4d:dd:cd: d8:5f:d6:18:45:c8:7e:e2:31:30:cb:f5:90:b5:19: b3:9c:35:52:f0:d2:eb:6d:f0:85:f8:3d:6e:e0:ad: 59:d4:85:3d:d3:15:5b:26:6c:6d:53:64:7f:3e:4b: ed:57:28:5a:a6:96:fe:bc:64:5f:ac:bb:69:01:76: df:7e:cc:ab:82:fa:76:ff:4b:84:6a:89:d8:0c:5e: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8A:FB:B7:B7:9C:72:07:C9:BD:04:C2:FB:BA:E0:9E:34:3B:7C:3D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mor7t7eccgfJvQTC-7rgnjQ7fD0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.165.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:d2:18:43:ed:e7:18:45:92:79:5c:af:a4:75:89:ea:95:3c: 39:e0:15:20:d6:d8:17:7d:63:3a:62:97:13:f2:52:da:09:49: 21:fa:2a:7a:f1:8e:f2:87:2a:fd:6b:d4:bf:f2:50:fb:7c:59: 4e:85:d5:81:27:76:d8:df:d7:5d:2e:81:d6:56:e8:77:8e:3d: e4:bc:dc:a1:a5:63:f9:cd:fb:74:45:cb:ef:d6:9b:da:a4:3c: 04:50:08:1f:65:a5:17:e2:09:7c:63:29:d0:fd:0a:a7:4d:a9: 53:73:fb:83:77:f7:97:75:b2:2f:63:05:db:3a:57:28:e7:e2: 70:35:02:9f:d8:d1:d8:15:2b:ea:e6:59:a6:cf:82:88:a5:3b: 19:29:5c:4d:47:58:5a:c6:ae:3b:f9:40:58:03:53:27:d7:07: 9b:22:06:10:cc:35:bd:a2:0b:5f:9a:5e:9c:11:0c:02:45:52: 26:73:98:ac:fc:eb:f5:fd:fb:7e:4c:b4:ae:bb:ab:7e:2e:9f: 86:68:f1:63:8a:ff:1c:ee:7f:e4:6b:5b:4f:3b:a1:c3:c0:63: 14:98:80:98:ab:d5:88:97:33:9a:1d:1f:84:da:69:6e:e5:8a: ad:b9:aa:b0:5b:bb:11:15:67:09:22:e0:ea:d9:ef:53:2e:b9: be:9a:b1:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyOEFGQkI3Qjc5Qzcy MDdDOUJEMDRDMkZCQkFFMDlFMzQzQjdDM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCa2FjjP7eP6r7OakwBY/EdBQSnNMSORIn1gMKvrH+HQywbccCv LTFbTSsva/bpyfneewInxAzQXMYENbS99PruKq5xYz1CcuVs0bDFzj3DJcyQQu4y jv37VJSOH3kNMl/jzRmlfyl5Ea8/WlsLjb4CqUR1kEvPg4HCXdNcau9Bc84fScw2 3F4TRXU4lrW5WpcDjfFjMYjCdxF9HKIlOxCNwFENSTPFBFRiIsVL3S0/YE3dzdhf 1hhFyH7iMTDL9ZC1GbOcNVLw0utt8IX4PW7grVnUhT3TFVsmbG1TZH8+S+1XKFqm lv68ZF+su2kBdt9+zKuC+nb/S4RqidgMXq7FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMor7t7eccgfJvQTC+7rgnjQ7fD0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01vcjd0N2VjY2dmSnZRVEMt N3JnbmpRN2ZEMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJz pegwDQYJKoZIhvcNAQELBQADggEBAB3SGEPt5xhFknlcr6R1ieqVPDngFSDW2Bd9 YzpilxPyUtoJSSH6KnrxjvKHKv1r1L/yUPt8WU6F1YEndtjf110ugdZW6HeOPeS8 3KGlY/nN+3RFy+/Wm9qkPARQCB9lpRfiCXxjKdD9CqdNqVNz+4N395d1si9jBds6 Vyjn4nA1Ap/Y0dgVK+rmWabPgoilOxkpXE1HWFrGrjv5QFgDUyfXB5siBhDMNb2i C1+aXpwRDAJFUiZzmKz86/X9+35MtK67q34un4Zo8WOK/xzuf+RrW087ocPAYxSY gJir1YiXM5odH4TaaW7liq25qrBbuxEVZwki4OrZ71Muub6asb8= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:13 2025 by rpki-client