$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mw7OfV0e8GgVSorpkJnMZKacqag.roa File: Mw7OfV0e8GgVSorpkJnMZKacqag.roa (raw, json) Hash identifier: bOjDhGauLsQqyryhudp1hdJKCIU+JXXnibnUG9AyZmQ= Subject key identifier: 33:0E:CE:7D:5D:1E:F0:68:15:4A:8A:E9:90:99:CC:64:A6:9C:A9:A8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2409 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mw7OfV0e8GgVSorpkJnMZKacqag.roa Signing time: Mon 10 Feb 2025 14:18:12 +0000 ROA not before: Mon 10 Feb 2025 14:18:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 49.159.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9225 (0x2409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=330ECE7D5D1EF068154A8AE99099CC64A69CA9A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:44:fc:85:17:24:23:54:b2:3d:b4:b5:96: 71:ea:72:4f:c8:8e:e6:5a:8a:73:d1:8b:42:09:4c: cf:17:2d:fa:08:8e:64:96:b4:f8:e5:4c:62:ea:0c: 6c:63:9f:af:bf:b7:1b:b0:3b:93:0c:8e:bc:b0:4e: a9:53:1b:3b:5e:b9:e4:d3:39:30:2d:1c:f7:ff:cb: 24:80:fb:31:e3:d3:ea:cc:e7:b2:d8:8a:84:cb:37: 26:e0:0d:af:2b:67:64:3c:2f:1a:30:bd:c0:7a:07: ea:1a:47:fd:de:d7:2d:b7:a7:1b:74:c2:eb:b2:ce: 8c:e0:35:2a:ab:a9:44:46:0b:f9:72:bc:2d:b7:67: 87:7e:91:49:08:91:88:76:f9:fe:c5:39:ef:8f:97: 49:03:3c:6d:6f:2b:c1:5c:af:ef:e3:c2:bd:72:38: 0a:9d:a9:5e:9a:f9:bd:b6:62:49:9a:45:45:11:c6: d7:b6:33:59:4e:b8:f4:fd:35:09:28:dd:b4:97:d3: cc:35:49:c4:99:45:55:4b:d9:06:4b:19:0b:cc:d5: 63:ed:57:e5:06:4a:a1:4a:d5:35:28:77:0f:0d:44: e1:e7:7b:6b:78:65:1a:1e:f5:0b:d2:88:4e:f7:01: 4b:5d:62:fa:fc:77:89:d7:1a:1b:63:dd:39:a4:24: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0E:CE:7D:5D:1E:F0:68:15:4A:8A:E9:90:99:CC:64:A6:9C:A9:A8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mw7OfV0e8GgVSorpkJnMZKacqag.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:10:1a:62:1b:71:60:08:78:e4:c2:40:9b:07:ac:87:40:7a: 1b:22:6b:58:2d:c5:9e:0f:c0:36:5b:d2:44:14:79:10:0f:e7: f0:4c:a8:ea:aa:59:21:d2:19:e2:e6:fc:47:bd:89:93:08:7f: b5:5f:2d:94:fc:17:d8:bc:39:62:24:12:52:c1:4f:ed:79:68: 66:11:9f:72:22:63:ee:41:8e:45:9a:c8:59:d5:19:70:a1:38: 6d:0f:fd:b8:e9:99:af:6f:b2:06:e1:3c:fc:2d:64:5f:77:db: 28:0d:b1:f7:77:a4:fb:2b:23:8a:80:7a:a2:e1:8c:64:67:52: 9f:bf:8e:36:42:d1:15:99:6d:10:7e:41:e7:e1:57:23:e2:be: cf:52:47:f5:f2:73:42:15:14:39:a9:09:4e:9a:09:39:c3:1c: 96:02:3e:41:08:89:83:36:c6:84:0f:91:17:c4:2c:f4:3b:4e: 28:68:6f:15:52:00:ba:5e:3c:07:74:c9:b8:6c:a0:4e:93:85: 5f:d4:26:c0:71:32:3d:a4:be:2c:73:6f:66:53:f0:72:41:2c: 09:3a:d2:16:4c:a3:ca:0f:be:7f:ac:a5:b1:ea:e8:63:0e:8b: 75:81:22:bc:3b:dd:bf:26:df:c9:e3:82:0a:91:6e:85:ca:10: e8:72:d1:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzMEVDRTdENUQxRUYw NjgxNTRBOEFFOTkwOTlDQzY0QTY5Q0E5QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYX0T8hRckI1SyPbS1lnHqck/IjuZainPRi0IJTM8XLfoIjmSW tPjlTGLqDGxjn6+/txuwO5MMjrywTqlTGzteueTTOTAtHPf/yySA+zHj0+rM57LY ioTLNybgDa8rZ2Q8LxowvcB6B+oaR/3e1y23pxt0wuuyzozgNSqrqURGC/lyvC23 Z4d+kUkIkYh2+f7FOe+Pl0kDPG1vK8Fcr+/jwr1yOAqdqV6a+b22YkmaRUURxte2 M1lOuPT9NQko3bSX08w1ScSZRVVL2QZLGQvM1WPtV+UGSqFK1TUodw8NROHne2t4 ZRoe9QvSiE73AUtdYvr8d4nXGhtj3TmkJLJfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMw7OfV0e8GgVSorpkJnMZKacqagwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL013N09mVjBlOEdnVlNvcnBr Sm5NWkthY3FhZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx n7AwDQYJKoZIhvcNAQELBQADggEBAAsQGmIbcWAIeOTCQJsHrIdAehsia1gtxZ4P wDZb0kQUeRAP5/BMqOqqWSHSGeLm/Ee9iZMIf7VfLZT8F9i8OWIkElLBT+15aGYR n3IiY+5BjkWayFnVGXChOG0P/bjpma9vsgbhPPwtZF932ygNsfd3pPsrI4qAeqLh jGRnUp+/jjZC0RWZbRB+QefhVyPivs9SR/Xyc0IVFDmpCU6aCTnDHJYCPkEIiYM2 xoQPkRfELPQ7TihobxVSALpePAd0ybhsoE6ThV/UJsBxMj2kvixzb2ZT8HJBLAk6 0hZMo8oPvn+spbHq6GMOi3WBIrw73b8m38njggqRboXKEOhy0Wo= -----END CERTIFICATE-----Generated at Fri Apr 18 16:46:16 2025 by rpki-client