$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N5kHqFRL9uNLPLhh_yaCZmOSUYM.roa File: N5kHqFRL9uNLPLhh_yaCZmOSUYM.roa (raw, json) Hash identifier: TrWb//R+qlqWOicgrH+yJBmRsNS1PHm3agIutyKXgBQ= Subject key identifier: 37:99:07:A8:54:4B:F6:E3:4B:3C:B8:61:FF:26:82:66:63:92:51:83 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2446 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N5kHqFRL9uNLPLhh_yaCZmOSUYM.roa Signing time: Mon 10 Feb 2025 14:18:27 +0000 ROA not before: Mon 10 Feb 2025 14:18:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9286 (0x2446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=379907A8544BF6E34B3CB861FF26826663925183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:45:2c:b5:cd:c9:23:1d:65:b4:0f:43:74:4e: cb:7e:13:14:4e:d7:a9:22:5e:4c:59:87:9c:69:a8: f6:b7:69:f5:47:26:2a:cc:a1:f8:7e:00:81:33:a6: b1:8f:88:f3:b3:05:df:a2:cb:82:d2:ad:28:28:16: 60:e6:dc:01:ce:aa:b4:9e:48:db:40:13:fe:e5:af: ee:bf:db:ed:aa:e9:10:b1:b6:47:37:41:25:4b:f5: 94:5f:e5:0f:88:d4:b3:70:78:cb:6b:cd:39:30:83: bc:95:b3:7e:a1:d0:94:78:e6:c1:54:b5:7a:95:4e: 77:2b:71:78:bb:9c:00:1b:96:ca:1d:59:d4:a7:c2: b2:7f:93:6e:3d:66:cc:ed:84:27:68:f7:19:a0:aa: 26:f9:a7:83:c7:50:d5:4e:6d:95:ec:eb:68:de:e6: f5:f0:d2:0d:84:25:11:a2:bc:a8:ba:e5:8a:e8:cd: 45:91:78:ee:00:5c:09:70:9a:84:ea:ae:89:59:74: a0:b9:e6:26:79:56:b0:84:cf:7b:ed:4e:c9:97:7b: de:1b:7c:ce:4a:4c:48:80:bf:60:f1:6f:19:2b:f6: 91:bc:57:14:32:4e:ec:58:05:7f:a2:e4:2b:98:de: ad:f1:a9:de:bb:8b:cf:19:c0:2c:8f:c0:19:36:9b: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:07:A8:54:4B:F6:E3:4B:3C:B8:61:FF:26:82:66:63:92:51:83 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N5kHqFRL9uNLPLhh_yaCZmOSUYM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.60.0/24 Signature Algorithm: sha256WithRSAEncryption 45:50:52:2f:19:e7:10:f8:fd:8d:a9:85:c8:16:ec:1c:91:7f: cf:68:0e:26:65:be:47:03:0a:55:a9:b1:61:e2:d1:be:df:64: 5b:f0:32:b7:a7:65:69:11:e9:7c:b8:92:c7:b9:8a:d2:93:d6: d7:99:5a:6b:e1:8d:a3:8a:c2:91:84:fc:d1:31:7d:5a:22:d7: 46:d1:a5:b7:78:49:3c:8a:18:e9:7c:1d:de:0c:8f:4a:c0:93: dd:28:1b:8d:d8:7a:4c:2b:4f:f7:7d:57:23:c2:78:59:d8:dd: 97:f7:9f:f5:7c:dc:d1:7f:eb:4a:07:7b:59:e4:42:95:c1:9c: 75:6d:a1:d3:47:6d:1c:77:88:5c:26:12:2b:a6:b2:f8:92:ed: d3:49:7b:3c:76:8d:1b:d5:ed:ad:a1:4e:1f:93:c2:7c:8b:c1: 25:fe:2b:86:f1:b0:aa:fe:d4:4b:88:73:4d:e3:f5:d7:72:0c: 12:80:1d:b5:8d:bc:62:38:a7:f5:7a:fb:c8:b7:51:2b:86:48: 4a:fe:90:ad:8d:e9:89:c8:38:6f:1f:b8:7b:d6:22:17:d7:6f: 6a:d7:c5:56:6b:3f:bd:32:6c:ce:1b:3c:ca:b4:a3:fd:c7:25: d3:3d:49:2b:89:71:e2:76:39:14:96:e0:37:c9:37:66:fe:4f: a0:4e:84:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3OTkwN0E4NTQ0QkY2 RTM0QjNDQjg2MUZGMjY4MjY2NjM5MjUxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbRSy1zckjHWW0D0N0Tst+ExRO16kiXkxZh5xpqPa3afVHJirM ofh+AIEzprGPiPOzBd+iy4LSrSgoFmDm3AHOqrSeSNtAE/7lr+6/2+2q6RCxtkc3 QSVL9ZRf5Q+I1LNweMtrzTkwg7yVs36h0JR45sFUtXqVTncrcXi7nAAblsodWdSn wrJ/k249ZszthCdo9xmgqib5p4PHUNVObZXs62je5vXw0g2EJRGivKi65YrozUWR eO4AXAlwmoTqrolZdKC55iZ5VrCEz3vtTsmXe94bfM5KTEiAv2Dxbxkr9pG8VxQy TuxYBX+i5CuY3q3xqd67i88ZwCyPwBk2m7OhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN5kHqFRL9uNLPLhh/yaCZmOSUYMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL041a0hxRlJMOXVOTFBMaGhf eWFDWm1PU1VZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx njwwDQYJKoZIhvcNAQELBQADggEBAEVQUi8Z5xD4/Y2phcgW7ByRf89oDiZlvkcD ClWpsWHi0b7fZFvwMrenZWkR6Xy4kse5itKT1teZWmvhjaOKwpGE/NExfVoi10bR pbd4STyKGOl8Hd4Mj0rAk90oG43YekwrT/d9VyPCeFnY3Zf3n/V83NF/60oHe1nk QpXBnHVtodNHbRx3iFwmEiumsviS7dNJezx2jRvV7a2hTh+TwnyLwSX+K4bxsKr+ 1EuIc03j9ddyDBKAHbWNvGI4p/V6+8i3USuGSEr+kK2N6YnIOG8fuHvWIhfXb2rX xVZrP70ybM4bPMq0o/3HJdM9SSuJceJ2ORSW4DfJN2b+T6BOhKc= -----END CERTIFICATE-----Generated at Fri Apr 18 16:42:47 2025 by rpki-client