$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NTILwHwl-pTr877QqBljxq1c0gA.roa File: NTILwHwl-pTr877QqBljxq1c0gA.roa (raw, json) Hash identifier: FZDZDpr88/C8IcBj3EDIRQ3ay1Uq+WgXyEtBmsiTOn8= Subject key identifier: 35:32:0B:C0:7C:25:FA:94:EB:F3:BE:D0:A8:19:63:C6:AD:5C:D2:00 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2400 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NTILwHwl-pTr877QqBljxq1c0gA.roa Signing time: Mon 10 Feb 2025 14:18:10 +0000 ROA not before: Mon 10 Feb 2025 14:18:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9216 (0x2400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=35320BC07C25FA94EBF3BED0A81963C6AD5CD200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:ea:ff:03:57:04:98:1c:ac:08:5b:5e:bf: 36:69:53:d8:b9:5b:41:a9:41:aa:fc:45:80:db:aa: 3b:a6:93:44:55:07:81:d1:ee:b1:11:0b:3b:59:77: 76:27:fd:8d:65:7d:49:c3:e7:3d:46:5c:c1:64:ed: c6:b6:2e:42:34:87:d8:38:ce:16:96:bf:21:b9:85: 18:f4:28:8e:30:cc:0d:04:04:c6:2d:8f:a4:61:c5: 3c:d2:38:3d:4c:23:48:ad:3d:44:e1:5b:e7:3e:04: 23:12:f9:da:d9:d5:c9:fc:5c:79:7a:18:6c:c6:71: dc:26:a9:7f:05:15:c8:91:41:61:78:52:ff:57:8b: 1d:f1:40:15:4f:19:af:f1:3f:37:ef:02:18:ed:2a: eb:bc:32:20:a4:67:ad:8f:e7:e3:64:b1:24:63:09: e5:51:5c:a3:d1:94:2f:df:07:21:64:b5:2d:4f:c8: 64:3d:29:08:43:34:14:45:8e:84:8c:71:fa:0f:ea: d7:11:e5:29:ef:69:3c:8c:d4:a2:6f:7f:19:a3:a1: 73:b8:f7:1e:6b:69:de:64:fe:21:2c:75:96:99:e5: bf:5b:2f:3b:55:03:f8:5b:1d:34:44:0d:13:ca:d3: cb:d1:0c:6d:3c:67:96:83:04:3b:d5:a5:af:e9:2e: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:32:0B:C0:7C:25:FA:94:EB:F3:BE:D0:A8:19:63:C6:AD:5C:D2:00 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NTILwHwl-pTr877QqBljxq1c0gA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.146.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:e5:cf:d5:ea:d8:3a:9a:4d:20:9b:fa:92:dd:12:78:d5:c4: ee:79:d3:48:9c:66:58:c2:c7:b3:9d:c1:95:49:fa:24:9a:17: 7d:32:02:a5:79:7e:90:3c:59:8d:0a:19:71:cd:da:39:02:12: fc:f1:36:28:c3:86:da:01:33:04:4f:71:40:71:5b:6b:d1:f1: 9c:88:14:ef:37:e2:e8:e8:ec:6d:82:07:fe:08:41:70:24:6c: ae:b9:ec:f6:5a:35:d7:4d:0e:a6:09:f5:fc:1d:c1:eb:73:6d: be:ec:58:92:29:80:48:e4:25:4d:e9:08:80:56:4b:77:be:84: af:58:d0:8a:ec:75:39:82:f3:e5:3b:06:ae:01:21:9c:dc:dd: cd:5d:e4:70:6c:a4:f5:fc:4f:92:3e:c2:3a:ff:16:a9:54:73: a7:fe:ac:5f:03:2c:54:75:45:53:ba:08:60:b8:dd:6f:17:5d: c4:da:ac:59:1a:f0:a9:58:08:bc:ce:48:f4:6a:af:38:cd:12: f4:4c:f9:6b:05:98:91:d9:ed:ab:59:dd:7e:01:57:92:11:6c: e0:b0:c9:c3:d9:a6:e0:12:4b:f4:70:ec:61:4b:32:1c:da:65: 50:4c:c2:f7:69:9d:fc:66:65:0c:4a:e9:d5:4f:ee:2c:6b:0e: f7:2f:74:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1MzIwQkMwN0MyNUZB OTRFQkYzQkVEMEE4MTk2M0M2QUQ1Q0QyMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKPur/A1cEmBysCFtevzZpU9i5W0GpQar8RYDbqjumk0RVB4HR 7rERCztZd3Yn/Y1lfUnD5z1GXMFk7ca2LkI0h9g4zhaWvyG5hRj0KI4wzA0EBMYt j6RhxTzSOD1MI0itPUThW+c+BCMS+drZ1cn8XHl6GGzGcdwmqX8FFciRQWF4Uv9X ix3xQBVPGa/xPzfvAhjtKuu8MiCkZ62P5+NksSRjCeVRXKPRlC/fByFktS1PyGQ9 KQhDNBRFjoSMcfoP6tcR5SnvaTyM1KJvfxmjoXO49x5rad5k/iEsdZaZ5b9bLztV A/hbHTREDRPK08vRDG08Z5aDBDvVpa/pLiVjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNTILwHwl+pTr877QqBljxq1c0gAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL05USUx3SHdsLXBUcjg3N1Fx QmxqeHExYzBnQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx npIwDQYJKoZIhvcNAQELBQADggEBAH/lz9Xq2DqaTSCb+pLdEnjVxO5500icZljC x7OdwZVJ+iSaF30yAqV5fpA8WY0KGXHN2jkCEvzxNijDhtoBMwRPcUBxW2vR8ZyI FO834ujo7G2CB/4IQXAkbK657PZaNddNDqYJ9fwdwetzbb7sWJIpgEjkJU3pCIBW S3e+hK9Y0IrsdTmC8+U7Bq4BIZzc3c1d5HBspPX8T5I+wjr/FqlUc6f+rF8DLFR1 RVO6CGC43W8XXcTarFka8KlYCLzOSPRqrzjNEvRM+WsFmJHZ7atZ3X4BV5IRbOCw ycPZpuASS/Rw7GFLMhzaZVBMwvdpnfxmZQxK6dVP7ixrDvcvdMk= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:08 2025 by rpki-client