$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P5ir3shVSYB7KWHpHwf_3mSeWWg.roa File: P5ir3shVSYB7KWHpHwf_3mSeWWg.roa (raw, json) Hash identifier: GEKb8kU/HJwOOxPB2trb5UAiblB3cwoIFnq9SMvTI2o= Subject key identifier: 3F:98:AB:DE:C8:55:49:80:7B:29:61:E9:1F:07:FF:DE:64:9E:59:68 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2423 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P5ir3shVSYB7KWHpHwf_3mSeWWg.roa Signing time: Mon 10 Feb 2025 14:18:19 +0000 ROA not before: Mon 10 Feb 2025 14:18:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.158.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9251 (0x2423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3F98ABDEC85549807B2961E91F07FFDE649E5968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:5f:af:e5:84:44:8e:67:ab:71:da:20:97: e2:93:a6:6f:1a:93:c3:75:2d:72:33:47:d2:78:d8: 5e:a0:33:51:d3:c6:83:86:94:99:87:5f:c3:a3:72: 40:11:bc:63:2d:9a:23:23:26:5b:d2:40:72:ac:3d: 87:77:29:77:6d:67:20:07:78:33:6f:04:27:21:cc: 96:e8:22:37:00:0c:79:37:6b:18:ad:00:c7:f9:a1: 2d:7f:6c:81:6c:c1:2c:f2:84:3b:88:7e:3e:80:a9: d9:b2:c4:8c:ba:3f:5a:14:dd:45:39:4d:75:23:d0: 36:82:cd:c7:99:9e:43:5b:69:13:e3:5c:60:2c:81: 8a:4e:73:f8:e6:a2:f6:4b:f2:0a:aa:35:4e:64:31: a1:d9:60:e3:5e:fa:83:01:82:8e:81:b8:85:88:cb: 21:9f:66:b1:b3:4b:fe:ce:6e:ad:db:74:88:b8:46: 34:a8:45:fe:0b:a5:41:a9:d8:e0:d6:82:5e:75:e8: ae:f2:1d:27:ed:92:45:8d:3b:58:00:a1:f0:75:c6: e7:9f:d5:18:1a:d4:a7:c0:08:c4:e0:a9:ea:4b:92: 00:92:bf:ee:c7:2f:24:87:c9:c2:8d:f7:ca:12:f8: a0:b4:7c:6b:83:a3:1f:32:67:69:fd:d3:c8:0a:2b: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:98:AB:DE:C8:55:49:80:7B:29:61:E9:1F:07:FF:DE:64:9E:59:68 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P5ir3shVSYB7KWHpHwf_3mSeWWg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/15 Signature Algorithm: sha256WithRSAEncryption 70:88:98:47:5e:08:38:de:3e:9f:b8:d9:25:3b:7f:a1:d2:58: 0f:98:9f:cc:d2:34:3b:21:67:d3:d1:66:d9:f2:86:61:a1:df: 12:49:6b:8a:78:4a:ed:1a:1b:57:2b:81:dc:13:d5:25:97:75: ff:8a:7f:23:9e:67:5d:c9:f8:cb:19:d9:a5:f9:6b:d9:9c:d3: 11:65:59:78:48:5c:26:23:b8:dc:9b:e7:55:72:d9:83:59:1d: f7:69:03:ba:2b:83:58:ea:d8:30:e8:d0:f4:ad:a2:94:df:f6: 28:54:7d:62:a2:a2:19:07:62:f2:c7:49:fe:b6:ef:f9:a8:c6: 46:96:a3:cf:b3:d9:0c:59:c1:a2:ce:eb:91:1e:07:fa:e3:a2: f7:d8:11:b4:67:3d:bf:06:67:49:86:e8:f9:ef:1d:f7:df:68: 63:54:7c:a8:22:91:f6:d4:fd:fb:c3:c1:af:c6:03:0f:78:5a: cc:2d:b1:a5:e3:f4:5a:e4:c9:d9:b9:2e:32:d8:74:cf:b0:37: 58:e4:b8:d6:4b:6f:68:eb:07:f0:8e:c4:ca:cb:57:1e:cb:3e: fa:3a:8e:fa:0b:f6:e6:da:8b:13:9d:9d:ef:e4:6a:07:80:80: a8:3a:eb:b8:a3:16:89:21:38:8c:7a:19:10:db:73:0f:2a:4f: c0:9b:94:6f -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICJCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNGOThBQkRFQzg1NTQ5 ODA3QjI5NjFFOTFGMDdGRkRFNjQ5RTU5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPLV+v5YREjmercdogl+KTpm8ak8N1LXIzR9J42F6gM1HTxoOG lJmHX8OjckARvGMtmiMjJlvSQHKsPYd3KXdtZyAHeDNvBCchzJboIjcADHk3axit AMf5oS1/bIFswSzyhDuIfj6AqdmyxIy6P1oU3UU5TXUj0DaCzceZnkNbaRPjXGAs gYpOc/jmovZL8gqqNU5kMaHZYONe+oMBgo6BuIWIyyGfZrGzS/7Obq3bdIi4RjSo Rf4LpUGp2ODWgl516K7yHSftkkWNO1gAofB1xuef1Rga1KfACMTgqepLkgCSv+7H LySHycKN98oS+KC0fGuDox8yZ2n908gKK3X1AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUP5ir3shVSYB7KWHpHwf/3mSeWWgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1A1aXIzc2hWU1lCN0tXSHBI d2ZfM21TZVdXZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEx njANBgkqhkiG9w0BAQsFAAOCAQEAcIiYR14ION4+n7jZJTt/odJYD5ifzNI0OyFn 09Fm2fKGYaHfEklrinhK7RobVyuB3BPVJZd1/4p/I55nXcn4yxnZpflr2ZzTEWVZ eEhcJiO43JvnVXLZg1kd92kDuiuDWOrYMOjQ9K2ilN/2KFR9YqKiGQdi8sdJ/rbv +ajGRpajz7PZDFnBos7rkR4H+uOi99gRtGc9vwZnSYbo+e8d999oY1R8qCKR9tT9 +8PBr8YDD3hazC2xpeP0WuTJ2bkuMth0z7A3WOS41ktvaOsH8I7EystXHss++jqO +gv25tqLE52d7+RqB4CAqDrruKMWiSE4jHoZENtzDypPwJuUbw== -----END CERTIFICATE-----Generated at Fri Apr 18 16:41:19 2025 by rpki-client