$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q1GfnmNX0irZ-fLMl0cflB3o8qM.roa File: Q1GfnmNX0irZ-fLMl0cflB3o8qM.roa (raw, json) Hash identifier: +QNIaR6ul2wCT6/4PW3gue5G8WIpsQXgtv8lmUD1ksU= Subject key identifier: 43:51:9F:9E:63:57:D2:2A:D9:F9:F2:CC:97:47:1F:94:1D:E8:F2:A3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 241D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q1GfnmNX0irZ-fLMl0cflB3o8qM.roa Signing time: Mon 10 Feb 2025 14:18:17 +0000 ROA not before: Mon 10 Feb 2025 14:18:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9245 (0x241d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=43519F9E6357D22AD9F9F2CC97471F941DE8F2A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:da:c3:56:61:87:81:4b:08:6c:c1:8a:2b: d5:07:1c:d5:54:64:df:c9:eb:c5:b8:c8:fd:1d:ea: 8b:02:b0:74:1a:6e:e3:95:73:b7:77:87:e6:47:b0: 4e:b9:87:b0:29:23:56:b6:e6:e5:3f:3f:88:07:2c: 0f:3f:a2:3b:7e:fc:ad:a7:97:88:e3:bd:10:c7:8d: 45:28:a7:bc:7b:eb:bd:55:bd:f3:63:2f:b7:72:18: c5:fb:e8:bb:27:27:2b:ac:fe:20:ac:e3:56:a0:30: 7a:46:18:9d:87:c3:b5:22:45:a8:99:3a:12:5d:ed: 3e:9a:0a:17:2f:44:4c:3c:13:4b:38:88:23:41:9e: 9e:b2:ed:ae:9b:32:73:8c:05:0d:2d:76:4a:cc:c1: d0:ff:1f:b7:3a:c1:88:35:40:eb:c3:7c:7d:54:36: fe:57:51:cf:2a:28:0e:17:c8:fd:aa:e8:81:5e:77: db:75:4c:61:c4:14:65:86:b1:5a:7a:ff:55:5f:99: 34:0a:a8:a3:8f:e8:6b:0f:52:34:56:8b:09:c5:9a: 9a:14:01:2f:c7:71:32:1f:62:16:a0:7f:22:27:ea: c2:ac:19:ba:c1:d0:da:a2:6c:ca:8f:11:d1:bb:a1: 8e:4a:e8:34:35:16:8b:c3:28:51:0b:98:ac:9f:ea: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:9F:9E:63:57:D2:2A:D9:F9:F2:CC:97:47:1F:94:1D:E8:F2:A3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q1GfnmNX0irZ-fLMl0cflB3o8qM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.240.0/21 Signature Algorithm: sha256WithRSAEncryption 52:bd:50:ca:80:c1:74:cc:d4:cd:b0:d1:ec:8c:13:40:c4:34: 6f:e5:0c:d6:d8:15:79:8e:c2:92:74:ac:3f:01:c6:80:d7:94: e2:cb:11:03:30:c8:30:6d:58:1f:37:5e:b4:cc:7b:f9:1f:7b: e2:ea:2e:71:d0:e6:3c:da:bb:88:4b:4f:04:e0:ec:d3:e0:6c: 85:3a:9a:7a:96:f5:96:de:3a:f0:c5:b7:72:66:51:99:d2:6e: 2e:dd:c7:d6:35:02:2a:65:1e:c9:ad:ea:10:97:15:d6:2c:52: 28:79:de:f3:ef:49:49:c5:c3:f1:7a:9d:46:bb:bb:56:a6:76: eb:e2:ad:00:54:ea:cf:f9:aa:3b:56:8a:04:a1:e4:8d:55:22: 48:84:9f:8a:e1:da:e7:a7:e7:46:92:9d:5d:2f:52:23:fc:1b: fb:72:cd:cf:fb:01:61:ef:71:a0:fe:b8:d7:05:6b:20:3a:e3: bb:e2:0f:1e:d3:2d:e4:30:f3:35:18:3e:4e:c3:fb:08:61:e6: 12:50:1b:93:a7:a5:54:af:a2:ca:32:c8:80:94:e3:22:e8:3e: f3:a2:59:d3:d9:27:18:11:8c:31:78:0e:d8:bd:c7:2d:92:44: 5d:52:c1:cc:30:7c:17:32:d7:a1:86:08:01:da:38:26:cc:f5: 5c:fd:44:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzNTE5RjlFNjM1N0Qy MkFEOUY5RjJDQzk3NDcxRjk0MURFOEYyQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/n9rDVmGHgUsIbMGKK9UHHNVUZN/J68W4yP0d6osCsHQabuOV c7d3h+ZHsE65h7ApI1a25uU/P4gHLA8/ojt+/K2nl4jjvRDHjUUop7x7671VvfNj L7dyGMX76LsnJyus/iCs41agMHpGGJ2Hw7UiRaiZOhJd7T6aChcvREw8E0s4iCNB np6y7a6bMnOMBQ0tdkrMwdD/H7c6wYg1QOvDfH1UNv5XUc8qKA4XyP2q6IFed9t1 TGHEFGWGsVp6/1VfmTQKqKOP6GsPUjRWiwnFmpoUAS/HcTIfYhagfyIn6sKsGbrB 0NqibMqPEdG7oY5K6DQ1FovDKFELmKyf6pnpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQ1GfnmNX0irZ+fLMl0cflB3o8qMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ExR2ZubU5YMGlyWi1mTE1s MGNmbEIzbzhxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nvAwDQYJKoZIhvcNAQELBQADggEBAFK9UMqAwXTM1M2w0eyME0DENG/lDNbYFXmO wpJ0rD8BxoDXlOLLEQMwyDBtWB83XrTMe/kfe+LqLnHQ5jzau4hLTwTg7NPgbIU6 mnqW9ZbeOvDFt3JmUZnSbi7dx9Y1AiplHsmt6hCXFdYsUih53vPvSUnFw/F6nUa7 u1amduvirQBU6s/5qjtWigSh5I1VIkiEn4rh2uen50aSnV0vUiP8G/tyzc/7AWHv caD+uNcFayA647viDx7TLeQw8zUYPk7D+whh5hJQG5OnpVSvosoyyICU4yLoPvOi WdPZJxgRjDF4Dti9xy2SRF1SwcwwfBcy16GGCAHaOCbM9Vz9RJ4= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:36 2025 by rpki-client