$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QQH1_l5Kcv-DKU8eeIW0hDiwIpI.roa File: QQH1_l5Kcv-DKU8eeIW0hDiwIpI.roa (raw, json) Hash identifier: 50FKx8iKG36FyAZCef8yYpqbCa1qR/a2IkZkXVOYGYo= Subject key identifier: 41:01:F5:FE:5E:4A:72:FF:83:29:4F:1E:78:85:B4:84:38:B0:22:92 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23F0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QQH1_l5Kcv-DKU8eeIW0hDiwIpI.roa Signing time: Mon 10 Feb 2025 14:18:06 +0000 ROA not before: Mon 10 Feb 2025 14:18:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9200 (0x23f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4101F5FE5E4A72FF83294F1E7885B48438B02292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:9f:e6:4e:eb:bc:32:df:15:52:c4:76:17: 5e:1f:9f:b2:42:5a:d1:66:33:a9:d9:9c:73:a7:cb: fd:f1:79:dc:36:a8:e3:82:50:2a:e5:83:2b:63:fa: de:55:e5:c7:5a:47:7c:42:33:5c:8a:15:00:3e:c3: e4:bb:de:05:a4:df:61:74:23:c0:84:76:77:f4:4f: 7b:bf:96:87:60:81:76:7f:b9:66:63:27:f5:39:70: e2:06:1d:a6:78:7f:cb:9b:18:5f:ca:64:c6:b8:cc: a0:28:8c:62:bc:9c:c5:de:c2:82:a2:a0:19:87:bf: 4a:75:f3:2d:0b:f8:07:d1:0c:96:4e:01:25:9d:0c: 48:6a:7d:c6:0e:d8:66:c4:58:f0:cd:91:91:7d:83: 32:a7:8a:25:79:34:97:43:fc:41:29:8d:ab:89:4a: 44:36:94:60:f7:f1:e4:c6:ce:9b:99:fb:3f:5f:41: ba:a2:9f:0a:23:6c:61:12:59:a7:40:d6:77:2c:31: 7a:06:35:2a:9e:ec:29:8b:b3:1f:26:35:cb:1f:a6: f1:f3:0a:b2:13:e4:a1:5f:8d:98:51:a6:94:3e:62: 48:c3:65:85:90:52:89:fe:b8:c7:09:dc:83:b1:2e: c3:79:f2:15:02:d2:95:ff:e2:61:13:07:45:1f:5a: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:F5:FE:5E:4A:72:FF:83:29:4F:1E:78:85:B4:84:38:B0:22:92 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QQH1_l5Kcv-DKU8eeIW0hDiwIpI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:fe:6f:6e:8e:e3:2c:15:c2:28:8b:ce:a7:1f:a4:dc:d1:c5: 26:04:80:e4:1c:a3:b9:89:6b:3a:18:4e:df:31:9d:a3:8b:53: 60:26:93:7c:5a:35:fb:51:cc:d6:81:0a:d5:5a:0b:a2:7a:3c: 74:8c:6c:85:7c:0c:88:d8:19:4e:12:0c:46:d3:ed:9a:7c:60: 37:ce:65:e4:46:5c:ac:ff:53:0f:3a:5f:f7:d4:97:b1:6d:dc: bb:3c:a6:77:0e:48:48:d3:42:82:8b:0f:a1:44:94:d5:94:9a: c7:30:e1:74:56:fd:53:18:61:98:dd:83:07:bc:c2:5e:dd:d8: d2:4f:f8:e5:91:91:bb:74:b4:60:54:30:f8:84:74:75:d4:7f: b0:1b:2e:c4:fe:25:32:4a:ff:a6:15:95:b8:cc:e0:23:d3:40: 41:69:ba:fc:7b:f9:1d:9e:fc:11:62:cf:c6:8c:58:91:84:45: 02:d2:dd:b7:a4:51:37:b9:b2:8e:4c:ea:0f:ad:6f:4d:3e:b1: 86:0d:7d:5a:3b:07:05:1c:f0:64:76:3b:a5:c2:7f:4d:df:4d: f2:07:43:b5:6a:2a:d7:80:d3:7d:58:c1:8c:f8:c0:6c:cf:0a: 70:77:f6:c1:82:af:82:fd:07:37:0d:60:35:ac:80:3f:92:56: 7b:f1:40:95 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICI/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxMDFGNUZFNUU0QTcy RkY4MzI5NEYxRTc4ODVCNDg0MzhCMDIyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1rZ/mTuu8Mt8VUsR2F14fn7JCWtFmM6nZnHOny/3xedw2qOOC UCrlgytj+t5V5cdaR3xCM1yKFQA+w+S73gWk32F0I8CEdnf0T3u/lodggXZ/uWZj J/U5cOIGHaZ4f8ubGF/KZMa4zKAojGK8nMXewoKioBmHv0p18y0L+AfRDJZOASWd DEhqfcYO2GbEWPDNkZF9gzKniiV5NJdD/EEpjauJSkQ2lGD38eTGzpuZ+z9fQbqi nwojbGESWadA1ncsMXoGNSqe7CmLsx8mNcsfpvHzCrIT5KFfjZhRppQ+YkjDZYWQ Uon+uMcJ3IOxLsN58hUC0pX/4mETB0UfWsSLAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUQQH1/l5Kcv+DKU8eeIW0hDiwIpIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FRSDFfbDVLY3YtREtVOGVl SVcwaERpd0lwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx njANBgkqhkiG9w0BAQsFAAOCAQEAi/5vbo7jLBXCKIvOpx+k3NHFJgSA5ByjuYlr OhhO3zGdo4tTYCaTfFo1+1HM1oEK1VoLono8dIxshXwMiNgZThIMRtPtmnxgN85l 5EZcrP9TDzpf99SXsW3cuzymdw5ISNNCgosPoUSU1ZSaxzDhdFb9UxhhmN2DB7zC Xt3Y0k/45ZGRu3S0YFQw+IR0ddR/sBsuxP4lMkr/phWVuMzgI9NAQWm6/Hv5HZ78 EWLPxoxYkYRFAtLdt6RRN7myjkzqD61vTT6xhg19WjsHBRzwZHY7pcJ/Td9N8gdD tWoq14DTfVjBjPjAbM8KcHf2wYKvgv0HNw1gNayAP5JWe/FAlQ== -----END CERTIFICATE-----Generated at Thu Apr 17 21:03:46 2025 by rpki-client