$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R3BI-fwpw4uXJPD9emIMxOxXn_A.roa File: R3BI-fwpw4uXJPD9emIMxOxXn_A.roa (raw, json) Hash identifier: iJuxOmrACCpY/HG/pa6nEThiNWcdzSrccePJLal7oKs= Subject key identifier: 47:70:48:F9:FC:29:C3:8B:97:24:F0:FD:7A:62:0C:C4:EC:57:9F:F0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23D4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R3BI-fwpw4uXJPD9emIMxOxXn_A.roa Signing time: Mon 10 Feb 2025 14:17:58 +0000 ROA not before: Mon 10 Feb 2025 14:17:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9172 (0x23d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=477048F9FC29C38B9724F0FD7A620CC4EC579FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a5:cb:80:1b:81:c2:bf:da:e4:a0:5d:1f:1e: 32:91:9c:69:ba:05:a1:73:f9:0e:be:44:36:bf:ab: 24:5c:ef:f7:43:b6:42:dd:2d:5d:ba:69:b8:cf:c8: 4c:9e:f8:86:61:a0:70:04:18:15:c0:1f:31:9f:8d: a9:65:3d:73:63:ca:56:29:aa:a0:db:ec:de:9e:a1: ec:6b:fc:3f:b2:42:e7:ec:a5:55:3d:56:8a:53:4f: 2b:93:99:09:b3:6a:a9:cd:0a:41:ef:5f:40:36:f9: a9:5e:23:0d:e3:66:95:cc:b6:b3:d7:a4:80:8b:07: cf:02:13:02:02:c4:21:fc:82:0a:bb:0c:6d:5a:00: 2d:80:ca:1e:f0:33:9e:75:93:3e:16:0a:f4:48:7e: 35:a3:33:aa:ef:46:ef:ea:e8:7e:5c:4d:f4:d1:8f: 2a:34:4e:d9:80:60:61:aa:55:7e:b2:46:9d:b5:01: f8:2f:f1:07:50:62:45:cf:2c:48:14:1f:3e:c4:a0: aa:b3:bc:88:ac:6e:43:ee:70:1b:02:68:16:4c:a4: 70:03:e2:fd:fc:18:a9:74:87:5e:93:5c:30:84:d7: ec:80:65:31:f5:92:1b:23:e8:1c:01:b1:94:ba:13: 90:b5:35:b0:66:ea:2f:27:dc:8c:25:d9:f0:4a:bd: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:48:F9:FC:29:C3:8B:97:24:F0:FD:7A:62:0C:C4:EC:57:9F:F0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R3BI-fwpw4uXJPD9emIMxOxXn_A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.240.0/21 Signature Algorithm: sha256WithRSAEncryption 22:47:99:aa:ea:05:f5:e8:d7:e2:b7:82:dc:72:67:32:ef:58: 1f:41:f7:67:aa:75:ba:23:01:aa:87:67:1b:ee:9f:06:42:87: e2:78:12:9e:5e:5c:7b:3f:60:25:ce:78:17:36:46:b5:77:9a: 6c:42:29:f8:29:e5:01:b9:53:65:14:31:e3:f1:ee:81:23:07: a4:5f:c2:fe:e1:c4:30:8f:42:8a:17:31:1d:bf:78:86:44:19: 6b:93:bc:f3:e5:e3:1c:02:7a:72:b0:fd:05:5a:e2:f1:0c:30: 1c:ca:3b:89:92:7b:3a:77:43:7e:7e:ba:28:1f:b4:cf:5a:f2: 2c:59:ec:41:7c:d9:f6:b8:9d:22:2a:67:bb:f2:9a:1b:3c:46: 3b:e3:22:f5:d5:42:25:b2:bf:aa:63:8f:33:03:e1:ba:4d:1f: b9:fc:f6:15:7f:f5:a4:a6:8e:0c:2e:d8:43:6f:2d:c1:4c:41: 45:28:10:57:d8:80:00:de:c9:d5:17:06:0d:b5:93:73:ed:b1: 68:52:88:1c:51:84:0d:20:f2:86:4d:e1:70:7a:94:30:99:5a: f2:05:aa:ed:91:2f:ea:8f:aa:bd:71:e5:05:9e:49:21:eb:94: 64:e7:5b:81:14:d9:ae:f2:33:78:d6:a2:e3:3f:48:ae:67:bb: 50:8f:3f:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ3NzA0OEY5RkMyOUMz OEI5NzI0RjBGRDdBNjIwQ0M0RUM1NzlGRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlpcuAG4HCv9rkoF0fHjKRnGm6BaFz+Q6+RDa/qyRc7/dDtkLd LV26abjPyEye+IZhoHAEGBXAHzGfjallPXNjylYpqqDb7N6eoexr/D+yQufspVU9 VopTTyuTmQmzaqnNCkHvX0A2+aleIw3jZpXMtrPXpICLB88CEwICxCH8ggq7DG1a AC2Ayh7wM551kz4WCvRIfjWjM6rvRu/q6H5cTfTRjyo0TtmAYGGqVX6yRp21Afgv 8QdQYkXPLEgUHz7EoKqzvIisbkPucBsCaBZMpHAD4v38GKl0h16TXDCE1+yAZTH1 khsj6BwBsZS6E5C1NbBm6i8n3Iwl2fBKvcrlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUR3BI+fwpw4uXJPD9emIMxOxXn/AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1IzQkktZndwdzR1WEpQRDll bUlNeE94WG5fQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n/AwDQYJKoZIhvcNAQELBQADggEBACJHmarqBfXo1+K3gtxyZzLvWB9B92eqdboj AaqHZxvunwZCh+J4Ep5eXHs/YCXOeBc2RrV3mmxCKfgp5QG5U2UUMePx7oEjB6Rf wv7hxDCPQooXMR2/eIZEGWuTvPPl4xwCenKw/QVa4vEMMBzKO4mSezp3Q35+uigf tM9a8ixZ7EF82fa4nSIqZ7vymhs8RjvjIvXVQiWyv6pjjzMD4bpNH7n89hV/9aSm jgwu2ENvLcFMQUUoEFfYgADeydUXBg21k3PtsWhSiBxRhA0g8oZN4XB6lDCZWvIF qu2RL+qPqr1x5QWeSSHrlGTnW4EU2a7yM3jWouM/SK5nu1CPP6M= -----END CERTIFICATE-----Generated at Fri Apr 18 16:42:42 2025 by rpki-client