$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V5nw46P8AYFyXJZDozdbr-pn5Fo.roa File: V5nw46P8AYFyXJZDozdbr-pn5Fo.roa (raw, json) Hash identifier: X357wqvjOhfnbn6zIv7t4o5OLcwqO3JY6h6+POcoCAg= Subject key identifier: 57:99:F0:E3:A3:FC:01:81:72:5C:96:43:A3:37:5B:AF:EA:67:E4:5A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2379 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V5nw46P8AYFyXJZDozdbr-pn5Fo.roa Signing time: Mon 10 Feb 2025 14:17:37 +0000 ROA not before: Mon 10 Feb 2025 14:17:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 49.158.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9081 (0x2379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5799F0E3A3FC0181725C9643A3375BAFEA67E45A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:91:f7:a3:69:83:ba:08:dd:87:57:19:68: 59:b2:fa:34:4b:b6:06:79:a0:df:ff:9b:15:ad:78: 98:56:cc:68:d3:f0:a4:f0:11:a5:7d:fe:a1:fc:3d: 1e:a8:bf:bf:d8:30:bd:cc:07:70:25:fe:ba:fe:ef: 97:fd:31:dc:90:92:1f:28:5c:48:9c:e7:9c:4b:f4: 8d:a4:0a:14:43:bd:36:f8:0d:f3:45:f5:40:7f:f0: b6:f0:87:c2:da:58:32:51:52:32:31:64:dc:35:c2: e9:2c:ee:d5:72:9e:d5:32:a0:06:c2:b9:7c:3e:a7: c1:e8:4e:22:25:de:76:b2:f7:d0:18:39:a9:a2:63: 62:77:0c:4f:3a:6f:9d:4f:dd:57:c2:86:64:4b:f8: db:47:39:e7:77:d5:4d:da:96:b6:e6:e7:2d:f6:1d: 24:d3:b7:44:e8:3d:ac:b3:de:39:06:2d:30:ad:e0: 40:13:fc:30:fe:c7:7c:dd:e1:ae:b1:28:79:fb:66: a0:53:85:e5:91:dc:d1:c7:5f:ae:29:59:5e:57:c7: f6:44:19:56:68:e8:0e:ff:f0:ee:01:8a:14:9c:ac: e3:68:40:f1:e4:2f:fc:ef:a9:73:ee:f5:f0:7d:d6: 4a:9f:45:09:1a:32:b4:89:19:fe:7c:13:dd:31:43: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:99:F0:E3:A3:FC:01:81:72:5C:96:43:A3:37:5B:AF:EA:67:E4:5A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V5nw46P8AYFyXJZDozdbr-pn5Fo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.192.0/22 Signature Algorithm: sha256WithRSAEncryption 92:92:cb:c9:34:fc:a6:dd:aa:b8:7f:ca:00:fe:9f:24:77:5c: 68:ef:91:1e:ff:5d:1a:0e:c0:44:16:ff:cb:9b:8b:81:8e:03: 94:53:7e:6e:e3:b7:33:50:cc:81:bb:97:42:f8:69:74:cb:14: 32:93:13:b9:77:d4:0b:5d:cb:3b:29:d0:c1:91:6f:80:e6:36: 4f:82:7b:84:68:4f:97:4d:b9:d6:4a:22:6e:dc:3f:ab:f6:c3: df:70:44:aa:35:a0:b1:2e:29:b0:c6:be:a7:d7:cb:d5:70:19: f4:61:2b:f9:4a:3a:a1:4b:1e:30:96:42:10:44:d9:61:e3:d1: 3c:96:26:24:45:87:93:52:19:1e:80:e3:20:db:4c:8c:0b:75: dc:99:04:94:e9:4a:d8:84:7d:b7:05:59:e4:9d:29:80:2a:29: f0:5a:26:03:3f:11:7b:a6:3a:b1:b9:f4:0e:40:21:c4:dd:42: 9d:93:e4:82:d0:93:46:e1:83:df:ec:c9:38:44:80:85:26:b5: 62:09:9f:89:3a:d4:c8:06:3a:d4:dc:e2:83:15:01:94:a6:79: ee:b0:e7:61:10:47:e0:2f:03:67:66:95:8b:06:49:58:a0:05: 6f:2e:d1:3f:c9:62:5a:c4:58:5d:fe:de:7c:ec:b5:1f:d5:72: 66:d0:cf:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU3OTlGMEUzQTNGQzAx ODE3MjVDOTY0M0EzMzc1QkFGRUE2N0U0NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMXJH3o2mDugjdh1cZaFmy+jRLtgZ5oN//mxWteJhWzGjT8KTw EaV9/qH8PR6ov7/YML3MB3Al/rr+75f9MdyQkh8oXEic55xL9I2kChRDvTb4DfNF 9UB/8Lbwh8LaWDJRUjIxZNw1wuks7tVyntUyoAbCuXw+p8HoTiIl3nay99AYOami Y2J3DE86b51P3VfChmRL+NtHOed31U3alrbm5y32HSTTt0ToPayz3jkGLTCt4EAT /DD+x3zd4a6xKHn7ZqBTheWR3NHHX64pWV5Xx/ZEGVZo6A7/8O4BihScrONoQPHk L/zvqXPu9fB91kqfRQkaMrSJGf58E90xQwyfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUV5nw46P8AYFyXJZDozdbr+pn5FowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1Y1bnc0NlA4QVlGeVhKWkRv emRici1wbjVGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nsAwDQYJKoZIhvcNAQELBQADggEBAJKSy8k0/Kbdqrh/ygD+nyR3XGjvkR7/XRoO wEQW/8ubi4GOA5RTfm7jtzNQzIG7l0L4aXTLFDKTE7l31Atdyzsp0MGRb4DmNk+C e4RoT5dNudZKIm7cP6v2w99wRKo1oLEuKbDGvqfXy9VwGfRhK/lKOqFLHjCWQhBE 2WHj0TyWJiRFh5NSGR6A4yDbTIwLddyZBJTpStiEfbcFWeSdKYAqKfBaJgM/EXum OrG59A5AIcTdQp2T5ILQk0bhg9/syThEgIUmtWIJn4k61MgGOtTc4oMVAZSmee6w 52EQR+AvA2dmlYsGSVigBW8u0T/JYlrEWF3+3nzstR/VcmbQz0Q= -----END CERTIFICATE-----Generated at Fri Apr 18 16:32:57 2025 by rpki-client