$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YeWV50o5T8wYl_vBhwEpe04VekQ.roa File: YeWV50o5T8wYl_vBhwEpe04VekQ.roa (raw, json) Hash identifier: 1y08QlcrBptr+w3e4tNDO/Pzo8N0M+mBPqWRKfPilPc= Subject key identifier: 61:E5:95:E7:4A:39:4F:CC:18:97:FB:C1:87:01:29:7B:4E:15:7A:44 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23D3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YeWV50o5T8wYl_vBhwEpe04VekQ.roa Signing time: Mon 10 Feb 2025 14:17:58 +0000 ROA not before: Mon 10 Feb 2025 14:17:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9171 (0x23d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=61E595E74A394FCC1897FBC18701297B4E157A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:53:f0:92:6b:8f:1a:5f:f0:20:f9:a5:f6: 8d:06:65:bf:49:a2:ef:f6:2e:74:82:17:24:8b:90: fc:1a:19:1a:4f:7d:c9:43:09:a4:bc:33:42:e5:00: e3:75:80:66:30:94:6e:89:ad:76:66:47:11:59:e1: b2:7b:09:16:6c:3c:a3:6f:99:2e:55:11:d2:d8:30: 49:64:63:88:8f:ee:61:ff:f6:aa:5c:a5:cf:ba:de: 89:59:19:6e:d3:bd:a1:47:df:22:34:b4:1d:f9:b0: d5:aa:cd:e2:10:29:e6:31:84:ee:0b:9b:38:13:37: 16:25:bf:2c:75:79:fc:1c:a1:a7:ec:d9:62:ad:a5: 68:93:b1:7f:41:0e:86:11:89:8e:3d:5b:d7:c7:57: 82:1e:11:96:d2:7e:81:39:c3:c6:32:3d:15:fe:86: 87:74:27:e8:8a:f7:64:6c:c2:05:80:49:4c:ad:09: a6:22:b8:be:24:10:28:37:a1:93:7f:4f:5d:a3:9d: 52:52:a0:ab:47:da:39:3b:43:1a:b9:c3:d3:ce:7d: d2:9c:54:b6:4f:72:cb:a2:cb:ed:2a:fb:32:ee:21: 05:68:a2:d2:3f:e2:fa:0a:08:63:13:8e:29:99:28: bf:8e:e5:23:37:62:c6:a0:8b:0a:0d:e8:3f:ca:e6: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E5:95:E7:4A:39:4F:CC:18:97:FB:C1:87:01:29:7B:4E:15:7A:44 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YeWV50o5T8wYl_vBhwEpe04VekQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.128.0/21 Signature Algorithm: sha256WithRSAEncryption 69:ea:c3:50:5a:19:44:1d:02:12:a2:32:0c:04:26:0d:ae:1c: 8e:9a:f4:ab:3f:50:ed:30:6a:e3:f1:4d:74:47:4b:e9:7f:b9: d9:0a:0a:cb:ee:f0:7a:5b:90:d1:65:34:32:bc:af:e4:a5:da: cd:ee:1e:be:da:4d:a8:c9:dc:33:02:5b:2a:fd:36:69:4d:37: 9f:28:21:53:e0:a7:da:42:b5:dd:a7:0d:1a:21:89:16:17:d4: ee:b0:ce:19:6f:c5:8f:dc:6e:04:4e:ab:25:a2:de:42:c6:0b: 26:4e:2c:7a:21:5c:8d:d4:7f:a1:34:89:98:8b:d7:ea:67:d9: 88:e3:f8:4a:b5:dd:24:68:d4:2c:53:26:97:0e:86:a4:5d:91: 14:b9:34:b2:7e:70:46:63:2b:f2:47:d1:fe:6d:3f:ef:4a:b9: 0f:69:5a:56:05:8d:ab:e0:46:b4:80:04:f8:65:20:f8:7b:e2: 48:c0:d3:ac:fc:a4:84:8d:21:7f:31:af:fe:e8:67:00:69:4b: 7b:0b:8f:68:f6:12:d7:60:af:80:aa:7d:77:72:41:39:f4:2c: 64:3c:8d:1c:14:5e:4d:40:5c:9c:7e:bb:52:c8:23:f4:84:5e: d8:1e:d9:8c:c1:69:08:75:ae:15:9f:5c:2c:1d:a7:e0:3c:8f: c4:2f:7e:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI9MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxRTU5NUU3NEEzOTRG Q0MxODk3RkJDMTg3MDEyOTdCNEUxNTdBNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2aVPwkmuPGl/wIPml9o0GZb9Jou/2LnSCFySLkPwaGRpPfclD CaS8M0LlAON1gGYwlG6JrXZmRxFZ4bJ7CRZsPKNvmS5VEdLYMElkY4iP7mH/9qpc pc+63olZGW7TvaFH3yI0tB35sNWqzeIQKeYxhO4LmzgTNxYlvyx1efwcoafs2WKt pWiTsX9BDoYRiY49W9fHV4IeEZbSfoE5w8YyPRX+hod0J+iK92RswgWASUytCaYi uL4kECg3oZN/T12jnVJSoKtH2jk7Qxq5w9POfdKcVLZPcsuiy+0q+zLuIQVootI/ 4voKCGMTjimZKL+O5SM3YsagiwoN6D/K5jjlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYeWV50o5T8wYl/vBhwEpe04VekQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1llV1Y1MG81VDh3WWxfdkJo d0VwZTA0VmVrUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n4AwDQYJKoZIhvcNAQELBQADggEBAGnqw1BaGUQdAhKiMgwEJg2uHI6a9Ks/UO0w auPxTXRHS+l/udkKCsvu8HpbkNFlNDK8r+Sl2s3uHr7aTajJ3DMCWyr9NmlNN58o IVPgp9pCtd2nDRohiRYX1O6wzhlvxY/cbgROqyWi3kLGCyZOLHohXI3Uf6E0iZiL 1+pn2Yjj+Eq13SRo1CxTJpcOhqRdkRS5NLJ+cEZjK/JH0f5tP+9KuQ9pWlYFjavg RrSABPhlIPh74kjA06z8pISNIX8xr/7oZwBpS3sLj2j2Etdgr4CqfXdyQTn0LGQ8 jRwUXk1AXJx+u1LII/SEXtge2YzBaQh1rhWfXCwdp+A8j8QvfiQ= -----END CERTIFICATE-----Generated at Thu Apr 17 21:08:37 2025 by rpki-client