$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpK8KicS3bSVEg2Exk9og94nsGo.roa File: YpK8KicS3bSVEg2Exk9og94nsGo.roa (raw, json) Hash identifier: 7yxdu/6vZIxPHn+M9nyo7hgaeOxVyj3tdxIa4V6zKgY= Subject key identifier: 62:92:BC:2A:27:12:DD:B4:95:12:0D:84:C6:4F:68:83:DE:27:B0:6A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2489 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpK8KicS3bSVEg2Exk9og94nsGo.roa Signing time: Mon 10 Feb 2025 14:18:45 +0000 ROA not before: Mon 10 Feb 2025 14:18:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9353 (0x2489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6292BC2A2712DDB495120D84C64F6883DE27B06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:62:ec:9f:43:0b:96:8b:4b:e8:26:b0:a6: 81:83:11:d1:b2:07:ca:e1:72:6d:a2:cf:be:06:c6: fb:7d:51:60:bb:73:3c:0a:d5:cf:b2:04:2b:5c:57: 21:19:d5:7e:9f:56:22:c9:0a:ca:5a:f0:46:10:9c: 04:97:6b:6b:13:77:6f:f3:bc:0c:b2:58:65:a3:79: 29:37:79:68:1b:e4:19:11:fe:49:06:df:7e:58:c5: f2:a9:ad:a8:fc:c9:4c:e1:1d:d3:0a:0a:15:b7:5e: 1e:14:d7:9b:42:f3:8e:c4:63:76:b8:02:3b:40:7d: 36:35:93:cb:2e:43:7e:34:31:dc:90:56:e8:c9:25: 6a:ab:65:a2:e3:8e:e6:ee:67:51:5b:db:76:14:37: fa:f4:66:e3:ee:09:8f:17:34:65:bd:5d:88:36:eb: 4d:65:22:64:96:00:33:98:30:9b:6c:45:4d:d5:ae: 7f:c7:02:53:c2:ae:5c:f3:ca:3c:b3:ae:4b:ff:82: df:06:af:0e:6e:40:34:70:d3:5e:90:d3:bc:d7:8d: e9:6f:81:04:b3:16:68:4f:d9:ba:9b:fd:c5:bd:67: 71:8b:5a:8b:8b:a0:c4:b9:90:ec:7e:25:d9:f0:41: 06:89:28:dd:59:00:8d:68:16:cc:56:dc:83:fc:67: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:92:BC:2A:27:12:DD:B4:95:12:0D:84:C6:4F:68:83:DE:27:B0:6A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpK8KicS3bSVEg2Exk9og94nsGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.8.0/21 Signature Algorithm: sha256WithRSAEncryption 66:c2:5c:e6:da:cb:a7:43:0c:50:4c:18:bc:d3:a1:e4:43:99: 82:85:e3:11:2b:37:b5:8e:f6:71:7c:dc:af:bc:d1:d5:51:60: e7:4f:6b:f0:da:86:2e:05:35:20:75:dd:d0:23:85:f8:c6:96: 10:b7:2d:b2:a4:a8:c7:83:0b:61:d0:5a:b9:c7:4a:88:ed:4a: b5:da:70:ae:28:33:40:19:ee:e5:75:77:ac:50:76:50:21:e7: b6:e9:9d:e9:33:58:9e:35:2e:97:77:6a:d3:98:2f:8a:92:a3: 38:4a:fb:de:9c:cb:a8:eb:7b:4b:a9:30:96:9b:85:04:32:81: 88:2f:6d:8a:de:f2:84:23:be:54:a4:73:eb:24:ba:d2:2a:6b: 25:0d:93:63:fc:a6:00:9c:75:58:ce:ab:cb:e4:b3:7f:b8:57: 8e:5d:48:fc:18:4a:a7:93:94:78:87:f4:3f:c0:fc:90:0d:d5: a2:65:cf:63:a4:80:05:67:d2:a5:3a:c7:d7:c0:7e:40:4e:86: 2b:42:85:a4:67:fa:f7:59:dc:22:b6:c0:1a:d6:10:eb:30:2e: 6f:81:1d:f2:48:24:5e:00:6d:f9:39:db:17:ee:2c:68:9d:a6: c6:0f:63:1b:64:ab:46:4b:7a:74:64:98:6c:23:d2:a3:70:77: 8d:cc:4e:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyOTJCQzJBMjcxMkRE QjQ5NTEyMEQ4NEM2NEY2ODgzREUyN0IwNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7TWLsn0MLlotL6CawpoGDEdGyB8rhcm2iz74Gxvt9UWC7czwK 1c+yBCtcVyEZ1X6fViLJCspa8EYQnASXa2sTd2/zvAyyWGWjeSk3eWgb5BkR/kkG 335YxfKpraj8yUzhHdMKChW3Xh4U15tC847EY3a4AjtAfTY1k8suQ340MdyQVujJ JWqrZaLjjubuZ1Fb23YUN/r0ZuPuCY8XNGW9XYg2601lImSWADOYMJtsRU3Vrn/H AlPCrlzzyjyzrkv/gt8Grw5uQDRw016Q07zXjelvgQSzFmhP2bqb/cW9Z3GLWouL oMS5kOx+JdnwQQaJKN1ZAI1oFsxW3IP8ZzAJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYpK8KicS3bSVEg2Exk9og94nsGowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1lwSzhLaWNTM2JTVkVnMkV4 azlvZzk0bnNHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nwgwDQYJKoZIhvcNAQELBQADggEBAGbCXObay6dDDFBMGLzToeRDmYKF4xErN7WO 9nF83K+80dVRYOdPa/Dahi4FNSB13dAjhfjGlhC3LbKkqMeDC2HQWrnHSojtSrXa cK4oM0AZ7uV1d6xQdlAh57bpnekzWJ41Lpd3atOYL4qSozhK+96cy6jre0upMJab hQQygYgvbYre8oQjvlSkc+skutIqayUNk2P8pgCcdVjOq8vks3+4V45dSPwYSqeT lHiH9D/A/JAN1aJlz2OkgAVn0qU6x9fAfkBOhitChaRn+vdZ3CK2wBrWEOswLm+B HfJIJF4Abfk52xfuLGidpsYPYxtkq0ZLenRkmGwj0qNwd43MTnE= -----END CERTIFICATE-----Generated at Fri Apr 18 16:45:20 2025 by rpki-client