$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZrdZc4YTYDFNEM-2wXq-iabWVKU.roa File: ZrdZc4YTYDFNEM-2wXq-iabWVKU.roa (raw, json) Hash identifier: 8shNSk+f0bqE4sEdsUOHcbsqcqqCWtRF7dtz99XmmfY= Subject key identifier: 66:B7:59:73:86:13:60:31:4D:10:CF:B6:C1:7A:BE:89:A6:D6:54:A5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 242F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZrdZc4YTYDFNEM-2wXq-iabWVKU.roa Signing time: Mon 10 Feb 2025 14:18:22 +0000 ROA not before: Mon 10 Feb 2025 14:18:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9263 (0x242f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=66B75973861360314D10CFB6C17ABE89A6D654A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:df:31:b4:a7:3d:ba:0b:4b:e4:93:e4:1d: 2f:7f:15:da:17:ce:be:c9:11:8f:fd:47:d7:03:1d: 69:b7:d4:1b:bf:77:7b:93:7c:12:8a:cb:1e:bc:fd: 86:97:7f:ed:ba:bd:96:15:f8:d8:5b:f0:44:81:d9: 52:68:49:89:96:ba:9b:41:18:a2:7a:40:4c:e9:4c: 76:05:36:0d:7e:b8:21:9a:7b:b5:ce:b7:bd:bd:ca: da:2e:66:0e:87:c6:15:86:1d:b9:21:76:55:f2:6a: 19:1d:8d:9f:97:85:8f:46:a9:61:82:e9:27:6a:d1: 90:5b:12:82:a0:93:6f:2e:8c:3f:84:01:1e:ff:62: e8:2d:ac:09:4c:ee:4f:7d:ab:60:ab:64:1c:72:b0: 32:36:79:ca:60:f7:ef:94:af:5f:db:3d:94:1e:88: 3a:3a:52:e9:81:4f:75:8c:27:b1:41:a1:37:e2:f2: 3e:96:07:00:80:71:24:08:a9:f1:d6:f0:6e:e3:53: 6c:a3:00:19:39:23:cf:42:17:89:52:d0:f0:8d:4d: 87:62:15:65:07:5d:98:44:cf:b6:18:b6:36:85:eb: a5:62:66:98:62:31:c1:fd:86:18:16:b9:c9:f8:7f: 81:0d:c3:70:60:3a:6b:20:78:ee:37:d3:68:95:da: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B7:59:73:86:13:60:31:4D:10:CF:B6:C1:7A:BE:89:A6:D6:54:A5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZrdZc4YTYDFNEM-2wXq-iabWVKU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.48.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:5f:e9:2f:38:e4:b6:aa:4e:4a:d5:cf:fd:06:b7:47:9b:03: 0c:94:8a:5e:3f:6f:96:98:43:67:18:88:16:07:a4:46:a8:ee: 03:fa:d4:d4:92:d5:d9:38:ec:eb:ef:58:af:b5:3d:c1:c1:81: 11:03:1c:7b:a0:18:2b:b2:8b:71:71:6e:83:77:25:25:1c:a5: 00:72:70:79:c0:e8:53:03:5e:61:a1:55:63:32:de:8d:1a:b6: 29:7e:9d:df:70:62:f6:5c:0d:00:c9:5b:40:8d:51:52:7e:66: ff:27:03:6b:a9:52:00:28:d6:8d:48:6a:8d:b2:77:fc:b6:4c: 26:83:73:14:9d:d9:73:51:c1:90:a4:b3:ca:c5:52:a1:3e:21: 06:47:ef:32:32:4f:ca:01:ce:4b:75:9a:27:e9:c0:95:16:4c: b7:fe:bb:03:89:17:49:a7:e0:89:02:f7:e9:96:13:a6:f1:49: 7c:88:79:66:07:6c:8d:da:91:d8:7c:b8:0c:81:b6:df:5c:a4: 68:73:e6:36:4b:71:19:1c:c7:8c:12:30:a1:8f:9f:b9:b5:d9: 28:ad:7b:f2:c4:e9:34:dc:62:b4:14:80:c7:a4:8c:2f:17:0d: e7:73:db:aa:4d:1d:df:81:32:34:f3:75:bb:77:18:0a:2d:d9: 76:a0:c2:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2Qjc1OTczODYxMzYw MzE0RDEwQ0ZCNkMxN0FCRTg5QTZENjU0QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDah98xtKc9ugtL5JPkHS9/FdoXzr7JEY/9R9cDHWm31Bu/d3uT fBKKyx68/YaXf+26vZYV+Nhb8ESB2VJoSYmWuptBGKJ6QEzpTHYFNg1+uCGae7XO t729ytouZg6HxhWGHbkhdlXyahkdjZ+XhY9GqWGC6Sdq0ZBbEoKgk28ujD+EAR7/ YugtrAlM7k99q2CrZBxysDI2ecpg9++Ur1/bPZQeiDo6UumBT3WMJ7FBoTfi8j6W BwCAcSQIqfHW8G7jU2yjABk5I89CF4lS0PCNTYdiFWUHXZhEz7YYtjaF66ViZphi McH9hhgWucn4f4ENw3BgOmsgeO4302iV2s5nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZrdZc4YTYDFNEM+2wXq+iabWVKUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1pyZFpjNFlUWURGTkVNLTJ3 WHEtaWFiV1ZLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx njAwDQYJKoZIhvcNAQELBQADggEBAAtf6S845LaqTkrVz/0Gt0ebAwyUil4/b5aY Q2cYiBYHpEao7gP61NSS1dk47OvvWK+1PcHBgREDHHugGCuyi3FxboN3JSUcpQBy cHnA6FMDXmGhVWMy3o0atil+nd9wYvZcDQDJW0CNUVJ+Zv8nA2upUgAo1o1Iao2y d/y2TCaDcxSd2XNRwZCks8rFUqE+IQZH7zIyT8oBzkt1mifpwJUWTLf+uwOJF0mn 4IkC9+mWE6bxSXyIeWYHbI3akdh8uAyBtt9cpGhz5jZLcRkcx4wSMKGPn7m12Sit e/LE6TTcYrQUgMekjC8XDedz26pNHd+BMjTzdbt3GAot2Xagwmo= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:40 2025 by rpki-client