$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aWF-xT8vdO2ZoZYW3gzlf2RP030.roa File: aWF-xT8vdO2ZoZYW3gzlf2RP030.roa (raw, json) Hash identifier: Xnw8iZsRNBKnFbUP1VYDRSNwq06hpRJbX8KixE4E0M8= Subject key identifier: 69:61:7E:C5:3F:2F:74:ED:99:A1:96:16:DE:0C:E5:7F:64:4F:D3:7D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 235D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aWF-xT8vdO2ZoZYW3gzlf2RP030.roa Signing time: Mon 10 Feb 2025 14:17:31 +0000 ROA not before: Mon 10 Feb 2025 14:17:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9053 (0x235d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=69617EC53F2F74ED99A19616DE0CE57F644FD37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:16:a5:be:f6:c1:9a:91:03:e1:8a:99:08: 50:b5:33:94:12:17:6a:37:b4:0e:fd:48:97:c0:12: d9:18:7a:e8:8c:36:a9:be:ba:de:69:f1:77:2b:b7: 4d:c5:27:5a:cf:6a:b3:a4:95:80:01:b2:20:ea:54: 1e:86:dd:87:d1:f9:f5:44:74:c8:7d:e6:33:28:64: fd:dd:7d:c5:fe:76:91:4d:8a:42:aa:f1:13:41:17: e2:80:1a:fd:dd:ea:15:91:b1:b1:67:fd:8c:c5:f7: 4a:ff:75:c4:d3:26:8e:54:12:83:d9:fb:53:0d:29: 60:01:5d:e0:20:bd:ff:ba:4b:e8:8b:36:18:8b:d3: 6d:11:b2:37:48:d5:8d:a2:a0:b4:68:fa:bd:ea:10: da:ce:20:ce:38:0b:d1:8a:2c:0c:dc:28:3a:7f:e6: e7:1f:41:00:df:52:a1:55:d2:d9:a9:a4:99:24:c4: 3d:48:17:7d:fb:3b:1d:d9:3e:11:ce:63:3f:02:ee: 38:87:65:5e:d5:64:a6:53:f9:6f:0c:d3:b3:57:8a: a7:55:ec:5c:20:2b:12:29:70:db:61:5b:ac:2e:a2: ef:a7:44:ca:05:8d:31:3c:a8:cc:03:74:63:97:5a: 84:c4:97:81:78:32:05:50:06:fa:95:14:1d:9c:7f: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:61:7E:C5:3F:2F:74:ED:99:A1:96:16:DE:0C:E5:7F:64:4F:D3:7D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aWF-xT8vdO2ZoZYW3gzlf2RP030.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.147.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:92:9c:12:1b:17:cc:1e:dc:2a:65:b9:49:b1:64:8a:0f:17: 26:b6:22:31:28:e4:94:b4:1a:03:d8:6b:de:9b:e2:ec:f5:dd: 42:41:71:f3:3e:64:70:80:f0:a5:ce:4f:3d:23:cd:2a:29:38: 44:59:03:cc:eb:12:2f:0c:34:6f:a7:ab:46:45:00:c7:6f:43: 14:91:af:ea:8c:cb:c9:3d:21:08:e9:3b:c3:46:b6:6e:3d:ca: 40:ab:6d:ab:79:96:e3:73:bd:a2:e3:07:c7:50:bd:8a:e5:60: 20:b9:e8:d3:bd:a3:2d:da:68:9a:5d:ac:f3:be:00:c6:1a:be: d1:f8:77:c2:d2:b8:9a:7c:fb:27:84:c9:cb:ce:c3:bd:03:94: e3:82:19:a8:88:fd:20:39:0e:cf:07:fd:51:1f:01:4f:5a:4c: 4c:b2:e4:c6:e0:53:d4:14:2e:1b:e9:c1:51:2a:6f:02:cd:3a: a3:08:75:b9:2b:42:29:81:a3:92:dc:82:45:5f:33:4a:be:c1: 87:3d:5b:c5:fd:3d:ad:64:b3:5a:78:85:32:14:c4:68:d2:bf: 97:e7:77:30:66:88:57:1b:fb:62:51:db:e3:80:b9:46:d3:1a: 4b:fb:2e:26:37:29:34:95:28:f3:b7:f3:3e:d2:a5:0e:f8:99: 50:8b:63:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY5NjE3RUM1M0YyRjc0 RUQ5OUExOTYxNkRFMENFNTdGNjQ0RkQzN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDaxalvvbBmpED4YqZCFC1M5QSF2o3tA79SJfAEtkYeuiMNqm+ ut5p8Xcrt03FJ1rParOklYABsiDqVB6G3YfR+fVEdMh95jMoZP3dfcX+dpFNikKq 8RNBF+KAGv3d6hWRsbFn/YzF90r/dcTTJo5UEoPZ+1MNKWABXeAgvf+6S+iLNhiL 020RsjdI1Y2ioLRo+r3qENrOIM44C9GKLAzcKDp/5ucfQQDfUqFV0tmppJkkxD1I F337Ox3ZPhHOYz8C7jiHZV7VZKZT+W8M07NXiqdV7FwgKxIpcNthW6wuou+nRMoF jTE8qMwDdGOXWoTEl4F4MgVQBvqVFB2cf4wbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaWF+xT8vdO2ZoZYW3gzlf2RP030wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2FXRi14VDh2ZE8yWm9aWVcz Z3psZjJSUDAzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx npMwDQYJKoZIhvcNAQELBQADggEBAC2SnBIbF8we3CpluUmxZIoPFya2IjEo5JS0 GgPYa96b4uz13UJBcfM+ZHCA8KXOTz0jzSopOERZA8zrEi8MNG+nq0ZFAMdvQxSR r+qMy8k9IQjpO8NGtm49ykCrbat5luNzvaLjB8dQvYrlYCC56NO9oy3aaJpdrPO+ AMYavtH4d8LSuJp8+yeEycvOw70DlOOCGaiI/SA5Ds8H/VEfAU9aTEyy5MbgU9QU LhvpwVEqbwLNOqMIdbkrQimBo5LcgkVfM0q+wYc9W8X9Pa1ks1p4hTIUxGjSv5fn dzBmiFcb+2JR2+OAuUbTGkv7LiY3KTSVKPO38z7SpQ74mVCLY9k= -----END CERTIFICATE-----Generated at Tue Apr 22 13:46:02 2025 by rpki-client