$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cQgErzVODlU4N8V8FNwjv2agaN0.roa File: cQgErzVODlU4N8V8FNwjv2agaN0.roa (raw, json) Hash identifier: qy9NUxQc9hIm8RUSwsAMPFbGg7TnPGFlfzrosSTlzhc= Subject key identifier: 71:08:04:AF:35:4E:0E:55:38:37:C5:7C:14:DC:23:BF:66:A0:68:DD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 249A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cQgErzVODlU4N8V8FNwjv2agaN0.roa Signing time: Mon 10 Feb 2025 14:18:48 +0000 ROA not before: Mon 10 Feb 2025 14:18:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9370 (0x249a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=710804AF354E0E553837C57C14DC23BF66A068DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:e1:86:6c:5c:44:40:5a:a6:57:7a:a4:fd: 46:95:b9:42:1e:6b:91:f3:e3:19:30:11:84:76:77: b5:f7:94:8c:18:5a:c9:47:d5:a3:9c:c7:27:78:66: 32:65:e3:53:46:6a:b9:4e:f8:7b:b2:3a:4a:0e:87: 7c:e2:7f:2e:41:de:2d:d8:60:aa:58:bc:1c:55:28: 4b:ba:c0:03:78:00:bd:0e:6a:4c:79:46:1d:79:da: 84:0d:64:15:cd:25:58:b0:b0:6d:07:52:03:5f:1a: df:9c:d0:92:61:c1:3a:19:39:3e:ea:fc:e2:84:90: 23:b8:d0:a7:d9:5f:5c:78:2c:ae:ba:75:f0:fd:75: a8:fd:fd:a6:c0:d6:19:d0:0b:b8:71:21:fb:ed:75: 0f:77:72:f1:35:09:35:20:b9:5d:8a:3d:bc:8c:6c: a2:41:43:84:8f:a9:24:1b:3a:7d:8c:3a:af:d0:ec: 30:26:83:bd:71:59:40:9a:4d:dc:44:05:af:08:d0: 1a:36:f3:a4:b4:05:6f:72:6c:b5:f9:1c:8f:de:2d: 9d:e8:d4:16:ae:fa:74:d1:be:07:d8:89:f6:51:a6: c4:bc:a7:30:4a:be:69:cb:ae:08:98:08:3a:1a:03: 02:06:19:c7:8f:61:ac:87:6a:1c:7a:64:cd:fb:b6: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:08:04:AF:35:4E:0E:55:38:37:C5:7C:14:DC:23:BF:66:A0:68:DD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cQgErzVODlU4N8V8FNwjv2agaN0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.16.0/21 Signature Algorithm: sha256WithRSAEncryption 64:ff:79:26:7e:f2:c3:64:be:85:c5:7d:cc:33:c0:f8:43:97: 1b:9c:25:e2:20:cb:78:eb:24:4a:31:77:06:50:be:d6:68:f5: 34:c0:a0:60:b5:83:6f:c5:46:40:84:71:08:66:f7:fa:8b:dd: 6f:69:63:bb:21:da:30:a9:af:61:70:1e:7f:5d:50:e5:8b:39: ff:6e:14:e5:01:92:ae:ab:aa:f2:46:76:40:76:67:d7:24:7f: 31:c3:7c:c9:b9:ef:40:26:cc:39:7d:e9:2f:d7:24:bb:1a:54: 81:d4:7f:8a:76:bb:79:cf:97:c5:a8:a1:a8:5d:36:0d:59:97: 27:70:35:ba:61:88:25:8a:99:64:1e:c0:33:25:4c:96:f8:ff: ad:13:95:d9:29:1b:dc:b1:45:d7:52:7a:be:bc:2a:3a:50:1b: 71:97:91:fb:44:da:31:9c:c5:78:b1:f1:e3:02:2e:e7:8b:e0: f3:31:96:96:86:35:5d:f5:85:3a:50:26:0b:16:2b:82:53:7c: ea:a2:34:b1:a5:b0:ae:d5:bf:82:d2:2a:d1:a9:fe:29:bb:d4: 6e:f5:2e:52:40:1a:c2:f2:62:26:da:80:83:00:ce:46:c8:79: e5:ab:ac:84:b6:0d:63:f2:ae:03:fc:2f:05:75:0f:4c:45:00: d6:c5:e7:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxMDgwNEFGMzU0RTBF NTUzODM3QzU3QzE0REMyM0JGNjZBMDY4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7VOGGbFxEQFqmV3qk/UaVuUIea5Hz4xkwEYR2d7X3lIwYWslH 1aOcxyd4ZjJl41NGarlO+HuyOkoOh3zify5B3i3YYKpYvBxVKEu6wAN4AL0Oakx5 Rh152oQNZBXNJViwsG0HUgNfGt+c0JJhwToZOT7q/OKEkCO40KfZX1x4LK66dfD9 daj9/abA1hnQC7hxIfvtdQ93cvE1CTUguV2KPbyMbKJBQ4SPqSQbOn2MOq/Q7DAm g71xWUCaTdxEBa8I0Bo286S0BW9ybLX5HI/eLZ3o1Bau+nTRvgfYifZRpsS8pzBK vmnLrgiYCDoaAwIGGcePYayHahx6ZM37tkJpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcQgErzVODlU4N8V8FNwjv2agaN0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NRZ0VyelZPRGxVNE44VjhG TndqdjJhZ2FOMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nxAwDQYJKoZIhvcNAQELBQADggEBAGT/eSZ+8sNkvoXFfcwzwPhDlxucJeIgy3jr JEoxdwZQvtZo9TTAoGC1g2/FRkCEcQhm9/qL3W9pY7sh2jCpr2FwHn9dUOWLOf9u FOUBkq6rqvJGdkB2Z9ckfzHDfMm570AmzDl96S/XJLsaVIHUf4p2u3nPl8Wooahd Ng1ZlydwNbphiCWKmWQewDMlTJb4/60TldkpG9yxRddSer68KjpQG3GXkftE2jGc xXix8eMCLueL4PMxlpaGNV31hTpQJgsWK4JTfOqiNLGlsK7Vv4LSKtGp/im71G71 LlJAGsLyYibagIMAzkbIeeWrrIS2DWPyrgP8LwV1D0xFANbF56Q= -----END CERTIFICATE-----Generated at Fri Apr 18 16:43:28 2025 by rpki-client