$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e1mWxX32Lnd4tGP0OpHUIMDOGhw.roa File: e1mWxX32Lnd4tGP0OpHUIMDOGhw.roa (raw, json) Hash identifier: k/0oTimXXuUbob0Xg/u2ukViyh+apbK+Cd9Q8LULtCg= Subject key identifier: 7B:59:96:C5:7D:F6:2E:77:78:B4:63:F4:3A:91:D4:20:C0:CE:1A:1C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2364 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e1mWxX32Lnd4tGP0OpHUIMDOGhw.roa Signing time: Mon 10 Feb 2025 14:17:33 +0000 ROA not before: Mon 10 Feb 2025 14:17:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9060 (0x2364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7B5996C57DF62E7778B463F43A91D420C0CE1A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:c2:d8:7b:30:d4:c1:8a:26:ae:35:21:4c: 7f:53:66:46:e7:e2:6d:6d:f8:f2:dc:cf:ff:95:38: 33:ae:cc:61:95:d4:1b:7b:39:60:0a:a0:cd:01:aa: 54:8a:f0:77:34:5e:c3:78:6e:21:d9:7b:5b:3e:ce: 9f:b2:25:16:39:32:dc:0a:66:a3:f3:7b:dc:32:ab: f1:14:1c:f3:f0:6f:64:71:1b:1d:0f:25:09:53:b4: 08:2e:88:bd:30:69:91:3f:91:96:0b:09:47:f8:55: 10:5b:20:9e:ef:fe:55:95:dc:32:2d:f1:f4:b5:f9: c7:63:f9:d1:0f:7c:cc:3b:78:2c:8c:e9:4f:35:86: 85:48:30:a1:58:59:af:50:4c:ca:2c:0a:d1:69:e4: 6f:cb:63:e9:19:bf:29:7f:df:7b:b0:31:ca:6f:da: c3:24:0c:e5:41:9e:41:1c:0b:7b:22:4c:ce:12:7b: f5:f9:72:66:e9:bf:ac:b4:45:ef:2c:b2:a3:fb:0f: 39:bc:e0:b9:8b:98:cf:f1:6d:a6:61:2b:f0:53:60: 28:3c:c7:1a:af:ef:bd:e8:51:bb:5a:3b:0c:9e:28: f7:54:ca:68:ec:02:b2:4d:af:3f:c0:3e:33:26:d3: 6c:cd:02:78:1c:02:ae:53:2b:27:cc:30:e3:9e:9e: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:96:C5:7D:F6:2E:77:78:B4:63:F4:3A:91:D4:20:C0:CE:1A:1C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e1mWxX32Lnd4tGP0OpHUIMDOGhw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.61.0/24 Signature Algorithm: sha256WithRSAEncryption 09:68:70:88:94:42:38:91:27:5d:3b:2b:d2:f4:77:06:63:89: 65:63:d4:d1:54:3c:fb:47:b8:12:a3:1b:a9:37:0e:90:d9:10: 36:9c:0a:89:92:f3:e3:6d:b9:e4:4d:f3:ec:22:99:0b:0e:63: b5:de:76:fe:23:e4:e9:3c:39:b5:66:2f:e7:f3:02:3e:f3:30: e1:ed:f2:6a:ec:a6:2f:fc:9f:d9:54:c9:cb:9d:59:52:f7:e6: 47:6d:30:6c:7c:ca:26:d6:7e:0d:ac:54:78:7b:34:10:76:ab: 7d:67:7b:45:dc:5f:28:61:15:a4:d8:2e:de:eb:c6:7d:dd:3c: bb:31:90:8d:5f:be:c5:a8:05:2c:18:72:1c:f5:b4:a9:d6:34: c5:23:71:2e:05:55:fc:99:2f:82:28:5a:4a:ca:0e:a2:08:00: 1e:ef:3c:7c:c4:15:2b:53:e9:e9:83:e2:48:6e:87:e3:02:42: 12:11:3d:6b:4a:34:c1:2d:4d:41:5b:8b:95:4c:17:33:45:5a: d0:00:e6:bd:9f:63:fb:31:3b:95:a9:37:05:90:2e:2b:d0:8d: ce:35:14:f9:c0:8e:35:85:c6:0b:de:9f:4c:ce:93:57:9e:98: f5:0c:6d:82:8b:5d:87:13:4a:89:13:bd:08:d3:7d:d6:d7:73: cb:d2:1f:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCNTk5NkM1N0RGNjJF Nzc3OEI0NjNGNDNBOTFENDIwQzBDRTFBMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6W8LYezDUwYomrjUhTH9TZkbn4m1t+PLcz/+VODOuzGGV1Bt7 OWAKoM0BqlSK8Hc0XsN4biHZe1s+zp+yJRY5MtwKZqPze9wyq/EUHPPwb2RxGx0P JQlTtAguiL0waZE/kZYLCUf4VRBbIJ7v/lWV3DIt8fS1+cdj+dEPfMw7eCyM6U81 hoVIMKFYWa9QTMosCtFp5G/LY+kZvyl/33uwMcpv2sMkDOVBnkEcC3siTM4Se/X5 cmbpv6y0Re8ssqP7Dzm84LmLmM/xbaZhK/BTYCg8xxqv773oUbtaOwyeKPdUymjs ArJNrz/APjMm02zNAngcAq5TKyfMMOOenqHLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUe1mWxX32Lnd4tGP0OpHUIMDOGhwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2UxbVd4WDMyTG5kNHRHUDBP cEhVSU1ET0dody5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx nj0wDQYJKoZIhvcNAQELBQADggEBAAlocIiUQjiRJ107K9L0dwZjiWVj1NFUPPtH uBKjG6k3DpDZEDacComS8+NtueRN8+wimQsOY7Xedv4j5Ok8ObVmL+fzAj7zMOHt 8mrspi/8n9lUycudWVL35kdtMGx8yibWfg2sVHh7NBB2q31ne0XcXyhhFaTYLt7r xn3dPLsxkI1fvsWoBSwYchz1tKnWNMUjcS4FVfyZL4IoWkrKDqIIAB7vPHzEFStT 6emD4khuh+MCQhIRPWtKNMEtTUFbi5VMFzNFWtAA5r2fY/sxO5WpNwWQLivQjc41 FPnAjjWFxgven0zOk1eemPUMbYKLXYcTSokTvQjTfdbXc8vSHwE= -----END CERTIFICATE-----Generated at Thu Apr 17 21:01:02 2025 by rpki-client