$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gz8uPDGD5-m83VuGPlo4eRgFJQA.roa File: gz8uPDGD5-m83VuGPlo4eRgFJQA.roa (raw, json) Hash identifier: iv3E733m1mHYHASXUl4nnfvyO/U7+AD+j1WbUT/MZnI= Subject key identifier: 83:3F:2E:3C:31:83:E7:E9:BC:DD:5B:86:3E:5A:38:79:18:05:25:00 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24C4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gz8uPDGD5-m83VuGPlo4eRgFJQA.roa Signing time: Mon 10 Feb 2025 14:18:59 +0000 ROA not before: Mon 10 Feb 2025 14:18:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9412 (0x24c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=833F2E3C3183E7E9BCDD5B863E5A387918052500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:2c:0f:b6:bb:44:49:86:74:19:ea:f5:dd: dd:f8:90:f1:b1:61:2b:af:90:65:04:dc:c9:7b:d9: 70:80:67:8c:a1:dc:20:81:d1:27:ae:97:19:c2:23: ff:04:25:ae:4c:80:2a:87:0b:c4:dc:ba:b1:2c:c7: dd:8b:d4:fc:a7:2b:89:a4:d8:c0:31:86:30:a5:a3: 91:16:2a:c7:9c:67:12:72:16:dd:30:29:bb:3f:4e: 74:d5:2c:bc:ca:10:50:c8:a4:bf:07:07:39:55:0b: e0:2d:fa:32:43:0f:85:80:c4:f5:44:e2:4a:be:80: 16:ce:85:b3:6a:6c:8b:78:75:72:50:54:6d:b1:f6: ad:ca:43:ed:65:e9:b3:e5:17:36:e4:ab:41:bf:e7: 30:d4:6b:37:42:20:fe:e9:62:23:73:3c:16:31:82: 2d:f7:4a:2f:6b:1e:48:12:bd:6c:eb:88:e7:e1:de: ff:02:4b:57:b9:92:74:50:c7:24:c6:12:ea:15:eb: 58:4e:4b:ce:3c:6a:f3:78:da:ff:54:76:2b:21:cb: b4:0e:2b:6b:49:01:f0:27:af:d4:5b:3c:a4:d8:cb: 5f:79:bb:f8:d5:23:ae:1f:8a:a3:ca:eb:4e:32:13: 57:c4:be:39:bb:ba:41:2c:40:c4:3a:49:a9:c6:6f: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3F:2E:3C:31:83:E7:E9:BC:DD:5B:86:3E:5A:38:79:18:05:25:00 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gz8uPDGD5-m83VuGPlo4eRgFJQA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.232.0/21 Signature Algorithm: sha256WithRSAEncryption 28:fb:86:1c:ec:d5:0b:7d:86:bb:1f:02:be:e7:47:2d:dd:8e: 11:61:e1:8d:99:ec:f0:e7:cb:81:99:b4:d7:31:08:93:11:10: e2:fb:fb:18:0d:90:a4:e2:3a:37:1e:6c:f7:24:a6:48:a4:8c: 80:a9:92:6e:33:89:e6:e1:3d:6d:b7:89:d2:f4:3a:ec:a5:fd: 44:3b:20:ef:3f:0d:02:ed:a2:18:d5:78:0a:3b:dd:89:21:9d: 4a:1c:29:93:a1:50:0d:16:95:49:91:82:2f:47:0e:e0:4d:ce: 45:79:f0:50:17:64:58:d5:65:13:4a:a0:be:c3:ef:e0:2e:ac: 2f:88:21:bc:de:c0:cc:31:bc:b7:02:e5:b4:5c:89:13:83:d8: 55:68:43:f7:95:9b:ce:0c:48:bb:7c:55:37:80:88:e8:42:d2: 52:f0:24:51:21:ca:e2:89:3a:0f:44:59:57:54:09:05:01:40: 94:cd:3f:2d:ca:c3:8a:8f:80:62:b9:16:16:89:b5:cf:43:6c: e0:56:23:31:71:8f:2c:e9:52:44:2b:84:38:b8:e7:4f:b2:90: ae:c8:4c:93:c8:7c:c4:04:5c:e7:7e:22:c0:62:a1:59:f1:20: 47:7e:53:1b:cb:66:f7:63:f4:01:15:2a:3a:66:c1:6b:8c:90: fa:21:5b:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgzM0YyRTNDMzE4M0U3 RTlCQ0RENUI4NjNFNUEzODc5MTgwNTI1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRAiwPtrtESYZ0Ger13d34kPGxYSuvkGUE3Ml72XCAZ4yh3CCB 0SeulxnCI/8EJa5MgCqHC8TcurEsx92L1PynK4mk2MAxhjClo5EWKsecZxJyFt0w Kbs/TnTVLLzKEFDIpL8HBzlVC+At+jJDD4WAxPVE4kq+gBbOhbNqbIt4dXJQVG2x 9q3KQ+1l6bPlFzbkq0G/5zDUazdCIP7pYiNzPBYxgi33Si9rHkgSvWzriOfh3v8C S1e5knRQxyTGEuoV61hOS848avN42v9Udishy7QOK2tJAfAnr9RbPKTYy195u/jV I64fiqPK604yE1fEvjm7ukEsQMQ6SanGbzXjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgz8uPDGD5+m83VuGPlo4eRgFJQAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2d6OHVQREdENS1tODNWdUdQ bG80ZVJnRkpRQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n+gwDQYJKoZIhvcNAQELBQADggEBACj7hhzs1Qt9hrsfAr7nRy3djhFh4Y2Z7PDn y4GZtNcxCJMREOL7+xgNkKTiOjcebPckpkikjICpkm4ziebhPW23idL0Ouyl/UQ7 IO8/DQLtohjVeAo73YkhnUocKZOhUA0WlUmRgi9HDuBNzkV58FAXZFjVZRNKoL7D 7+AurC+IIbzewMwxvLcC5bRciROD2FVoQ/eVm84MSLt8VTeAiOhC0lLwJFEhyuKJ Og9EWVdUCQUBQJTNPy3Kw4qPgGK5FhaJtc9DbOBWIzFxjyzpUkQrhDi450+ykK7I TJPIfMQEXOd+IsBioVnxIEd+UxvLZvdj9AEVKjpmwWuMkPohW8g= -----END CERTIFICATE-----Generated at Fri Apr 18 16:31:06 2025 by rpki-client