$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hICYawar_kStORVzbgmDNfVHfUw.roa File: hICYawar_kStORVzbgmDNfVHfUw.roa (raw, json) Hash identifier: 8FyXuNOZfN/fKwvXrMwFjaotqkze2dsLn9HXauMTnRc= Subject key identifier: 84:80:98:6B:06:AB:FE:44:AD:39:15:73:6E:09:83:35:F5:47:7D:4C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2429 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hICYawar_kStORVzbgmDNfVHfUw.roa Signing time: Mon 10 Feb 2025 14:18:20 +0000 ROA not before: Mon 10 Feb 2025 14:18:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9257 (0x2429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8480986B06ABFE44AD3915736E098335F5477D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:9b:6f:b0:a0:9d:69:43:c3:3f:d9:4c:f4: 57:10:b6:03:94:e7:e5:e9:f4:74:3b:a7:ce:b0:eb: db:08:53:06:e9:31:57:b5:44:70:5d:1c:52:a4:e5: d7:8c:c5:9a:46:4a:1b:ec:c5:ad:78:fd:04:77:2b: 8a:cb:16:57:1c:f4:7c:a8:ce:0c:74:f5:14:f9:d3: 14:5b:45:4b:4f:83:5d:f9:79:da:a2:2a:8a:e2:d6: 4b:f6:9b:6f:bb:77:d2:ec:06:4a:6d:ae:bd:e1:29: ad:1d:63:06:b4:ac:2b:99:17:24:cd:67:5e:d2:5c: 5f:ef:ce:6a:1c:d9:3f:e0:de:be:f0:1b:fc:3f:bd: d5:69:90:43:8a:30:60:be:13:52:44:53:1d:e8:c0: d9:bb:f6:01:05:dc:d9:5a:98:f6:40:6e:e9:4f:d6: 52:ac:b2:4f:0c:e7:6f:88:50:ae:76:35:b7:50:86: 54:9b:76:82:dd:2e:c7:f6:ee:12:8b:b7:fe:b7:af: ab:57:ea:1f:fa:e6:c6:bc:7a:97:02:5e:7e:39:e1: f9:d3:69:f3:73:f3:3b:56:02:65:c6:58:e3:5b:6e: b4:2e:f4:a9:3b:e6:32:46:83:c5:5d:05:76:91:e4: 83:2c:6e:f6:57:2e:46:79:e6:8c:47:46:d9:82:28: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:80:98:6B:06:AB:FE:44:AD:39:15:73:6E:09:83:35:F5:47:7D:4C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hICYawar_kStORVzbgmDNfVHfUw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.112.0/21 Signature Algorithm: sha256WithRSAEncryption 78:d4:73:4b:a6:e3:e2:fe:c9:e4:13:01:c8:a2:93:e6:46:02: 06:e7:26:51:78:67:d0:0b:31:54:73:e9:52:bc:8a:6c:08:10: aa:5e:11:b3:bc:e3:36:5c:3b:23:32:9b:08:17:ae:6a:78:b7: 8f:33:0c:62:a0:66:91:9d:82:03:eb:24:cd:fa:3b:7f:b9:fe: 18:97:3b:51:18:1f:05:35:11:fd:55:39:c1:31:2b:6f:ae:07: 8e:ef:a8:ed:14:81:87:f4:fb:24:68:ad:51:7c:5d:fb:ae:21: 86:b0:bd:ba:3a:be:1a:30:3f:6e:d5:68:32:b6:72:f1:2a:e5: f9:c9:36:a5:6c:18:2f:1d:2d:25:01:84:7e:57:b2:8a:91:7b: 34:95:c5:c6:b2:a0:c3:6a:9d:71:79:9c:3b:47:58:4b:ca:78: d6:82:5f:8b:29:ee:53:1a:8d:39:e5:85:c7:47:39:ec:1e:27: 8d:f4:f4:56:7d:15:dc:35:2e:17:36:bb:50:1d:86:6e:f0:a2: 25:d2:78:d1:fc:85:93:2e:e3:70:75:ab:6d:12:89:20:e5:bd: d8:e3:64:ca:9f:e4:6b:7a:87:85:39:cc:f9:ff:e0:67:55:c5: 41:9a:ff:39:c9:4a:67:b6:11:e3:5d:48:d1:01:28:2d:5b:48: 5b:e7:8a:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0ODA5ODZCMDZBQkZF NDRBRDM5MTU3MzZFMDk4MzM1RjU0NzdENEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+p5tvsKCdaUPDP9lM9FcQtgOU5+Xp9HQ7p86w69sIUwbpMVe1 RHBdHFKk5deMxZpGShvsxa14/QR3K4rLFlcc9Hyozgx09RT50xRbRUtPg135edqi Kori1kv2m2+7d9LsBkptrr3hKa0dYwa0rCuZFyTNZ17SXF/vzmoc2T/g3r7wG/w/ vdVpkEOKMGC+E1JEUx3owNm79gEF3NlamPZAbulP1lKssk8M52+IUK52NbdQhlSb doLdLsf27hKLt/63r6tX6h/65sa8epcCXn454fnTafNz8ztWAmXGWONbbrQu9Kk7 5jJGg8VdBXaR5IMsbvZXLkZ55oxHRtmCKD+PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhICYawar/kStORVzbgmDNfVHfUwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hJQ1lhd2FyX2tTdE9SVnpi Z21ETmZWSGZVdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n3AwDQYJKoZIhvcNAQELBQADggEBAHjUc0um4+L+yeQTAciik+ZGAgbnJlF4Z9AL MVRz6VK8imwIEKpeEbO84zZcOyMymwgXrmp4t48zDGKgZpGdggPrJM36O3+5/hiX O1EYHwU1Ef1VOcExK2+uB47vqO0UgYf0+yRorVF8XfuuIYawvbo6vhowP27VaDK2 cvEq5fnJNqVsGC8dLSUBhH5XsoqRezSVxcayoMNqnXF5nDtHWEvKeNaCX4sp7lMa jTnlhcdHOeweJ4309FZ9Fdw1Lhc2u1Adhm7woiXSeNH8hZMu43B1q20SiSDlvdjj ZMqf5Gt6h4U5zPn/4GdVxUGa/znJSme2EeNdSNEBKC1bSFvnivg= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:16 2025 by rpki-client