$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hZge4KQ-agzErqclxS9Fv33WLds.roa File: hZge4KQ-agzErqclxS9Fv33WLds.roa (raw, json) Hash identifier: zKtM1PSg8800H0y+od5Z19nA0HbeYkEq70v/DQ28Fg4= Subject key identifier: 85:98:1E:E0:A4:3E:6A:0C:C4:AE:A7:25:C5:2F:45:BF:7D:D6:2D:DB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 242B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hZge4KQ-agzErqclxS9Fv33WLds.roa Signing time: Mon 10 Feb 2025 14:18:21 +0000 ROA not before: Mon 10 Feb 2025 14:18:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 49.159.80.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9259 (0x242b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=85981EE0A43E6A0CC4AEA725C52F45BF7DD62DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:a0:34:ec:31:dd:6e:ef:71:1b:f6:21:5f: 9d:28:bc:25:de:36:a5:50:0c:fb:e0:a8:2a:c3:30: bd:52:3f:35:65:ad:7d:c6:b0:e0:d5:1e:e6:83:d6: 61:7f:c9:f4:68:7b:69:a7:d2:ff:7d:c4:3d:18:12: 39:e4:27:2d:6f:3c:ec:17:5a:e5:bd:7d:88:54:d3: bb:7c:23:d4:a0:50:af:c3:5b:00:9b:e8:8d:7d:13: d7:09:25:e8:8d:b0:88:98:49:4b:77:f4:66:88:39: 19:09:b3:64:f4:38:19:d0:b9:5f:2b:1f:eb:16:9f: f7:ea:82:a9:d8:8d:97:4d:c1:e3:ea:0f:49:2d:5c: 9d:dc:ea:61:a1:17:e7:62:28:65:b9:33:f1:bf:58: 66:2c:79:36:e8:59:52:fd:0a:b3:19:f7:0d:ff:46: 10:9a:70:84:34:74:aa:77:52:d5:08:7b:18:47:fa: cf:de:9b:83:f9:af:22:f1:c2:7c:6c:e7:e4:b0:11: cb:43:7b:91:55:d2:92:fe:62:ad:fa:46:92:48:c5: 4e:0b:01:55:c2:90:39:09:69:e1:e5:66:04:cf:27: 43:da:a0:a3:ab:9a:05:96:fc:98:34:2c:15:b6:1a: 71:05:1e:e2:1a:4a:a4:22:e6:b5:73:f4:fd:2c:de: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:1E:E0:A4:3E:6A:0C:C4:AE:A7:25:C5:2F:45:BF:7D:D6:2D:DB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hZge4KQ-agzErqclxS9Fv33WLds.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.80.0/20 Signature Algorithm: sha256WithRSAEncryption 9b:a1:08:18:b8:8d:da:46:a4:00:84:37:b3:89:e8:84:27:0f: 07:84:37:97:6f:19:80:02:eb:fc:14:4e:1f:73:61:e2:e2:64: bd:01:8d:99:e7:ec:23:43:d8:0e:8b:98:79:16:e3:01:40:a7: 60:e5:f4:37:ab:d0:58:f9:8e:d5:15:46:ac:3a:95:f5:6a:43: 81:3f:e6:2e:11:ee:6c:67:2b:4f:9c:48:bf:7a:ea:d4:7f:df: 37:5c:c2:df:68:52:f6:76:4a:95:72:16:70:82:72:b3:30:e7: 51:bf:e2:cd:eb:ea:75:a6:1a:d8:8b:f3:b1:35:03:e7:1c:73: fb:58:11:7d:53:1a:08:55:9f:bb:b3:f3:b2:dc:ec:14:53:fd: e8:6c:6d:af:24:8f:87:60:a9:f4:75:ef:93:cc:a7:36:a2:82: cb:a9:ed:bc:8c:80:00:03:f6:88:0f:b7:b6:14:2b:33:b7:8d: 88:4d:3f:87:70:e0:74:d6:41:fa:24:ac:2a:25:73:ca:87:8b: 93:73:d6:4f:2b:41:10:13:fa:a5:f7:54:f4:7c:54:d3:f2:38: ec:04:45:5a:06:57:fd:42:27:39:e5:79:5c:81:d8:5d:54:2c: b0:37:84:c9:59:3b:66:3b:ea:41:37:e7:fb:51:28:d9:99:ed: 92:7d:f1:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg1OTgxRUUwQTQzRTZB MENDNEFFQTcyNUM1MkY0NUJGN0RENjJEREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbn6A07DHdbu9xG/YhX50ovCXeNqVQDPvgqCrDML1SPzVlrX3G sODVHuaD1mF/yfRoe2mn0v99xD0YEjnkJy1vPOwXWuW9fYhU07t8I9SgUK/DWwCb 6I19E9cJJeiNsIiYSUt39GaIORkJs2T0OBnQuV8rH+sWn/fqgqnYjZdNwePqD0kt XJ3c6mGhF+diKGW5M/G/WGYseTboWVL9CrMZ9w3/RhCacIQ0dKp3UtUIexhH+s/e m4P5ryLxwnxs5+SwEctDe5FV0pL+Yq36RpJIxU4LAVXCkDkJaeHlZgTPJ0PaoKOr mgWW/Jg0LBW2GnEFHuIaSqQi5rVz9P0s3pufAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhZge4KQ+agzErqclxS9Fv33WLdswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2haZ2U0S1EtYWd6RXJxY2x4 UzlGdjMzV0xkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx n1AwDQYJKoZIhvcNAQELBQADggEBAJuhCBi4jdpGpACEN7OJ6IQnDweEN5dvGYAC 6/wUTh9zYeLiZL0BjZnn7CND2A6LmHkW4wFAp2Dl9Der0Fj5jtUVRqw6lfVqQ4E/ 5i4R7mxnK0+cSL966tR/3zdcwt9oUvZ2SpVyFnCCcrMw51G/4s3r6nWmGtiL87E1 A+ccc/tYEX1TGghVn7uz87Lc7BRT/ehsba8kj4dgqfR175PMpzaigsup7byMgAAD 9ogPt7YUKzO3jYhNP4dw4HTWQfokrColc8qHi5Nz1k8rQRAT+qX3VPR8VNPyOOwE RVoGV/1CJznleVyB2F1ULLA3hMlZO2Y76kE35/tRKNmZ7ZJ98YA= -----END CERTIFICATE-----Generated at Thu Apr 17 21:03:48 2025 by rpki-client