$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jOm4T8GUobU1aeMF6p-3RfKmmz8.roa File: jOm4T8GUobU1aeMF6p-3RfKmmz8.roa (raw, json) Hash identifier: Z74tJQZ7Oym7MRIUVLImhAC7vcyZjr7xC0yMVRujRhg= Subject key identifier: 8C:E9:B8:4F:C1:94:A1:B5:35:69:E3:05:EA:9F:B7:45:F2:A6:9B:3F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2455 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jOm4T8GUobU1aeMF6p-3RfKmmz8.roa Signing time: Mon 10 Feb 2025 14:18:31 +0000 ROA not before: Mon 10 Feb 2025 14:18:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.159.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9301 (0x2455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8CE9B84FC194A1B53569E305EA9FB745F2A69B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:f7:c8:d1:6a:5c:92:cc:28:51:74:62:6e: af:4c:cc:95:5f:ab:4b:aa:33:da:b1:fa:9f:ae:7e: 38:0c:f2:e4:2e:f8:0a:e0:6d:d2:0e:05:5e:49:5d: 38:19:43:91:75:47:b7:51:7d:5c:62:8f:cc:f4:a6: 16:c5:b1:f6:37:1a:63:d9:a7:d0:b0:a5:ab:97:24: f3:8f:aa:d1:10:77:ad:c0:8d:f3:b3:b1:2d:36:ec: ea:54:b4:06:2c:fe:23:ed:c2:8b:dd:80:55:86:d6: 57:25:f5:65:f8:e9:5b:6c:39:30:24:75:f4:78:86: bb:b0:4d:d7:4b:67:3e:7a:3c:cf:9f:33:db:d9:cb: db:e8:70:d4:5e:0e:74:d4:d4:0e:c0:99:2a:5f:27: bb:e7:5d:ee:27:db:6b:da:3c:60:04:f9:5b:24:1a: 40:32:73:8e:b6:db:9c:78:8b:67:8e:3d:a9:61:6f: 28:f7:80:6d:fa:72:5f:6c:75:79:66:74:2a:96:00: 6d:01:55:b0:45:7f:3a:da:99:5a:0d:12:aa:c6:73: b7:95:44:aa:28:52:58:c3:e9:73:63:fa:87:1e:bd: c9:30:ee:1c:01:60:8b:77:56:31:66:2f:c7:c9:42: 88:ec:18:bf:93:fe:4a:f5:ef:ab:b4:5c:9f:5c:ee: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:B8:4F:C1:94:A1:B5:35:69:E3:05:EA:9F:B7:45:F2:A6:9B:3F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jOm4T8GUobU1aeMF6p-3RfKmmz8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.220.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:af:f5:91:69:8e:31:79:c0:ab:6e:03:3f:5e:7c:62:68:c1: 5f:36:ae:ff:36:c5:75:e4:c8:80:a8:37:18:93:ab:a0:9b:d3: ba:91:44:e1:6c:54:54:ad:95:5f:80:71:10:f2:26:8b:5d:29: 6e:b3:ab:60:ca:d0:fd:95:90:0e:99:52:85:bb:dc:b8:d1:7c: fb:6e:9e:dd:bf:20:96:e5:3c:a8:fe:5b:aa:38:c6:a5:b0:35: db:19:e8:b5:7f:42:13:3f:33:16:c7:97:94:41:00:57:9f:8f: 54:3f:2b:dd:56:2f:29:d4:1b:40:88:68:1a:2e:c6:d5:cf:b5: c6:e1:05:bc:08:3e:1b:1e:41:9b:77:2e:89:0f:36:18:0c:58: a3:66:5f:c8:a2:fc:8f:06:16:d7:49:45:87:a8:44:69:60:70: e7:60:9f:05:47:1c:98:00:9e:7c:43:ad:4a:2a:de:21:84:14: e5:57:49:1e:74:81:46:56:42:c2:24:2f:d6:7e:54:e5:2d:16: d4:d7:d5:e5:62:8c:6f:55:3b:1c:01:ee:71:0f:2f:5c:6a:3c: d5:f9:cd:9e:7b:c7:b4:67:f2:4a:39:7f:02:68:3b:98:fb:7b: 95:a3:84:c7:80:f1:0a:e5:ac:00:2e:45:38:c3:25:17:fe:76: 5b:ce:68:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDRTlCODRGQzE5NEEx QjUzNTY5RTMwNUVBOUZCNzQ1RjJBNjlCM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA7ffI0WpckswoUXRibq9MzJVfq0uqM9qx+p+ufjgM8uQu+Arg bdIOBV5JXTgZQ5F1R7dRfVxij8z0phbFsfY3GmPZp9CwpauXJPOPqtEQd63AjfOz sS027OpUtAYs/iPtwovdgFWG1lcl9WX46VtsOTAkdfR4hruwTddLZz56PM+fM9vZ y9vocNReDnTU1A7AmSpfJ7vnXe4n22vaPGAE+VskGkAyc46225x4i2eOPalhbyj3 gG36cl9sdXlmdCqWAG0BVbBFfzramVoNEqrGc7eVRKooUljD6XNj+ocevckw7hwB YIt3VjFmL8fJQojsGL+T/kr176u0XJ9c7ralAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjOm4T8GUobU1aeMF6p+3RfKmmz8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pPbTRUOEdVb2JVMWFlTUY2 cC0zUmZLbW16OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n9wwDQYJKoZIhvcNAQELBQADggEBAHyv9ZFpjjF5wKtuAz9efGJowV82rv82xXXk yICoNxiTq6Cb07qRROFsVFStlV+AcRDyJotdKW6zq2DK0P2VkA6ZUoW73LjRfPtu nt2/IJblPKj+W6o4xqWwNdsZ6LV/QhM/MxbHl5RBAFefj1Q/K91WLynUG0CIaBou xtXPtcbhBbwIPhseQZt3LokPNhgMWKNmX8ii/I8GFtdJRYeoRGlgcOdgnwVHHJgA nnxDrUoq3iGEFOVXSR50gUZWQsIkL9Z+VOUtFtTX1eVijG9VOxwB7nEPL1xqPNX5 zZ57x7Rn8ko5fwJoO5j7e5WjhMeA8QrlrAAuRTjDJRf+dlvOaA0= -----END CERTIFICATE-----Generated at Fri Apr 18 16:48:39 2025 by rpki-client