$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jchWP0GGsGRzv1NHjrI3rPUaz1c.roa File: jchWP0GGsGRzv1NHjrI3rPUaz1c.roa (raw, json) Hash identifier: 1J6ooCkBh55h1BF+SKOD2eULLWr+43wYQQtzz3UDLhI= Subject key identifier: 8D:C8:56:3F:41:86:B0:64:73:BF:53:47:8E:B2:37:AC:F5:1A:CF:57 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23BE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jchWP0GGsGRzv1NHjrI3rPUaz1c.roa Signing time: Mon 10 Feb 2025 14:17:53 +0000 ROA not before: Mon 10 Feb 2025 14:17:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.159.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9150 (0x23be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8DC8563F4186B06473BF53478EB237ACF51ACF57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:16:c8:0a:c2:5d:4f:85:e7:bb:dc:ac:14: db:b4:de:1e:cc:96:80:7a:10:f8:fc:f7:93:c0:2b: bb:3d:3f:e8:71:55:b3:c2:6a:b2:3e:39:ab:56:73: 53:09:35:ac:20:c3:97:93:f6:d0:c7:f1:d8:03:6c: 09:df:c0:de:5b:c5:60:d2:17:4a:fc:bf:1e:5f:09: 4d:5e:8f:02:9a:47:dd:ef:3f:d7:27:7e:32:62:f7: 29:6e:ad:6a:b9:db:b7:23:fc:b7:a7:54:4f:eb:49: 5a:58:0f:90:05:82:10:d2:00:e6:9c:1c:93:a8:2d: 85:be:74:78:02:37:fd:ab:5d:15:67:15:8d:ab:03: 60:32:1a:db:3c:91:b2:d4:cd:1c:5a:b9:0b:78:9d: 54:06:3d:6b:52:1e:3e:b1:3a:6c:1d:5f:d1:14:fc: a2:35:f9:03:0e:d5:30:97:e0:b5:f2:50:d9:ad:8b: 8c:25:5f:7b:a1:17:e1:af:06:e9:4d:c3:da:45:13: 5b:2c:67:60:84:a7:d2:96:ff:f2:c0:01:0e:8b:e3: b4:b8:94:d0:b5:d2:72:aa:c6:53:dc:fe:cb:05:c4: 8e:2a:87:c5:44:7c:80:e5:49:b8:3b:2a:d7:8d:9f: 79:f1:0c:63:6f:48:90:5b:d0:79:d8:02:d5:2f:cc: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C8:56:3F:41:86:B0:64:73:BF:53:47:8E:B2:37:AC:F5:1A:CF:57 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jchWP0GGsGRzv1NHjrI3rPUaz1c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.76.0/22 Signature Algorithm: sha256WithRSAEncryption 79:a4:53:71:91:0e:85:3e:95:ba:9b:4e:1b:a8:d8:06:61:86: 11:af:02:39:0e:26:b0:7c:39:8e:bc:8b:63:b8:e9:cf:c6:88: 67:0e:13:08:09:79:c8:a0:d8:50:47:c9:74:6e:33:7c:bb:8c: 01:ab:8c:4a:47:ae:b1:02:2f:00:b6:93:00:36:ee:04:d3:5e: 07:06:2e:ac:f7:8d:c0:28:b4:bc:b8:8f:7b:a5:4b:f0:ed:d5: 28:16:aa:8a:85:ca:34:e1:7b:d5:9a:56:ce:08:f3:39:d7:e0: c0:43:fd:13:8e:c3:c9:2d:ee:c3:7c:15:3b:79:c7:5e:a3:01: 8a:32:9b:b9:31:7f:50:81:84:7b:bd:9f:11:b0:f7:87:73:13: d2:ad:51:28:61:b0:dd:9f:06:94:19:3d:68:6c:aa:91:75:29: c4:7e:e0:38:94:55:0b:f8:37:11:c5:0f:a5:d7:f5:c1:37:19: 81:5c:96:a5:6a:ce:22:09:a1:f4:d8:96:c7:22:93:94:e8:5d: 0d:be:56:d9:4a:48:c7:6b:19:02:7a:75:1b:c7:81:8d:8e:ca: ea:45:f1:03:bb:3a:95:36:e3:7c:d6:03:03:17:49:f6:7c:ce: 22:b5:4a:df:26:ba:61:9a:11:05:ea:a2:b0:85:cb:be:df:84: d9:b8:9b:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhEQzg1NjNGNDE4NkIw NjQ3M0JGNTM0NzhFQjIzN0FDRjUxQUNGNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDdhbICsJdT4Xnu9ysFNu03h7MloB6EPj895PAK7s9P+hxVbPC arI+OatWc1MJNawgw5eT9tDH8dgDbAnfwN5bxWDSF0r8vx5fCU1ejwKaR93vP9cn fjJi9ylurWq527cj/LenVE/rSVpYD5AFghDSAOacHJOoLYW+dHgCN/2rXRVnFY2r A2AyGts8kbLUzRxauQt4nVQGPWtSHj6xOmwdX9EU/KI1+QMO1TCX4LXyUNmti4wl X3uhF+GvBulNw9pFE1ssZ2CEp9KW//LAAQ6L47S4lNC10nKqxlPc/ssFxI4qh8VE fIDlSbg7KteNn3nxDGNvSJBb0HnYAtUvzCbXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjchWP0GGsGRzv1NHjrI3rPUaz1cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pjaFdQMEdHc0dSenYxTkhq ckkzclBVYXoxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n0wwDQYJKoZIhvcNAQELBQADggEBAHmkU3GRDoU+lbqbThuo2AZhhhGvAjkOJrB8 OY68i2O46c/GiGcOEwgJecig2FBHyXRuM3y7jAGrjEpHrrECLwC2kwA27gTTXgcG Lqz3jcAotLy4j3ulS/Dt1SgWqoqFyjThe9WaVs4I8znX4MBD/ROOw8kt7sN8FTt5 x16jAYoym7kxf1CBhHu9nxGw94dzE9KtUShhsN2fBpQZPWhsqpF1KcR+4DiUVQv4 NxHFD6XX9cE3GYFclqVqziIJofTYlscik5ToXQ2+VtlKSMdrGQJ6dRvHgY2OyupF 8QO7OpU243zWAwMXSfZ8ziK1St8mumGaEQXqorCFy77fhNm4m0s= -----END CERTIFICATE-----Generated at Fri Apr 18 16:46:13 2025 by rpki-client