$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kS0ad4_xe9AHJ2lWCHtQ3z8JNL8.roa File: kS0ad4_xe9AHJ2lWCHtQ3z8JNL8.roa (raw, json) Hash identifier: ROxKMTD37d69tRTfaH1HnmoSt8um1dX2dPJKr926s4c= Subject key identifier: 91:2D:1A:77:8F:F1:7B:D0:07:27:69:56:08:7B:50:DF:3F:09:34:BF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23A6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kS0ad4_xe9AHJ2lWCHtQ3z8JNL8.roa Signing time: Mon 10 Feb 2025 14:17:46 +0000 ROA not before: Mon 10 Feb 2025 14:17:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9126 (0x23a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=912D1A778FF17BD007276956087B50DF3F0934BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:30:ff:ea:e9:46:19:84:27:d4:ab:ef:1d: f3:d7:16:6d:57:c5:9b:b5:57:0e:22:ea:7c:cc:c4: 5d:5c:84:ab:92:62:d3:2f:54:e7:30:ea:b7:52:84: 66:c7:a4:97:30:50:62:aa:37:1e:bf:34:f7:7d:32: 55:44:ca:17:60:e4:d8:aa:e6:0b:ec:1b:3e:48:5b: ae:3a:9b:8f:d1:e1:b6:d8:cc:bf:01:6f:b2:97:67: 45:ce:53:4d:be:d3:f0:ec:d8:d9:7a:a0:31:7e:d7: 67:f3:9b:b2:cc:c8:fa:70:61:dc:46:42:2e:dd:8b: 23:4f:fc:25:18:b4:cf:d4:0b:8f:c6:a4:cb:5b:00: 0c:a2:f1:db:bd:24:00:37:9b:cc:28:ab:6c:10:a6: e5:8f:d7:1f:7b:d1:b7:a4:43:0a:62:dc:f6:4f:ae: 4a:17:af:cd:68:b5:63:9b:c9:fd:e3:d2:f4:ed:27: 54:2d:c9:7a:4c:d1:0e:ae:60:82:ae:8e:03:e8:e5: b5:9a:74:71:a3:40:89:45:0d:64:8c:f6:e6:f6:d3: c2:3c:87:43:d1:b5:fb:aa:65:e7:39:f6:09:b4:e2: fc:6b:e4:d5:6e:5a:ed:da:93:6e:a3:1d:e4:86:1f: 54:72:20:6d:9a:be:b5:96:b9:0a:68:54:e2:ee:83: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2D:1A:77:8F:F1:7B:D0:07:27:69:56:08:7B:50:DF:3F:09:34:BF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kS0ad4_xe9AHJ2lWCHtQ3z8JNL8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.136.0/21 Signature Algorithm: sha256WithRSAEncryption 38:b6:00:42:a6:d4:8f:db:2b:7d:5e:1c:8c:4f:2e:06:6f:31: d7:c1:16:0b:bc:7b:ff:ae:6b:d8:b0:9a:b5:5e:7e:88:15:88: 23:f8:32:e6:b2:5c:be:3d:89:57:f6:46:63:07:b2:ff:d5:7c: 03:ca:12:b3:fc:b9:3c:9e:76:6a:a0:28:ad:d2:cb:86:2c:4c: b2:65:7a:0a:c3:04:5f:25:4b:62:c6:95:45:86:f8:d0:73:36: b1:29:d8:f9:84:92:48:53:a3:02:72:97:71:c4:8f:78:fa:15: 1b:8b:6f:6c:70:27:49:e6:55:13:14:e3:74:b4:04:13:f9:74: 1a:1c:04:0a:ec:b8:39:29:79:7f:0b:2f:45:5f:0e:d6:12:25: a7:e5:f4:85:d1:bd:8f:f1:4f:7b:1e:94:3b:f9:d2:3b:b4:76: d7:dc:c9:47:55:66:4f:86:c8:de:50:43:fb:3f:c2:55:62:59: bb:ac:3e:78:bd:8b:27:3e:9b:c4:e8:71:81:d7:27:fe:f9:97: fa:70:60:a3:27:aa:c0:6b:24:aa:83:6d:75:20:3b:fb:cf:e4: ac:64:ca:b7:d4:a3:f7:62:88:91:cf:c9:fa:23:6d:9e:4b:a0: 48:2a:8f:7d:bd:a8:0d:be:45:8c:e7:53:3b:8b:f2:f2:07:74: 3b:63:6b:2a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxMkQxQTc3OEZGMTdC RDAwNzI3Njk1NjA4N0I1MERGM0YwOTM0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC07jD/6ulGGYQn1KvvHfPXFm1XxZu1Vw4i6nzMxF1chKuSYtMv VOcw6rdShGbHpJcwUGKqNx6/NPd9MlVEyhdg5Niq5gvsGz5IW646m4/R4bbYzL8B b7KXZ0XOU02+0/Ds2Nl6oDF+12fzm7LMyPpwYdxGQi7diyNP/CUYtM/UC4/GpMtb AAyi8du9JAA3m8woq2wQpuWP1x970bekQwpi3PZPrkoXr81otWObyf3j0vTtJ1Qt yXpM0Q6uYIKujgPo5bWadHGjQIlFDWSM9ub208I8h0PRtfuqZec59gm04vxr5NVu Wu3ak26jHeSGH1RyIG2avrWWuQpoVOLug0EBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkS0ad4/xe9AHJ2lWCHtQ3z8JNL8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tTMGFkNF94ZTlBSEoybFdD SHRRM3o4Sk5MOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nogwDQYJKoZIhvcNAQELBQADggEBADi2AEKm1I/bK31eHIxPLgZvMdfBFgu8e/+u a9iwmrVefogViCP4MuayXL49iVf2RmMHsv/VfAPKErP8uTyedmqgKK3Sy4YsTLJl egrDBF8lS2LGlUWG+NBzNrEp2PmEkkhTowJyl3HEj3j6FRuLb2xwJ0nmVRMU43S0 BBP5dBocBArsuDkpeX8LL0VfDtYSJafl9IXRvY/xT3selDv50ju0dtfcyUdVZk+G yN5QQ/s/wlViWbusPni9iyc+m8TocYHXJ/75l/pwYKMnqsBrJKqDbXUgO/vP5Kxk yrfUo/diiJHPyfojbZ5LoEgqj329qA2+RYznUzuL8vIHdDtjayo= -----END CERTIFICATE-----Generated at Thu Apr 17 21:08:47 2025 by rpki-client