$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lpXdg7vRhOC90nowojOVpmSsp8Y.roa File: lpXdg7vRhOC90nowojOVpmSsp8Y.roa (raw, json) Hash identifier: M7pXdjfdDA5YlJYHx1NMvdvv5XPZ/OA+89s/yaSDhK0= Subject key identifier: 96:95:DD:83:BB:D1:84:E0:BD:D2:7A:30:A2:33:95:A6:64:AC:A7:C6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23DD Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lpXdg7vRhOC90nowojOVpmSsp8Y.roa Signing time: Mon 10 Feb 2025 14:18:01 +0000 ROA not before: Mon 10 Feb 2025 14:18:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9181 (0x23dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9695DD83BBD184E0BDD27A30A23395A664ACA7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4b:d1:b8:8d:4c:dc:b0:cd:3f:c1:46:c5:53: cd:d2:45:21:e5:7c:13:93:b1:2e:35:45:57:2f:e4: 65:cc:8e:a7:0d:a9:32:93:06:23:4e:a8:26:e6:0d: 36:30:53:db:ed:5c:89:c5:78:61:2c:86:73:4c:61: ee:71:f2:71:21:c3:1c:ca:a9:84:0e:a1:06:49:f0: 20:98:5b:5f:17:ab:a5:fd:b4:3c:5b:35:f4:6d:db: a7:65:58:f5:78:a2:7c:cc:b8:08:8e:af:09:3e:1b: a8:ce:b1:66:a8:6d:14:de:8b:53:a0:28:b7:79:5b: a9:e7:14:1b:c4:97:de:fc:83:75:17:d3:4e:40:4d: ba:b3:a7:c1:cd:03:e3:4f:e2:34:61:ae:6a:2d:13: ca:05:7b:9c:f4:bd:00:24:80:3b:e2:ee:be:4f:c7: 37:2f:d2:8e:40:d3:3b:cb:7d:f6:e0:e0:ef:d8:d4: 3a:b1:92:ed:70:38:36:24:aa:1f:d2:c2:5b:87:d8: 5f:92:39:a9:da:f8:2f:e4:f7:28:00:1d:da:3c:8c: 5a:19:67:ae:92:51:f6:de:52:31:87:eb:8a:a7:8b: 0b:4c:39:32:e9:eb:2d:e2:9a:fa:68:44:73:46:0f: 7c:d7:9c:a8:29:15:24:c4:b4:2b:04:aa:25:6f:ed: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:95:DD:83:BB:D1:84:E0:BD:D2:7A:30:A2:33:95:A6:64:AC:A7:C6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lpXdg7vRhOC90nowojOVpmSsp8Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.232.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:0c:23:0f:ac:fe:59:91:d2:82:5f:2f:31:73:d7:af:1e:04: bf:ea:fc:4e:0c:1b:dc:9e:67:4d:b6:37:a7:eb:e3:09:93:0f: e3:98:9a:87:5d:18:0b:9c:0f:19:8c:7d:4f:70:ff:a6:a0:21: 1e:46:3f:6a:d3:84:d6:3a:f4:0f:46:ed:3d:3d:72:a7:13:8b: d7:d4:3a:39:1d:af:08:49:be:74:0a:b8:3e:b3:e0:dd:1c:7e: f6:7c:18:3b:85:8f:a2:da:51:85:25:f5:33:3f:37:34:e7:4f: 0f:f7:ff:b0:db:36:c0:43:7f:76:12:e3:32:f4:0e:0d:11:e5: 5a:97:15:19:d4:00:14:29:8f:83:33:5f:5c:27:73:2e:4e:d3: 56:6e:5a:51:21:59:28:3a:01:75:7c:da:d8:dc:34:37:76:5e: 6a:9b:22:19:81:8d:16:e5:ea:43:90:56:e9:48:03:ae:68:c7: 04:87:2f:06:97:12:c8:38:03:49:9a:a6:53:d5:2f:e4:61:9a: 6d:0d:54:5e:2c:d7:86:7b:30:35:51:de:cf:01:b9:18:bd:01: ad:06:9a:22:08:01:36:31:a1:94:e5:e2:ab:ae:c3:10:20:36: 73:66:26:f0:3f:89:eb:27:a6:d8:51:dd:87:45:26:4d:4e:ab: 62:68:44:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2OTVERDgzQkJEMTg0 RTBCREQyN0EzMEEyMzM5NUE2NjRBQ0E3QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWS9G4jUzcsM0/wUbFU83SRSHlfBOTsS41RVcv5GXMjqcNqTKT BiNOqCbmDTYwU9vtXInFeGEshnNMYe5x8nEhwxzKqYQOoQZJ8CCYW18Xq6X9tDxb NfRt26dlWPV4onzMuAiOrwk+G6jOsWaobRTei1OgKLd5W6nnFBvEl978g3UX005A Tbqzp8HNA+NP4jRhrmotE8oFe5z0vQAkgDvi7r5Pxzcv0o5A0zvLffbg4O/Y1Dqx ku1wODYkqh/SwluH2F+SOana+C/k9ygAHdo8jFoZZ66SUfbeUjGH64qniwtMOTLp 6y3imvpoRHNGD3zXnKgpFSTEtCsEqiVv7a+vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlpXdg7vRhOC90nowojOVpmSsp8YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xwWGRnN3ZSaE9DOTBub3dv ak9WcG1Tc3A4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nugwDQYJKoZIhvcNAQELBQADggEBAGoMIw+s/lmR0oJfLzFz168eBL/q/E4MG9ye Z022N6fr4wmTD+OYmoddGAucDxmMfU9w/6agIR5GP2rThNY69A9G7T09cqcTi9fU OjkdrwhJvnQKuD6z4N0cfvZ8GDuFj6LaUYUl9TM/NzTnTw/3/7DbNsBDf3YS4zL0 Dg0R5VqXFRnUABQpj4MzX1wncy5O01ZuWlEhWSg6AXV82tjcNDd2XmqbIhmBjRbl 6kOQVulIA65oxwSHLwaXEsg4A0maplPVL+Rhmm0NVF4s14Z7MDVR3s8BuRi9Aa0G miIIATYxoZTl4quuwxAgNnNmJvA/iesnpthR3YdFJk1Oq2JoRGM= -----END CERTIFICATE-----Generated at Fri Apr 18 16:56:43 2025 by rpki-client