$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nNpppMfdFae8L5nliWEvwgHMVZk.roa File: nNpppMfdFae8L5nliWEvwgHMVZk.roa (raw, json) Hash identifier: jhYOPooBDRabbV/EH/U/Da3SkK+zSmOKrtstYiM7Rb0= Subject key identifier: 9C:DA:69:A4:C7:DD:15:A7:BC:2F:99:E5:89:61:2F:C2:01:CC:55:99 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2420 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nNpppMfdFae8L5nliWEvwgHMVZk.roa Signing time: Mon 10 Feb 2025 14:18:18 +0000 ROA not before: Mon 10 Feb 2025 14:18:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9248 (0x2420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9CDA69A4C7DD15A7BC2F99E589612FC201CC5599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:b8:2b:5b:aa:3e:49:18:d6:3f:f6:1d:00: b7:da:6f:f0:4f:2a:41:31:9a:6a:a4:97:bf:72:4d: fa:b6:7c:f5:9c:7d:d7:ad:5d:6a:06:74:b8:22:6e: 9c:c1:c5:df:e3:f4:ed:3f:b3:95:cc:f6:43:dd:aa: 58:50:cd:12:ef:6f:bc:b3:ae:52:d0:92:50:fd:ed: 52:64:e6:ce:93:48:2d:aa:13:79:41:c7:99:8a:c9: c1:6d:16:97:4f:18:ef:b9:c3:89:e4:7c:dc:93:32: 9e:9e:b3:ed:c9:63:11:b2:8f:af:88:66:7c:d4:fc: d2:db:05:8e:f5:c5:4e:15:98:63:57:4f:c3:d7:76: 44:da:40:ae:95:23:6d:ac:7b:49:4f:32:db:71:39: fc:15:b3:ca:a9:2c:8e:69:b7:45:70:21:a2:e6:70: 4f:62:74:6d:3a:ce:68:c1:db:ad:6f:67:b4:f4:4e: 09:88:9b:90:0f:c1:7a:a4:0c:2b:9e:b9:f9:18:4e: d6:c5:35:88:45:06:cd:ee:cd:53:7c:d8:97:cc:23: 4e:2b:6c:2a:5a:17:e1:d7:3a:7c:18:40:fa:5f:1b: 2d:a3:d0:76:e5:1c:ac:16:29:e6:99:09:30:ee:f6: 32:53:ee:33:72:43:25:9a:b0:59:c0:02:21:b1:08: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DA:69:A4:C7:DD:15:A7:BC:2F:99:E5:89:61:2F:C2:01:CC:55:99 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nNpppMfdFae8L5nliWEvwgHMVZk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.216.0/22 Signature Algorithm: sha256WithRSAEncryption 24:32:8e:21:cd:6c:d4:e6:1e:24:1b:a3:b4:1e:87:e2:6d:83: 27:c7:29:a7:7b:0a:65:72:cc:60:e0:cb:09:b0:dc:d8:ad:bb: b8:cf:b7:03:60:9f:06:06:5c:a0:62:d1:92:2d:cf:11:c9:c8: 3c:b7:2f:ab:6f:a6:b0:35:78:4f:ab:dc:e4:db:5d:bf:f5:55: d7:d4:82:21:69:f8:db:32:3c:24:4c:79:39:c7:df:8f:ca:bb: 58:58:70:92:b4:f8:be:c0:58:7a:f0:25:b1:f2:4b:df:f8:2c: e1:c2:eb:19:5e:b9:89:f7:5f:bd:c1:06:1b:d9:d3:5c:6d:45: 8b:d7:b9:37:22:1f:af:ee:14:7e:e5:57:68:02:d4:04:bf:e5: 1a:ab:8c:45:df:bd:df:db:c0:1d:d4:73:18:88:5e:6b:7e:dd: a0:60:75:ca:57:9e:50:f0:87:32:9c:2e:4e:f5:90:fa:80:1c: da:69:80:e5:5a:15:c6:3b:1f:4a:76:a8:ba:d0:bd:b8:7f:31: 0d:f2:a2:46:8d:a0:2b:9d:cb:b2:e9:5a:7d:ae:89:98:23:6a: ea:f1:27:57:e2:8e:93:24:4d:fa:26:d5:b7:d5:b5:9f:42:ce: f3:7b:58:7f:c5:a7:d2:89:10:36:15:d7:92:fc:3d:7b:e8:b8: 51:b6:8d:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJCAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDREE2OUE0QzdERDE1 QTdCQzJGOTlFNTg5NjEyRkMyMDFDQzU1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrELgrW6o+SRjWP/YdALfab/BPKkExmmqkl79yTfq2fPWcfdet XWoGdLgibpzBxd/j9O0/s5XM9kPdqlhQzRLvb7yzrlLQklD97VJk5s6TSC2qE3lB x5mKycFtFpdPGO+5w4nkfNyTMp6es+3JYxGyj6+IZnzU/NLbBY71xU4VmGNXT8PX dkTaQK6VI22se0lPMttxOfwVs8qpLI5pt0VwIaLmcE9idG06zmjB261vZ7T0TgmI m5APwXqkDCueufkYTtbFNYhFBs3uzVN82JfMI04rbCpaF+HXOnwYQPpfGy2j0Hbl HKwWKeaZCTDu9jJT7jNyQyWasFnAAiGxCLP9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnNpppMfdFae8L5nliWEvwgHMVZkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25OcHBwTWZkRmFlOEw1bmxp V0V2d2dITVZaay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx ntgwDQYJKoZIhvcNAQELBQADggEBACQyjiHNbNTmHiQbo7Qeh+JtgyfHKad7CmVy zGDgywmw3Nitu7jPtwNgnwYGXKBi0ZItzxHJyDy3L6tvprA1eE+r3OTbXb/1VdfU giFp+NsyPCRMeTnH34/Ku1hYcJK0+L7AWHrwJbHyS9/4LOHC6xleuYn3X73BBhvZ 01xtRYvXuTciH6/uFH7lV2gC1AS/5RqrjEXfvd/bwB3UcxiIXmt+3aBgdcpXnlDw hzKcLk71kPqAHNppgOVaFcY7H0p2qLrQvbh/MQ3yokaNoCudy7LpWn2uiZgjaurx J1fijpMkTfom1bfVtZ9CzvN7WH/Fp9KJEDYV15L8PXvouFG2jW4= -----END CERTIFICATE-----Generated at Thu Apr 17 21:03:07 2025 by rpki-client