$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nWWOCj62SGquHbAHf0gm78NFodc.roa File: nWWOCj62SGquHbAHf0gm78NFodc.roa (raw, json) Hash identifier: HSDkXOirTMASHZN3UIq68Rq3eln8VUE7Fk4jdkgKeus= Subject key identifier: 9D:65:8E:0A:3E:B6:48:6A:AE:1D:B0:07:7F:48:26:EF:C3:45:A1:D7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2374 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nWWOCj62SGquHbAHf0gm78NFodc.roa Signing time: Mon 10 Feb 2025 14:17:36 +0000 ROA not before: Mon 10 Feb 2025 14:17:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 12:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9076 (0x2374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9D658E0A3EB6486AAE1DB0077F4826EFC345A1D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:85:5a:85:f8:f0:5c:e3:79:48:ea:bb:4c: db:71:f1:9a:d3:1b:76:60:08:59:71:ad:21:fd:88: f2:27:f3:b8:d1:d7:33:fc:cd:ad:b7:42:58:ae:62: ed:0d:7f:d6:ac:9d:6c:2f:44:65:66:e4:a2:03:ec: 92:7d:66:dc:9b:47:8f:90:30:a6:3b:f9:67:a8:65: d6:3d:1b:33:60:a5:43:0d:c6:d9:e7:1e:11:a4:62: f6:f3:eb:d0:7a:fd:bd:68:59:84:20:b8:49:a6:78: 83:be:d0:76:69:7e:9d:e4:a1:26:e9:d0:35:64:04: 9a:fb:f7:c3:f6:e6:6d:14:a6:1c:76:ca:92:c7:77: 28:b6:0e:f4:99:ac:05:06:35:85:6a:21:c9:ad:5e: a3:c9:d0:9d:6c:66:8e:95:5c:dc:f2:4b:cd:9e:09: 19:85:79:de:26:7e:f2:3c:81:96:1f:66:63:80:5b: bb:83:5d:ca:dd:c8:d6:a2:f0:4a:e1:55:bd:84:41: 89:4e:0c:ae:3a:12:5e:5c:29:1c:4f:f0:28:c8:63: ca:ea:b4:05:e5:26:8f:5a:c8:a1:ad:cc:e7:c3:f9: ec:92:ea:0c:62:09:dd:38:f5:14:06:7e:3b:a0:4c: a4:b7:9e:a8:62:a9:9c:53:2e:73:10:12:c0:46:ef: 93:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:65:8E:0A:3E:B6:48:6A:AE:1D:B0:07:7F:48:26:EF:C3:45:A1:D7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nWWOCj62SGquHbAHf0gm78NFodc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.24.0/21 Signature Algorithm: sha256WithRSAEncryption 85:cd:20:99:20:2b:00:29:32:6e:18:e6:b1:aa:82:b6:60:c1: 46:d6:3d:1c:f8:2d:bd:4f:b2:8d:67:64:15:3f:3f:b8:72:0e: c2:65:b8:6c:92:49:e9:67:42:76:16:85:9d:dc:0d:a9:52:04: ce:b3:3c:54:5f:9d:49:74:46:2d:f8:bd:00:44:7f:51:94:46: 23:1c:13:f2:75:db:f8:63:f6:23:ff:d4:aa:43:40:02:e2:8f: 2c:6b:4a:61:28:e6:53:1f:b4:c1:c6:b5:38:10:3b:69:c0:3a: 2f:fc:5e:c7:70:59:54:26:55:06:68:1e:ff:9e:fd:c5:4e:81: e7:23:32:57:bd:6e:a3:a3:45:c4:b2:1b:85:47:f2:28:5f:22: af:18:cd:3a:67:18:64:3f:43:15:58:d2:d4:ac:59:62:71:47: 85:58:9b:15:31:5b:af:48:f1:c5:ee:00:75:96:7b:81:80:ae: b0:22:29:64:ba:ef:aa:10:56:01:9b:5c:69:11:f6:35:f7:d0: fc:45:14:c4:b6:fe:1f:2c:8e:ce:cd:ba:3a:c8:39:fd:64:15: e1:dd:a5:d8:5a:9d:49:23:6e:6b:ed:bb:69:d3:28:83:2f:33: 39:1c:f4:b8:9b:48:61:43:10:03:28:c7:eb:f9:7c:b8:35:64: 72:5b:3b:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlENjU4RTBBM0VCNjQ4 NkFBRTFEQjAwNzdGNDgyNkVGQzM0NUExRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLa4VahfjwXON5SOq7TNtx8ZrTG3ZgCFlxrSH9iPIn87jR1zP8 za23QliuYu0Nf9asnWwvRGVm5KID7JJ9ZtybR4+QMKY7+WeoZdY9GzNgpUMNxtnn HhGkYvbz69B6/b1oWYQguEmmeIO+0HZpfp3koSbp0DVkBJr798P25m0Uphx2ypLH dyi2DvSZrAUGNYVqIcmtXqPJ0J1sZo6VXNzyS82eCRmFed4mfvI8gZYfZmOAW7uD XcrdyNai8ErhVb2EQYlODK46El5cKRxP8CjIY8rqtAXlJo9ayKGtzOfD+eyS6gxi Cd049RQGfjugTKS3nqhiqZxTLnMQEsBG75N/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnWWOCj62SGquHbAHf0gm78NFodcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25XV09DajYyU0dxdUhiQUhm MGdtNzhORm9kYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nhgwDQYJKoZIhvcNAQELBQADggEBAIXNIJkgKwApMm4Y5rGqgrZgwUbWPRz4Lb1P so1nZBU/P7hyDsJluGySSelnQnYWhZ3cDalSBM6zPFRfnUl0Ri34vQBEf1GURiMc E/J12/hj9iP/1KpDQALijyxrSmEo5lMftMHGtTgQO2nAOi/8XsdwWVQmVQZoHv+e /cVOgecjMle9bqOjRcSyG4VH8ihfIq8YzTpnGGQ/QxVY0tSsWWJxR4VYmxUxW69I 8cXuAHWWe4GArrAiKWS676oQVgGbXGkR9jX30PxFFMS2/h8sjs7NujrIOf1kFeHd pdhanUkjbmvtu2nTKIMvMzkc9LibSGFDEAMox+v5fLg1ZHJbO3w= -----END CERTIFICATE-----Generated at Sat Apr 19 09:18:20 2025 by rpki-client