$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o0A1FmCLWyPrPyK7WmEMq6KK8XA.roa File: o0A1FmCLWyPrPyK7WmEMq6KK8XA.roa (raw, json) Hash identifier: N65B+AFZJuBdICAjBkWKhbHjlASs/XlwaIw1FMUw/N4= Subject key identifier: A3:40:35:16:60:8B:5B:23:EB:3F:22:BB:5A:61:0C:AB:A2:8A:F1:70 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2397 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o0A1FmCLWyPrPyK7WmEMq6KK8XA.roa Signing time: Mon 10 Feb 2025 14:17:43 +0000 ROA not before: Mon 10 Feb 2025 14:17:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9111 (0x2397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3403516608B5B23EB3F22BB5A610CABA28AF170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:46:29:3b:80:58:76:1e:37:eb:eb:51:68: dc:af:8c:5b:85:a3:1d:83:d6:7d:27:ef:f4:9f:fc: 86:1d:24:67:15:fb:5b:9d:06:68:ed:cb:13:75:b9: b2:05:2e:2a:f9:e3:72:2c:3d:11:fe:f0:04:ee:a2: 09:43:6f:46:1d:31:8b:73:c1:c1:e5:01:dc:39:1b: 6e:39:3a:38:df:62:07:ab:8a:84:1d:0e:e5:91:e4: 15:5f:08:c1:76:9d:c8:38:dc:74:be:6c:33:aa:75: 83:a2:6c:ab:a8:a9:e5:90:25:f0:bc:13:e5:4f:5c: bb:69:63:03:a5:f1:8f:2f:77:fd:76:8d:b6:3f:04: ce:52:14:da:12:26:25:98:a0:ef:4a:47:99:b3:6a: be:00:0d:f6:49:8c:04:fb:22:31:ff:14:f8:0e:fd: 09:a7:2c:6a:91:f2:b9:0d:14:25:0c:3c:8a:82:6f: c6:24:09:eb:ac:9a:41:a8:55:82:99:e2:fa:9a:61: cd:43:4e:c6:fa:02:48:98:0b:e2:04:7b:02:a0:41: 1c:fc:9f:99:93:45:f7:80:7d:04:5d:da:90:2b:78: 18:4d:03:55:0d:68:9c:e2:a6:4a:35:38:e8:25:ba: b4:54:0e:93:eb:89:38:3d:28:a9:c4:0f:35:3d:e5: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:40:35:16:60:8B:5B:23:EB:3F:22:BB:5A:61:0C:AB:A2:8A:F1:70 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o0A1FmCLWyPrPyK7WmEMq6KK8XA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.104.0/21 Signature Algorithm: sha256WithRSAEncryption 62:67:85:79:09:de:5b:a9:77:76:cd:4c:3d:5b:9e:42:98:e4: f7:7e:de:62:2a:26:e6:d4:30:65:94:dc:cb:ad:da:ac:5c:9b: e6:c6:36:9e:a2:d7:ff:c0:b8:02:c0:31:a7:bd:78:6a:41:ca: ed:29:7a:3c:16:d9:00:75:53:fb:0f:af:b3:6e:f4:cd:5c:5f: 59:3b:c7:49:80:1e:2e:68:9d:d9:98:a3:6f:34:9d:e6:01:3f: a4:43:9e:32:b9:36:56:51:b8:a3:3f:d9:0e:a2:7d:d4:4d:a0: a6:f2:f0:56:81:6e:5a:6d:4e:07:1f:1f:4f:ab:ef:30:9a:85: 0c:30:f9:d9:92:87:e6:b4:06:59:e9:08:24:fe:ae:ae:00:b5: 51:82:81:d3:ec:04:98:25:f0:ff:f5:c7:c1:f6:77:a6:09:f6: d5:0f:83:19:39:0b:e3:df:56:3f:12:e1:65:18:9d:90:37:ec: a0:76:e4:f1:07:12:6b:3a:12:6e:3d:5b:01:4e:f6:03:fb:83: ba:50:1a:7f:6b:78:21:2c:4f:8a:20:07:e9:e8:d2:5e:e9:e2: 32:ee:05:69:8d:f8:fc:c9:db:b8:78:6f:0a:f6:8d:c3:0f:11: 5b:92:c6:61:88:53:e9:f1:c6:fd:94:5c:f3:34:3a:29:23:74: 85:42:45:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzNDAzNTE2NjA4QjVC MjNFQjNGMjJCQjVBNjEwQ0FCQTI4QUYxNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgwkYpO4BYdh436+tRaNyvjFuFox2D1n0n7/Sf/IYdJGcV+1ud BmjtyxN1ubIFLir543IsPRH+8ATuoglDb0YdMYtzwcHlAdw5G245OjjfYgerioQd DuWR5BVfCMF2ncg43HS+bDOqdYOibKuoqeWQJfC8E+VPXLtpYwOl8Y8vd/12jbY/ BM5SFNoSJiWYoO9KR5mzar4ADfZJjAT7IjH/FPgO/QmnLGqR8rkNFCUMPIqCb8Yk CeusmkGoVYKZ4vqaYc1DTsb6AkiYC+IEewKgQRz8n5mTRfeAfQRd2pAreBhNA1UN aJzipko1OOglurRUDpPriTg9KKnEDzU95SE5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUo0A1FmCLWyPrPyK7WmEMq6KK8XAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL28wQTFGbUNMV3lQclB5SzdX bUVNcTZLSzhYQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nmgwDQYJKoZIhvcNAQELBQADggEBAGJnhXkJ3lupd3bNTD1bnkKY5Pd+3mIqJubU MGWU3Mut2qxcm+bGNp6i1//AuALAMae9eGpByu0pejwW2QB1U/sPr7Nu9M1cX1k7 x0mAHi5ondmYo280neYBP6RDnjK5NlZRuKM/2Q6ifdRNoKby8FaBblptTgcfH0+r 7zCahQww+dmSh+a0BlnpCCT+rq4AtVGCgdPsBJgl8P/1x8H2d6YJ9tUPgxk5C+Pf Vj8S4WUYnZA37KB25PEHEms6Em49WwFO9gP7g7pQGn9reCEsT4ogB+no0l7p4jLu BWmN+PzJ27h4bwr2jcMPEVuSxmGIU+nxxv2UXPM0OikjdIVCRaU= -----END CERTIFICATE-----Generated at Thu Apr 17 21:01:50 2025 by rpki-client