$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p8T_SAuzDgW_qFEdxGNDI4y_jAw.roa File: p8T_SAuzDgW_qFEdxGNDI4y_jAw.roa (raw, json) Hash identifier: WhxGpqh/1rtGjeWebWgk+GNvjUy0ptF3s9RaeEVtXkE= Subject key identifier: A7:C4:FF:48:0B:B3:0E:05:BF:A8:51:1D:C4:63:43:23:8C:BF:8C:0C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23A3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p8T_SAuzDgW_qFEdxGNDI4y_jAw.roa Signing time: Mon 10 Feb 2025 14:17:45 +0000 ROA not before: Mon 10 Feb 2025 14:17:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9123 (0x23a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A7C4FF480BB30E05BFA8511DC46343238CBF8C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:fb:e3:79:e6:07:ef:06:c7:79:d3:49:09: 03:61:1b:a8:01:df:f0:ce:58:ea:03:69:a4:92:8b: 36:07:08:69:ef:7b:95:76:67:ac:0f:cc:7c:a6:17: 5c:e2:7a:60:68:a6:fa:36:b0:b4:05:4d:39:dd:5f: 0c:2a:4e:49:3b:ba:84:e7:02:39:b8:27:d1:2e:83: 2e:c5:30:84:08:70:54:ec:ae:e3:40:51:1a:14:c4: 20:77:74:30:c5:1b:0b:8c:7e:28:2f:83:2f:a7:de: 4a:44:a0:fe:4b:f3:aa:0b:77:9f:85:b0:b9:9e:f2: 56:50:c5:41:b0:53:6e:62:6d:3e:32:67:39:a3:ca: e0:06:c2:dc:6a:96:9b:ec:85:e5:db:b6:fb:1c:76: fd:37:ee:0a:ca:1f:aa:11:fc:af:cf:d8:b3:5b:f4: c1:9f:3c:6d:28:98:ea:f3:82:6f:79:02:29:a8:e2: ab:7d:f8:b4:df:36:12:7f:2f:a6:4b:f5:e0:53:13: 82:d4:bc:6d:8b:67:68:5a:b2:4f:4c:52:c9:5f:8f: be:a4:9e:96:81:6f:e5:38:de:60:b2:cc:7b:8c:93: b5:04:f5:4d:87:e2:5c:5c:fe:dc:41:89:a1:fd:42: 82:b0:f4:2c:4f:19:df:9f:2f:f5:40:4c:44:a8:c2: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:FF:48:0B:B3:0E:05:BF:A8:51:1D:C4:63:43:23:8C:BF:8C:0C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p8T_SAuzDgW_qFEdxGNDI4y_jAw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.8.0/21 Signature Algorithm: sha256WithRSAEncryption 82:99:70:7a:9b:e7:cc:d2:fe:d1:b0:19:47:4a:d2:a1:7c:bc: 87:1a:5a:3e:1b:8f:5a:9c:e3:7d:b3:92:a7:ec:c9:91:30:46: a7:15:11:5d:69:1c:92:10:27:22:1c:1e:74:b2:48:61:91:03: 25:e4:2f:26:6a:75:3b:a8:00:39:6f:e1:81:3e:df:89:dc:9e: 1a:9f:aa:3a:18:af:ee:d8:2f:c8:77:f6:6d:ae:1d:84:4e:88: 39:36:cf:17:00:8c:04:7e:32:ac:68:07:33:b3:69:ed:3b:9b: 3c:5c:06:7c:7a:df:77:46:85:a3:e8:1b:5c:ce:81:73:76:f6: 64:80:4e:a8:37:bd:be:ca:b0:a1:cb:2a:ac:d6:39:a7:97:4e: c7:2a:fa:c2:94:1a:3c:4c:12:63:2d:02:86:9f:0e:22:bb:a7: 38:29:29:b9:ae:98:0f:2b:a8:fb:0a:23:41:fb:0e:b9:7b:5d: 2d:80:12:06:9e:d6:7e:6c:1d:5a:77:1b:e3:0e:74:33:b8:b4: cc:35:13:25:34:4d:42:63:ea:a1:94:d9:a6:48:0e:6c:36:62: d6:91:b9:79:31:ec:a7:85:54:b5:e2:a9:da:af:1d:c8:7c:a3: f9:17:60:c7:32:de:b5:0c:ab:6e:17:95:e3:d2:75:8d:dc:00: 67:52:4a:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE3QzRGRjQ4MEJCMzBF MDVCRkE4NTExREM0NjM0MzIzOENCRjhDMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL0vvjeeYH7wbHedNJCQNhG6gB3/DOWOoDaaSSizYHCGnve5V2 Z6wPzHymF1ziemBopvo2sLQFTTndXwwqTkk7uoTnAjm4J9Eugy7FMIQIcFTsruNA URoUxCB3dDDFGwuMfigvgy+n3kpEoP5L86oLd5+FsLme8lZQxUGwU25ibT4yZzmj yuAGwtxqlpvsheXbtvscdv037grKH6oR/K/P2LNb9MGfPG0omOrzgm95Aimo4qt9 +LTfNhJ/L6ZL9eBTE4LUvG2LZ2hask9MUslfj76knpaBb+U43mCyzHuMk7UE9U2H 4lxc/txBiaH9QoKw9CxPGd+fL/VATESowmTTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUp8T/SAuzDgW/qFEdxGNDI4y/jAwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3A4VF9TQXV6RGdXX3FGRWR4 R05ESTR5X2pBdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nggwDQYJKoZIhvcNAQELBQADggEBAIKZcHqb58zS/tGwGUdK0qF8vIcaWj4bj1qc 432zkqfsyZEwRqcVEV1pHJIQJyIcHnSySGGRAyXkLyZqdTuoADlv4YE+34ncnhqf qjoYr+7YL8h39m2uHYROiDk2zxcAjAR+MqxoBzOzae07mzxcBnx633dGhaPoG1zO gXN29mSATqg3vb7KsKHLKqzWOaeXTscq+sKUGjxMEmMtAoafDiK7pzgpKbmumA8r qPsKI0H7Drl7XS2AEgae1n5sHVp3G+MOdDO4tMw1EyU0TUJj6qGU2aZIDmw2YtaR uXkx7KeFVLXiqdqvHch8o/kXYMcy3rUMq24XlePSdY3cAGdSSq0= -----END CERTIFICATE-----Generated at Thu Apr 17 20:58:46 2025 by rpki-client