$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7Ere2HmKy_VWjVZHCb9llC1AAY.roa File: v7Ere2HmKy_VWjVZHCb9llC1AAY.roa (raw, json) Hash identifier: WlVWpfa/H0DfCsL7QJbwGe4//BZAE7blsHLcFG0knH0= Subject key identifier: BF:B1:2B:7B:61:E6:2B:2F:D5:5A:35:59:1C:26:FD:96:50:B5:00:06 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2496 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7Ere2HmKy_VWjVZHCb9llC1AAY.roa Signing time: Mon 10 Feb 2025 14:18:48 +0000 ROA not before: Mon 10 Feb 2025 14:18:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9366 (0x2496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BFB12B7B61E62B2FD55A35591C26FD9650B50006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:9e:3f:cc:da:84:e8:3b:05:37:b1:de:b2: 34:ee:00:91:9e:be:29:de:b2:0f:77:8b:48:21:f9: 6d:22:be:c3:15:0b:ef:d9:8a:a5:dd:48:27:8e:8d: 78:0b:d0:c0:55:63:98:df:22:17:da:80:6d:f1:c0: f7:a4:ed:e1:76:9e:bc:29:d1:01:55:16:43:86:de: 49:85:4f:58:16:d7:b0:f9:3f:d5:b9:9a:fe:2f:9d: 93:06:6d:45:b2:e0:8c:87:1b:53:2f:61:5b:a0:57: 8f:6a:ff:0d:27:32:bc:5c:3e:35:56:67:be:bd:55: b2:58:41:28:d5:3d:7d:c8:9b:77:7d:e8:45:7b:35: 45:a9:04:e3:fb:ef:0b:16:a3:7e:37:b3:70:0c:20: f9:ac:3e:0b:07:aa:a3:6a:84:5e:f4:30:c9:a2:23: 90:2d:68:c1:de:57:4d:20:f7:54:0c:a3:7a:65:45: 9f:d5:93:d9:aa:45:23:e7:33:c4:c6:46:56:e6:06: 1b:f7:2e:ac:93:f5:5a:4d:f8:84:b5:55:3a:d2:14: 61:ae:7f:81:61:97:fc:86:92:e6:ec:20:df:a0:2a: 68:23:59:82:51:04:b0:12:42:d2:cb:78:b9:ef:c6: 6b:f2:21:1f:bb:c9:e2:49:2a:ab:5c:c3:1c:40:ad: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:2B:7B:61:E6:2B:2F:D5:5A:35:59:1C:26:FD:96:50:B5:00:06 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7Ere2HmKy_VWjVZHCb9llC1AAY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.96.0/21 Signature Algorithm: sha256WithRSAEncryption 92:e6:bb:70:a7:31:fb:60:ab:29:30:0b:a5:e1:d6:fa:11:c3: 64:0d:fa:ac:fb:ae:99:59:42:11:72:b8:10:f4:72:c6:a0:43: e8:bf:09:ff:dd:3d:59:f1:8a:dd:cb:a1:c3:85:77:a1:20:78: e7:47:92:1f:63:5b:30:01:bc:13:33:7c:6a:0e:75:3b:dd:01: 8c:f8:c6:a3:fb:b3:aa:3b:e0:c4:7e:c4:53:b3:88:c6:72:b7: 6c:91:b1:13:17:50:57:0c:1a:fc:ea:ca:5f:58:a4:7d:29:1b: 51:95:62:cd:41:59:b3:10:82:e3:b3:44:c8:ea:76:c1:95:39: af:5e:d5:1e:3c:0d:76:c7:06:fd:19:87:85:c0:d9:ae:54:e5: f7:c3:1a:93:31:31:2c:f9:c4:ad:a5:60:13:56:3e:86:1c:0c: 74:ab:a1:c5:88:3c:d1:01:60:6e:2b:98:79:5d:0e:1c:fa:0c: bc:e9:8d:da:fa:d9:a4:bc:db:70:fb:34:08:b6:c2:65:f3:dd: 22:ce:91:06:a5:37:d3:07:ef:0d:c1:c5:b8:58:f0:e1:67:e6: 29:ba:31:db:17:ab:50:b5:1f:70:c2:9e:d4:62:d5:9c:9b:d9: 3a:0e:ec:c3:d7:4c:3f:d6:cf:d2:b9:b8:51:a6:b0:97:db:9d: 1b:e7:8a:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGQjEyQjdCNjFFNjJC MkZENTVBMzU1OTFDMjZGRDk2NTBCNTAwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhY54/zNqE6DsFN7HesjTuAJGevinesg93i0gh+W0ivsMVC+/Z iqXdSCeOjXgL0MBVY5jfIhfagG3xwPek7eF2nrwp0QFVFkOG3kmFT1gW17D5P9W5 mv4vnZMGbUWy4IyHG1MvYVugV49q/w0nMrxcPjVWZ769VbJYQSjVPX3Im3d96EV7 NUWpBOP77wsWo343s3AMIPmsPgsHqqNqhF70MMmiI5AtaMHeV00g91QMo3plRZ/V k9mqRSPnM8TGRlbmBhv3LqyT9VpN+IS1VTrSFGGuf4Fhl/yGkubsIN+gKmgjWYJR BLASQtLLeLnvxmvyIR+7yeJJKqtcwxxArVpbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUv7Ere2HmKy/VWjVZHCb9llC1AAYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3Y3RXJlMkhtS3lfVldqVlpI Q2I5bGxDMUFBWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n2AwDQYJKoZIhvcNAQELBQADggEBAJLmu3CnMftgqykwC6Xh1voRw2QN+qz7rplZ QhFyuBD0csagQ+i/Cf/dPVnxit3LocOFd6EgeOdHkh9jWzABvBMzfGoOdTvdAYz4 xqP7s6o74MR+xFOziMZyt2yRsRMXUFcMGvzqyl9YpH0pG1GVYs1BWbMQguOzRMjq dsGVOa9e1R48DXbHBv0Zh4XA2a5U5ffDGpMxMSz5xK2lYBNWPoYcDHSrocWIPNEB YG4rmHldDhz6DLzpjdr62aS823D7NAi2wmXz3SLOkQalN9MH7w3BxbhY8OFn5im6 MdsXq1C1H3DCntRi1Zyb2ToO7MPXTD/Wz9K5uFGmsJfbnRvniow= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:39 2025 by rpki-client