$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wKwOJbs7j-mQ4bA9pEvkSvf6_mA.roa File: wKwOJbs7j-mQ4bA9pEvkSvf6_mA.roa (raw, json) Hash identifier: KwuKSoxy2gxeDA9d9sgdCsMEzgxebMGKkZbra57W5kk= Subject key identifier: C0:AC:0E:25:BB:3B:8F:E9:90:E1:B0:3D:A4:4B:E4:4A:F7:FA:FE:60 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 249D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wKwOJbs7j-mQ4bA9pEvkSvf6_mA.roa Signing time: Mon 10 Feb 2025 14:18:50 +0000 ROA not before: Mon 10 Feb 2025 14:18:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9373 (0x249d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C0AC0E25BB3B8FE990E1B03DA44BE44AF7FAFE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:23:c1:a6:ed:02:c2:ab:c0:cb:8a:12:1b: 39:70:19:7e:14:be:d4:7e:3b:f5:84:7b:50:4d:bc: a2:8c:01:83:77:67:a3:a8:68:62:5b:aa:85:c2:16: 9d:47:3c:60:ea:4b:1b:6a:bd:7e:ee:81:63:59:67: bd:3d:44:f1:2f:be:bb:3f:15:dd:9a:fb:60:15:7a: 5f:72:4d:b7:00:5f:3c:43:9b:1b:56:23:74:ab:ae: d4:40:d1:79:97:5e:6e:9a:2f:a0:b4:db:c1:51:16: 2c:72:02:0f:d7:e3:e8:eb:22:8b:75:a1:5f:d1:f4: 12:c6:e6:56:2c:c8:84:e3:d0:2d:84:45:52:e4:2f: 84:32:7b:73:cc:b1:8b:84:dc:dd:89:6c:a2:7f:1a: d0:b2:f9:40:96:27:70:aa:80:5d:a3:fd:db:ef:99: cd:76:7f:30:c8:a5:54:2a:3b:0d:ce:90:21:b9:ce: 3b:5f:65:77:27:43:e2:15:2b:c1:f8:d4:19:7d:f3: e9:17:bc:0f:20:0a:8e:c6:4d:08:e8:5a:cf:f2:e7: 26:f1:39:4a:f6:7d:e8:95:d9:94:e8:01:a0:d2:25: 38:7c:00:b0:f0:9d:26:4c:9d:aa:3e:07:44:6e:99: 93:5c:44:08:97:72:21:a9:82:ad:aa:59:15:4b:3d: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AC:0E:25:BB:3B:8F:E9:90:E1:B0:3D:A4:4B:E4:4A:F7:FA:FE:60 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wKwOJbs7j-mQ4bA9pEvkSvf6_mA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.88.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:31:23:9b:ba:24:6f:36:8b:2d:0b:27:a2:f6:6e:c4:b4:e2: b4:23:20:3c:1f:31:83:00:70:93:14:23:be:11:8c:38:8e:b1: 94:e8:d7:b8:b3:d2:c0:80:d2:a8:ba:7c:f9:13:4f:ec:ad:7e: d1:7a:b0:b6:fa:75:06:e2:c1:a7:0f:a2:ac:10:f4:35:e4:c7: db:33:a3:09:73:77:e2:e3:82:66:39:70:bc:f0:4b:22:4d:5a: bf:0f:0e:c2:41:7d:73:fa:c3:19:4f:23:93:e7:91:5c:e8:9b: 52:08:37:30:00:18:99:40:6d:71:82:ee:6a:39:7c:8a:6e:d6: be:ed:ce:9d:59:1e:2d:69:72:dd:ba:a0:7f:f2:8e:6e:3c:ee: 3f:f6:ac:bd:fd:fd:23:a3:d8:ec:0c:b2:77:3a:09:31:9e:b4: 16:8a:b9:2c:f4:5a:4f:7e:a7:c2:83:56:20:91:16:1d:9b:43: ca:e7:3b:4c:02:12:7b:b5:0b:a7:ac:42:57:72:ad:c4:db:54: 25:51:b2:6b:0a:2c:a5:e0:a9:3c:5c:3e:4a:ac:f2:64:41:68: 93:80:62:ee:4c:11:9b:55:dd:c0:c0:a9:61:b9:c0:79:01:e6: 71:db:d5:d4:f5:1d:8d:81:2d:96:32:e6:bc:1f:41:63:8b:5f: 7a:68:da:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwQUMwRTI1QkIzQjhG RTk5MEUxQjAzREE0NEJFNDRBRjdGQUZFNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMqyPBpu0CwqvAy4oSGzlwGX4UvtR+O/WEe1BNvKKMAYN3Z6Oo aGJbqoXCFp1HPGDqSxtqvX7ugWNZZ709RPEvvrs/Fd2a+2AVel9yTbcAXzxDmxtW I3SrrtRA0XmXXm6aL6C028FRFixyAg/X4+jrIot1oV/R9BLG5lYsyITj0C2ERVLk L4Qye3PMsYuE3N2JbKJ/GtCy+UCWJ3CqgF2j/dvvmc12fzDIpVQqOw3OkCG5zjtf ZXcnQ+IVK8H41Bl98+kXvA8gCo7GTQjoWs/y5ybxOUr2feiV2ZToAaDSJTh8ALDw nSZMnao+B0RumZNcRAiXciGpgq2qWRVLPTF3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwKwOJbs7j+mQ4bA9pEvkSvf6/mAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3dLd09KYnM3ai1tUTRiQTlw RXZrU3ZmNl9tQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nlgwDQYJKoZIhvcNAQELBQADggEBAAoxI5u6JG82iy0LJ6L2bsS04rQjIDwfMYMA cJMUI74RjDiOsZTo17iz0sCA0qi6fPkTT+ytftF6sLb6dQbiwacPoqwQ9DXkx9sz owlzd+LjgmY5cLzwSyJNWr8PDsJBfXP6wxlPI5PnkVzom1IINzAAGJlAbXGC7mo5 fIpu1r7tzp1ZHi1pct26oH/yjm487j/2rL39/SOj2OwMsnc6CTGetBaKuSz0Wk9+ p8KDViCRFh2bQ8rnO0wCEnu1C6esQldyrcTbVCVRsmsKLKXgqTxcPkqs8mRBaJOA Yu5MEZtV3cDAqWG5wHkB5nHb1dT1HY2BLZYy5rwfQWOLX3po2pY= -----END CERTIFICATE-----Generated at Fri Apr 18 16:28:02 2025 by rpki-client