$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wcvBPeh9M3kO6u97sbW-3sn9tgM.roa File: wcvBPeh9M3kO6u97sbW-3sn9tgM.roa (raw, json) Hash identifier: R3p0GIjbKIl2NCOvZ4i4/Pdy5f4QATvHxwnvDgfHF5U= Subject key identifier: C1:CB:C1:3D:E8:7D:33:79:0E:EA:EF:7B:B1:B5:BE:DE:C9:FD:B6:03 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2451 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wcvBPeh9M3kO6u97sbW-3sn9tgM.roa Signing time: Mon 10 Feb 2025 14:18:30 +0000 ROA not before: Mon 10 Feb 2025 14:18:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9297 (0x2451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C1CBC13DE87D33790EEAEF7BB1B5BEDEC9FDB603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:d5:57:a8:ca:47:9b:05:28:ff:59:92:64: f9:1c:73:32:e3:d8:f2:03:d2:39:01:5f:05:5d:97: d9:e9:5c:9c:15:89:b7:c2:b3:7d:72:0e:aa:cc:da: be:57:6c:2e:5d:57:8f:96:d2:d2:ed:31:a8:d1:e9: b5:f2:5c:70:3d:49:7d:4c:64:7a:a5:d8:b2:1e:96: fb:5e:ac:0b:31:0c:70:db:aa:55:7d:71:c4:24:5d: 9d:ac:36:11:5d:2e:be:df:46:89:c2:ff:47:7b:9c: 30:09:0c:38:28:e6:09:c4:3c:85:d6:9f:8b:54:42: 9d:1f:cd:0d:f0:ef:ad:ac:8e:de:08:d0:34:49:26: 1b:fb:9d:b4:f0:94:d0:55:f7:55:c4:cb:17:d2:27: 97:77:ed:fe:b2:b5:d8:3e:bc:1d:80:f9:f3:fc:a0: 03:c6:50:c8:77:11:4e:9b:c6:0d:62:65:9a:7b:5c: da:6c:6b:7d:f9:01:d7:bf:8e:1e:c8:cd:d0:d4:8d: af:0b:06:8e:c7:a2:9a:28:27:78:7d:08:1f:4a:44: 1e:ac:00:ec:26:85:c0:28:47:fb:77:da:61:41:5f: 58:13:99:05:ac:1b:5d:b3:9c:f0:c7:9d:a7:46:35: 73:ce:13:ff:45:18:d2:f2:8b:c7:08:3b:2c:ba:3b: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CB:C1:3D:E8:7D:33:79:0E:EA:EF:7B:B1:B5:BE:DE:C9:FD:B6:03 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wcvBPeh9M3kO6u97sbW-3sn9tgM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.136.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:f8:3b:05:7c:48:11:be:c8:54:29:a0:03:d0:d7:58:3b:64: ae:a8:30:ec:fd:b3:a6:da:05:b3:2d:9d:e6:ff:a1:3a:6d:49: 87:42:e1:88:e8:74:5b:e7:8b:1a:75:f3:43:b6:89:08:df:79: d0:dc:37:2e:cb:fd:09:61:79:18:6c:ef:05:10:92:a2:01:d6: 21:ed:43:af:9e:c3:c7:be:db:2f:05:ec:9a:41:eb:25:aa:ff: 0e:4a:c1:99:a5:67:42:58:64:ad:26:a7:86:a7:1d:67:67:e4: 78:d7:1c:e6:b3:35:fe:be:89:7e:50:a1:56:39:a4:ab:28:9b: 4a:35:b5:5a:cd:77:33:86:ef:0e:f8:8e:72:53:65:a8:f7:9d: 93:c3:61:a6:57:2f:d5:37:aa:3e:76:45:44:4d:fa:f1:49:4d: f6:4e:6a:bf:42:2c:a5:a7:f8:38:ed:c6:9a:7c:52:f7:07:1e: 89:19:9a:c3:d2:9b:ef:27:75:d5:d6:f5:21:cc:a5:51:d2:6f: f4:7e:27:72:ab:0c:a7:69:f3:82:03:15:9b:4c:a0:7f:31:cb: 68:c4:36:bc:d4:7e:ca:86:57:ee:b0:0e:81:04:0a:b9:c1:40: 52:26:29:ba:bd:05:f6:19:33:e0:e7:bc:49:b4:c2:27:b6:f6: fe:fa:7e:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxQ0JDMTNERTg3RDMz NzkwRUVBRUY3QkIxQjVCRURFQzlGREI2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC459VXqMpHmwUo/1mSZPkcczLj2PID0jkBXwVdl9npXJwVibfC s31yDqrM2r5XbC5dV4+W0tLtMajR6bXyXHA9SX1MZHql2LIelvterAsxDHDbqlV9 ccQkXZ2sNhFdLr7fRonC/0d7nDAJDDgo5gnEPIXWn4tUQp0fzQ3w762sjt4I0DRJ Jhv7nbTwlNBV91XEyxfSJ5d37f6ytdg+vB2A+fP8oAPGUMh3EU6bxg1iZZp7XNps a335Ade/jh7IzdDUja8LBo7HopooJ3h9CB9KRB6sAOwmhcAoR/t32mFBX1gTmQWs G12znPDHnadGNXPOE/9FGNLyi8cIOyy6O5x5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwcvBPeh9M3kO6u97sbW+3sn9tgMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3djdkJQZWg5TTNrTzZ1OTdz YlctM3NuOXRnTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nogwDQYJKoZIhvcNAQELBQADggEBADv4OwV8SBG+yFQpoAPQ11g7ZK6oMOz9s6ba BbMtneb/oTptSYdC4YjodFvnixp180O2iQjfedDcNy7L/QlheRhs7wUQkqIB1iHt Q6+ew8e+2y8F7JpB6yWq/w5KwZmlZ0JYZK0mp4anHWdn5HjXHOazNf6+iX5QoVY5 pKsom0o1tVrNdzOG7w74jnJTZaj3nZPDYaZXL9U3qj52RURN+vFJTfZOar9CLKWn +Djtxpp8UvcHHokZmsPSm+8nddXW9SHMpVHSb/R+J3KrDKdp84IDFZtMoH8xy2jE NrzUfsqGV+6wDoEECrnBQFImKbq9BfYZM+DnvEm0wie29v76foU= -----END CERTIFICATE-----Generated at Thu Apr 17 21:08:43 2025 by rpki-client