$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wgxeMtI1T_WqvfFh-03EmgG6dL4.roa File: wgxeMtI1T_WqvfFh-03EmgG6dL4.roa (raw, json) Hash identifier: g+lY2SjPjD512CiBXwtszCkbC5MaTjKnAQza3ale/MU= Subject key identifier: C2:0C:5E:32:D2:35:4F:F5:AA:BD:F1:61:FB:4D:C4:9A:01:BA:74:BE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23A1 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wgxeMtI1T_WqvfFh-03EmgG6dL4.roa Signing time: Mon 10 Feb 2025 14:17:45 +0000 ROA not before: Mon 10 Feb 2025 14:17:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9121 (0x23a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C20C5E32D2354FF5AABDF161FB4DC49A01BA74BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:36:1c:13:5d:b0:b5:62:fc:bc:bf:8a:dd: 60:5a:2e:17:f2:b1:64:15:ca:b6:77:e4:f4:30:bb: d6:f1:1d:32:b8:88:7c:44:a7:93:60:7c:7c:6d:13: 9c:da:a4:8a:e8:cb:f9:58:cf:46:38:69:53:72:3f: bc:2f:37:05:ad:c3:9c:ac:fd:09:dd:ba:dc:b3:14: 80:f7:c1:df:ce:82:9c:2c:e0:41:38:0e:0e:11:00: 08:23:d7:f8:3a:7a:69:2b:e2:5d:e8:4d:af:01:c6: 2c:e0:96:97:49:58:e8:be:46:2b:45:a1:00:00:1b: 79:01:ea:ab:01:b2:5a:04:7f:22:12:94:73:55:fc: aa:22:6e:09:49:e5:78:7c:20:9a:80:6a:c7:ae:eb: c3:3b:9b:50:05:43:5f:6b:c2:b2:5e:85:2c:1b:29: 37:7e:71:b9:65:dd:04:6f:e8:7d:85:46:aa:91:dc: ca:15:3a:f4:a5:2a:f9:6f:99:cc:71:ea:81:eb:a4: 56:d2:88:2f:8e:ce:0b:e4:28:b1:7c:fe:08:60:b3: 35:3f:fc:f1:c3:e9:f9:e7:a3:4d:d3:4d:19:2a:33: 69:eb:73:c8:75:21:42:f0:a7:f1:7a:80:b7:e8:13: cd:17:dc:2b:13:9a:82:7c:54:4b:aa:f4:c2:fd:c9: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0C:5E:32:D2:35:4F:F5:AA:BD:F1:61:FB:4D:C4:9A:01:BA:74:BE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wgxeMtI1T_WqvfFh-03EmgG6dL4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.64.0/22 Signature Algorithm: sha256WithRSAEncryption 71:e4:73:71:50:d2:31:cd:e2:e9:62:8f:bb:95:ca:99:c5:d5: 1a:eb:be:04:fc:6b:3b:9f:c4:55:b1:4b:c8:7b:af:5b:47:f0: d3:43:30:73:da:f8:4f:ef:cf:ba:7a:2d:fb:ab:74:05:23:73: 49:a4:23:f7:b1:92:6b:f5:e8:05:ea:89:fd:d1:fd:20:2d:cf: 17:84:ad:98:45:c9:45:3f:cc:3a:3b:9d:e7:5b:85:8f:3a:bb: 0c:45:77:9b:46:2d:84:fa:df:3b:a8:b6:b6:48:73:7d:57:d4: e4:be:77:1e:9f:4e:77:d3:2a:17:a9:8c:63:8e:13:ba:9d:75: f2:22:fe:1a:70:5c:c2:fd:28:20:dc:e3:a7:bb:65:c5:7b:cc: e1:6a:78:2d:c1:cc:f8:a8:8e:89:a5:b4:24:59:cd:a7:6e:fa: 58:8e:e8:f3:4c:52:05:e9:b9:40:6f:10:45:93:bb:1e:01:70: e0:c0:aa:8c:1e:52:f4:df:d9:a5:45:fe:a9:ef:f2:c2:cc:da: d6:fd:26:7f:dc:fb:7b:37:b4:1b:74:45:25:db:1b:b2:25:65: 0f:5f:bd:cf:b8:9e:cb:36:f1:a5:9c:9c:5a:e9:6e:8a:f4:86: 67:c5:ae:69:4f:2a:e2:1b:1f:c9:58:ea:f9:c6:e6:dd:3f:37: aa:95:9a:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyMEM1RTMyRDIzNTRG RjVBQUJERjE2MUZCNERDNDlBMDFCQTc0QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCigjYcE12wtWL8vL+K3WBaLhfysWQVyrZ35PQwu9bxHTK4iHxE p5NgfHxtE5zapIroy/lYz0Y4aVNyP7wvNwWtw5ys/QndutyzFID3wd/Ogpws4EE4 Dg4RAAgj1/g6emkr4l3oTa8BxizglpdJWOi+RitFoQAAG3kB6qsBsloEfyISlHNV /KoibglJ5Xh8IJqAaseu68M7m1AFQ19rwrJehSwbKTd+cbll3QRv6H2FRqqR3MoV OvSlKvlvmcxx6oHrpFbSiC+OzgvkKLF8/ghgszU//PHD6fnno03TTRkqM2nrc8h1 IULwp/F6gLfoE80X3CsTmoJ8VEuq9ML9yeJ7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwgxeMtI1T/WqvfFh+03EmgG6dL4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3dneGVNdEkxVF9XcXZmRmgt MDNFbWdHNmRMNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n0AwDQYJKoZIhvcNAQELBQADggEBAHHkc3FQ0jHN4ulij7uVypnF1RrrvgT8azuf xFWxS8h7r1tH8NNDMHPa+E/vz7p6LfurdAUjc0mkI/exkmv16AXqif3R/SAtzxeE rZhFyUU/zDo7nedbhY86uwxFd5tGLYT63zuotrZIc31X1OS+dx6fTnfTKhepjGOO E7qddfIi/hpwXML9KCDc46e7ZcV7zOFqeC3BzPiojomltCRZzadu+liO6PNMUgXp uUBvEEWTux4BcODAqoweUvTf2aVF/qnv8sLM2tb9Jn/c+3s3tBt0RSXbG7IlZQ9f vc+4nss28aWcnFrpbor0hmfFrmlPKuIbH8lY6vnG5t0/N6qVmo4= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:10 2025 by rpki-client