$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2Cp1eQZH9YgSd3IohFQ7F4cu9zY.roa File: 2Cp1eQZH9YgSd3IohFQ7F4cu9zY.roa (raw, json) Hash identifier: j9thJxCqyV52XncTQZjX8vWYrGeAaLJ14Spzf5m5rBQ= Subject key identifier: D8:2A:75:79:06:47:F5:88:12:77:72:28:84:54:3B:17:87:2E:F7:36 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24AA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2Cp1eQZH9YgSd3IohFQ7F4cu9zY.roa Signing time: Mon 10 Feb 2025 14:18:52 +0000 ROA not before: Mon 10 Feb 2025 14:18:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9386 (0x24aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D82A75790647F5881277722884543B17872EF736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:15:49:03:48:75:18:c8:49:df:d2:ee:b0: 3e:11:6d:bd:80:58:7f:ce:88:0a:09:ea:55:97:ec: af:08:33:47:41:51:bf:2c:a1:43:af:fe:2b:c7:f8: ed:1e:ce:bb:38:69:31:c8:9e:8a:62:e3:62:47:59: 13:62:b2:8b:d5:1b:4a:1b:70:2e:49:b2:2c:2e:7c: b6:84:e2:53:f9:90:37:01:8f:3d:b0:25:d0:2e:99: 5f:21:be:b2:e0:ac:59:67:64:41:c2:f3:53:ad:d6: b6:6b:62:a3:d8:34:e4:2b:07:53:68:1e:25:54:80: dc:3a:7f:c3:2c:3b:a6:7a:5c:5d:21:55:c0:47:df: a8:cf:4b:ad:4f:2e:96:a4:20:67:e0:0b:3e:6b:a6: 19:0d:6d:b8:a6:38:a5:8f:c1:23:bf:52:fc:58:e6: 50:16:18:79:31:69:6d:38:20:8f:2d:9c:fa:05:64: 3a:cc:2c:1f:b1:cc:e1:da:67:3e:6c:88:f9:76:35: f0:24:04:d8:67:6e:07:94:05:0b:ef:0c:09:97:8d: cf:a1:c3:98:3a:fb:ca:04:b2:89:67:5c:1f:e0:78: 56:24:94:ed:86:c1:3f:f7:00:be:32:58:fc:15:ef: 39:b1:8b:57:2b:a3:f5:d1:fa:14:f9:d0:2d:be:9e: 77:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2A:75:79:06:47:F5:88:12:77:72:28:84:54:3B:17:87:2E:F7:36 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2Cp1eQZH9YgSd3IohFQ7F4cu9zY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.120.0/21 Signature Algorithm: sha256WithRSAEncryption 13:39:be:c8:70:a8:e6:b6:75:3d:ca:73:0d:98:f1:6c:86:09: 98:33:04:5b:5f:22:29:62:a3:02:09:73:20:33:6c:58:12:ad: 62:66:b7:d9:50:bd:4b:41:8b:7c:aa:d0:a0:84:9e:0e:c1:4a: 65:5f:5c:e7:24:3d:da:32:72:53:2c:d4:56:01:bc:2f:42:f0: 72:3d:01:a8:81:c1:3d:1c:1f:db:7f:03:6c:20:ea:93:9f:04: 8f:be:9f:f3:44:88:b7:0c:c4:6b:1b:55:b1:a3:3f:ba:36:f2: d3:1c:c0:46:73:64:1a:34:c4:35:42:2b:5e:bb:94:9b:e5:0a: 51:28:f6:6b:8d:1d:1e:d7:19:67:92:a5:9f:0d:a2:1c:c9:a4: f9:bc:f5:e7:f7:37:a8:61:f7:af:f2:6e:78:a0:07:44:e1:13: 08:ea:64:9d:75:68:e5:55:49:2f:38:c7:17:a6:5a:17:93:73: 72:bf:b4:80:e8:b0:4e:d1:c2:5d:f5:15:90:ba:58:84:e0:98: 0b:c8:d1:b3:74:b7:66:a3:c5:e1:32:ad:75:d3:b1:8b:ec:f9: ce:ae:ea:43:71:e3:b4:94:91:3e:4a:4b:38:eb:da:a0:cc:d5: b5:66:e4:79:a0:d4:b7:7c:55:df:71:b1:ce:42:7d:3d:dd:b8: 7f:46:b2:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ4MkE3NTc5MDY0N0Y1 ODgxMjc3NzIyODg0NTQzQjE3ODcyRUY3MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzVxVJA0h1GMhJ39LusD4Rbb2AWH/OiAoJ6lWX7K8IM0dBUb8s oUOv/ivH+O0ezrs4aTHInopi42JHWRNisovVG0obcC5JsiwufLaE4lP5kDcBjz2w JdAumV8hvrLgrFlnZEHC81Ot1rZrYqPYNOQrB1NoHiVUgNw6f8MsO6Z6XF0hVcBH 36jPS61PLpakIGfgCz5rphkNbbimOKWPwSO/UvxY5lAWGHkxaW04II8tnPoFZDrM LB+xzOHaZz5siPl2NfAkBNhnbgeUBQvvDAmXjc+hw5g6+8oEsolnXB/geFYklO2G wT/3AL4yWPwV7zmxi1cro/XR+hT50C2+nnevAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2Cp1eQZH9YgSd3IohFQ7F4cu9zYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJDcDFlUVpIOVlnU2QzSW9o RlE3RjRjdTl6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n3gwDQYJKoZIhvcNAQELBQADggEBABM5vshwqOa2dT3Kcw2Y8WyGCZgzBFtfIili owIJcyAzbFgSrWJmt9lQvUtBi3yq0KCEng7BSmVfXOckPdoyclMs1FYBvC9C8HI9 AaiBwT0cH9t/A2wg6pOfBI++n/NEiLcMxGsbVbGjP7o28tMcwEZzZBo0xDVCK167 lJvlClEo9muNHR7XGWeSpZ8NohzJpPm89ef3N6hh96/ybnigB0ThEwjqZJ11aOVV SS84xxemWheTc3K/tIDosE7Rwl31FZC6WITgmAvI0bN0t2ajxeEyrXXTsYvs+c6u 6kNx47SUkT5KSzjr2qDM1bVm5Hmg1Ld8Vd9xsc5CfT3duH9GstM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net