$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D-VlWExMwBYjXr7rWGOjsiUFsFs.roa File: D-VlWExMwBYjXr7rWGOjsiUFsFs.roa (raw, json) Hash identifier: nQzKyD2k322SZAtsL5owhTKzdzx5HMj3/1bBYg+sRdk= Subject key identifier: 0F:E5:65:58:4C:4C:C0:16:23:5E:BE:EB:58:63:A3:B2:25:05:B0:5B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 238A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D-VlWExMwBYjXr7rWGOjsiUFsFs.roa Signing time: Mon 10 Feb 2025 14:17:41 +0000 ROA not before: Mon 10 Feb 2025 14:17:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9098 (0x238a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0FE565584C4CC016235EBEEB5863A3B22505B05B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:80:06:72:81:74:14:47:56:c8:ad:f0:70: 2b:32:f0:bc:f9:6b:dc:32:2b:e3:e3:6f:7e:8d:01: de:ab:32:89:3d:56:8d:bc:a5:2d:c8:2b:d6:a2:a6: 49:fe:67:57:f2:66:35:bc:9b:6c:ce:1a:f8:22:00: a1:62:b9:5c:c6:58:ed:69:7c:36:6a:71:04:35:58: 74:df:dd:b4:c7:82:5f:b1:dc:bc:cb:e4:a2:72:42: d0:4a:35:bf:8e:c1:b5:76:c6:93:39:69:a0:ee:99: c0:35:c3:b6:e0:04:ac:af:89:85:f1:5c:53:45:22: 08:9f:dc:0a:91:a2:b5:26:ec:72:af:53:3f:f9:24: 11:bf:eb:43:b3:71:43:bd:95:29:55:31:3d:52:ba: 2e:ed:e9:38:bb:11:3d:47:27:c7:fd:a4:90:18:c7: 85:cb:55:5a:31:96:53:14:e9:e4:da:93:e3:e6:1b: 9a:e6:87:85:7f:55:45:b8:5e:af:df:4a:c2:24:18: 9e:cb:87:b0:e8:e3:5c:7f:14:54:a0:b9:ee:32:48: e3:f7:11:b1:69:4d:7e:8e:f1:27:b2:60:16:65:0b: 02:75:c6:87:73:d5:b4:4b:bd:2e:0b:64:1f:43:82: da:85:f7:11:d3:c2:67:60:e2:05:4a:b5:13:44:5f: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:65:58:4C:4C:C0:16:23:5E:BE:EB:58:63:A3:B2:25:05:B0:5B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D-VlWExMwBYjXr7rWGOjsiUFsFs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.128.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:7f:e3:a9:27:e1:40:20:85:92:33:d8:58:7f:d2:1e:f8:93: 17:b6:46:5f:55:ff:8d:63:46:27:94:e7:7d:d0:27:11:e2:30: 45:48:59:4c:35:99:ee:60:df:aa:bb:2f:b0:5b:1e:93:33:5b: 19:0c:f9:25:da:45:2a:2b:52:85:31:7d:a8:f2:51:b9:be:06: b1:5f:3a:68:d9:5e:95:6a:a7:39:ce:6f:e1:93:3a:e9:c2:71: 01:c6:b1:2f:58:36:06:4e:d8:f6:0b:ea:22:82:df:11:80:51: 38:db:15:ce:d1:8b:e5:81:fb:66:93:b2:4e:9d:23:6e:27:8f: 1d:5c:b3:9c:9e:2d:8d:7a:ca:58:ff:94:2d:ea:18:e7:7e:76: 51:f7:23:66:9b:c7:f6:41:e8:69:27:ce:be:16:71:69:10:73: 6b:7a:e7:3b:ff:b0:ec:ad:66:8e:93:98:d3:80:98:64:14:4b: 43:3e:8d:58:98:62:ba:46:f2:cf:16:ab:95:15:5d:4a:a2:2b: 0e:81:31:91:5b:18:c8:bd:90:4f:b3:14:72:fc:9f:f1:64:94: 75:50:33:a6:fc:6c:50:86:d2:8c:ed:d7:a5:77:48:93:79:16: 88:61:9f:92:4c:3f:64:aa:1a:21:bd:4c:59:eb:8b:98:11:99: 32:a9:a2:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGRTU2NTU4NEM0Q0Mw MTYyMzVFQkVFQjU4NjNBM0IyMjUwNUIwNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMBoAGcoF0FEdWyK3wcCsy8Lz5a9wyK+Pjb36NAd6rMok9Vo28 pS3IK9aipkn+Z1fyZjW8m2zOGvgiAKFiuVzGWO1pfDZqcQQ1WHTf3bTHgl+x3LzL 5KJyQtBKNb+OwbV2xpM5aaDumcA1w7bgBKyviYXxXFNFIgif3AqRorUm7HKvUz/5 JBG/60OzcUO9lSlVMT1Sui7t6Ti7ET1HJ8f9pJAYx4XLVVoxllMU6eTak+PmG5rm h4V/VUW4Xq/fSsIkGJ7Lh7Do41x/FFSgue4ySOP3EbFpTX6O8SeyYBZlCwJ1xodz 1bRLvS4LZB9DgtqF9xHTwmdg4gVKtRNEX1iJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUD+VlWExMwBYjXr7rWGOjsiUFsFswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0QtVmxXRXhNd0JZalhyN3JX R09qc2lVRnNGcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n4AwDQYJKoZIhvcNAQELBQADggEBAGp/46kn4UAghZIz2Fh/0h74kxe2Rl9V/41j RieU533QJxHiMEVIWUw1me5g36q7L7BbHpMzWxkM+SXaRSorUoUxfajyUbm+BrFf OmjZXpVqpznOb+GTOunCcQHGsS9YNgZO2PYL6iKC3xGAUTjbFc7Ri+WB+2aTsk6d I24njx1cs5yeLY16ylj/lC3qGOd+dlH3I2abx/ZB6Gknzr4WcWkQc2t65zv/sOyt Zo6TmNOAmGQUS0M+jViYYrpG8s8Wq5UVXUqiKw6BMZFbGMi9kE+zFHL8n/FklHVQ M6b8bFCG0ozt16V3SJN5Fohhn5JMP2SqGiG9TFnri5gRmTKpovk= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net