$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-kfE6gX2v2HHoeOWjZTGEiELuxc.roa File: -kfE6gX2v2HHoeOWjZTGEiELuxc.roa (raw, json) Hash identifier: i2ht1RvO4UmdoAUvQxUfyrSImZtzSTVZ5xjQccY5EGc= Subject key identifier: FA:47:C4:EA:05:F6:BF:61:C7:A1:E3:96:8D:94:C6:12:21:0B:BB:17 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2494 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-kfE6gX2v2HHoeOWjZTGEiELuxc.roa Signing time: Mon 10 Feb 2025 14:18:47 +0000 ROA not before: Mon 10 Feb 2025 14:18:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.60.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9364 (0x2494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FA47C4EA05F6BF61C7A1E3968D94C612210BBB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:e4:0f:c4:a5:fd:3d:7f:e9:8c:aa:d8:7e: 27:84:c3:01:a2:24:bc:4f:ad:c5:23:3f:03:9f:bb: 0f:7e:6e:8b:35:6b:3e:14:10:24:74:65:c3:31:d6: 93:c3:d4:76:08:2b:b1:82:ea:60:a1:ce:1a:83:8b: e7:5c:a0:d7:20:fa:9e:e5:b5:ca:f9:76:4a:7f:32: d9:09:a8:83:cd:c9:b1:b5:a3:e7:df:a3:65:30:b2: df:c8:fd:ea:c7:f5:ca:70:a9:79:cc:81:b0:e5:61: 53:c2:30:af:fe:01:2f:f6:44:ac:51:8d:49:b4:f7: 23:28:5e:ef:e4:cb:4a:fc:3f:49:17:23:69:ad:fc: 1d:47:fc:17:c9:33:e8:98:64:4f:4a:2b:e5:40:a1: f2:65:f6:b2:04:6f:64:0f:fb:35:f4:de:de:50:08: 52:49:17:7b:7b:bf:28:f7:29:0b:5c:14:74:04:b4: b9:38:88:1f:d3:41:32:86:ef:ff:85:08:e8:e4:48: 85:11:b6:e3:d2:27:a2:b3:ea:2e:f4:f6:76:4f:5c: 04:fc:97:88:a3:f4:51:8a:3b:50:2d:fd:71:7e:0e: 4d:3b:42:6a:f2:f9:37:66:24:7c:dc:bc:c3:05:f7: ab:6f:f8:9f:04:f9:f4:77:77:f3:1d:78:1b:a5:ef: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:47:C4:EA:05:F6:BF:61:C7:A1:E3:96:8D:94:C6:12:21:0B:BB:17 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-kfE6gX2v2HHoeOWjZTGEiELuxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.214.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a2:f6:6e:2f:07:46:06:50:36:db:54:c6:b2:9c:e8:b7:5e: b5:e5:ee:77:eb:bd:26:a6:ef:37:d6:be:09:34:c6:ee:16:dc: dd:4b:5a:be:27:62:0d:e0:19:22:ed:04:17:45:66:a7:d0:f8: 86:d9:c2:44:4e:cd:43:48:ca:fc:42:a4:be:af:73:ec:3e:a2: aa:3f:18:18:96:85:e8:10:6c:b4:cc:fb:ef:c8:af:9f:77:1f: 44:78:50:1d:b4:1e:94:82:32:15:3e:b8:a3:0c:66:d1:a1:ff: 30:4b:ee:b0:6f:66:50:ef:25:77:47:24:8c:05:82:a2:40:34: 8a:92:95:e7:79:3b:46:12:02:95:ee:92:78:fb:4e:b9:a2:45: 1c:70:22:a5:a1:d8:97:18:0e:75:a1:69:75:20:f0:12:24:44: 48:d0:82:26:03:3f:24:27:a1:5e:fd:43:97:03:8d:14:5e:62: 36:51:08:f4:46:65:b2:cf:9b:7b:39:2a:f4:a8:93:51:82:56: 84:b5:aa:df:af:98:39:ab:85:e6:77:bc:64:c9:62:37:82:b3: af:b0:bd:19:d6:c9:79:be:5b:59:ee:b8:d9:08:9f:44:49:cd: 2a:8d:fc:d3:c8:10:5f:48:d0:d5:85:c4:3a:17:1a:00:ec:de: 91:e5:bd:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBNDdDNEVBMDVGNkJG NjFDN0ExRTM5NjhEOTRDNjEyMjEwQkJCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCjuQPxKX9PX/pjKrYfieEwwGiJLxPrcUjPwOfuw9+bos1az4U ECR0ZcMx1pPD1HYIK7GC6mChzhqDi+dcoNcg+p7ltcr5dkp/MtkJqIPNybG1o+ff o2Uwst/I/erH9cpwqXnMgbDlYVPCMK/+AS/2RKxRjUm09yMoXu/ky0r8P0kXI2mt /B1H/BfJM+iYZE9KK+VAofJl9rIEb2QP+zX03t5QCFJJF3t7vyj3KQtcFHQEtLk4 iB/TQTKG7/+FCOjkSIURtuPSJ6Kz6i709nZPXAT8l4ij9FGKO1At/XF+Dk07Qmry +TdmJHzcvMMF96tv+J8E+fR3d/MdeBul7xTbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+kfE6gX2v2HHoeOWjZTGEiELuxcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy1rZkU2Z1gydjJISG9lT1dq WlRHRWlFTHV4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 PNYwDQYJKoZIhvcNAQELBQADggEBAHSi9m4vB0YGUDbbVMaynOi3XrXl7nfrvSam 7zfWvgk0xu4W3N1LWr4nYg3gGSLtBBdFZqfQ+IbZwkROzUNIyvxCpL6vc+w+oqo/ GBiWhegQbLTM++/Ir593H0R4UB20HpSCMhU+uKMMZtGh/zBL7rBvZlDvJXdHJIwF gqJANIqSled5O0YSApXuknj7TrmiRRxwIqWh2JcYDnWhaXUg8BIkREjQgiYDPyQn oV79Q5cDjRReYjZRCPRGZbLPm3s5KvSok1GCVoS1qt+vmDmrheZ3vGTJYjeCs6+w vRnWyXm+W1nuuNkIn0RJzSqN/NPIEF9I0NWFxDoXGgDs3pHlvYM= -----END CERTIFICATE-----Generated at Fri Apr 18 16:47:26 2025 by rpki-client