$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4i7XtBQmv1N8A14aZqE6aS1eUsY.roa File: 4i7XtBQmv1N8A14aZqE6aS1eUsY.roa (raw, json) Hash identifier: JLyr+LPfUVDK9Zv2KhSIPP8FKkG/HjIt9sU006FL9Fc= Subject key identifier: E2:2E:D7:B4:14:26:BF:53:7C:03:5E:1A:66:A1:3A:69:2D:5E:52:C6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24A6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4i7XtBQmv1N8A14aZqE6aS1eUsY.roa Signing time: Mon 10 Feb 2025 14:18:51 +0000 ROA not before: Mon 10 Feb 2025 14:18:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 114.198.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9382 (0x24a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E22ED7B41426BF537C035E1A66A13A692D5E52C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:d9:02:0d:13:63:f5:a3:f4:b3:35:10:b5: 54:fc:43:84:fc:87:9a:74:34:1e:a9:ce:96:69:29: a5:65:fa:2e:b6:27:0e:2c:ef:d5:32:c0:d1:ba:10: d4:b6:c0:43:81:9f:c4:0f:9a:68:45:23:55:ad:8b: 08:25:1f:b2:e6:ff:a1:9a:4a:7f:c0:12:4b:39:e0: 20:67:94:b6:a8:54:65:22:7b:aa:d3:ae:d4:e6:04: 2f:82:99:30:74:c4:a0:54:dc:c2:fc:52:1b:2d:c0: 25:d8:fe:98:54:28:46:9b:3a:00:6b:c1:a4:35:a5: 9a:08:20:e6:cc:87:99:b1:89:be:4b:78:0c:45:d4: 8a:69:db:90:83:c4:3b:f7:92:3a:7c:42:30:0d:12: bb:d7:57:fc:b9:f9:c2:d0:e0:59:57:c1:6e:78:0b: dc:cc:13:eb:9d:a7:51:17:57:c5:d5:c3:3c:11:d6: c4:c9:e9:73:49:d5:55:fd:e2:41:5d:2f:71:4a:c9: 24:9c:a2:1a:8a:78:b7:90:71:4b:67:e8:cf:a3:86: f1:ab:6e:f6:d0:fb:62:7d:71:a1:b9:20:61:69:3c: f2:93:f9:4a:c1:7c:07:d5:c2:5c:03:6f:8a:ea:15: d6:be:b7:7e:90:c8:3f:20:57:1a:5b:4f:7a:4f:97: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2E:D7:B4:14:26:BF:53:7C:03:5E:1A:66:A1:3A:69:2D:5E:52:C6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4i7XtBQmv1N8A14aZqE6aS1eUsY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.160.0/20 Signature Algorithm: sha256WithRSAEncryption 49:9f:fb:c6:7b:7d:fd:69:d6:f4:42:c1:f5:88:9a:18:ab:d0: 47:5c:ba:49:46:29:ed:05:78:5e:0a:a1:dc:bf:e7:f7:2b:df: 9e:4b:16:b4:a5:53:ca:85:63:54:00:1c:02:9a:25:ae:26:c5: 0b:80:e4:00:cb:81:21:a3:d9:65:07:ee:87:c4:37:db:24:3e: 84:43:97:aa:37:be:f3:bd:9f:06:c7:55:bc:5d:7d:f8:72:77: 3d:9d:76:85:b0:41:c6:00:04:ae:43:c8:e0:56:bf:ed:70:32: 6e:b9:0b:ac:20:df:51:14:b7:dd:e9:e9:83:c1:b0:24:80:b9: a2:13:94:99:b8:06:0d:d1:6d:31:2e:ef:cc:8a:ee:97:d5:b1: 5d:71:aa:bb:06:47:b8:6a:ca:f7:a5:4f:69:d7:b1:6f:d7:e6: b9:03:64:a7:14:4b:9b:01:7e:23:a4:88:87:f8:36:82:9a:7b: 4e:7a:07:ef:a1:51:23:61:cf:34:a5:c3:8e:b5:80:a8:aa:dd: fb:5a:14:9b:24:cd:9d:e1:cd:20:3e:5c:70:c7:ee:7b:7f:df: f3:0c:e7:d5:e1:bb:ce:f7:36:f0:b6:37:70:e4:eb:46:ec:3a: f7:ff:4e:73:aa:f2:80:ce:54:80:bc:34:27:db:90:40:13:ad: bf:04:63:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyMkVEN0I0MTQyNkJG NTM3QzAzNUUxQTY2QTEzQTY5MkQ1RTUyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOs9kCDRNj9aP0szUQtVT8Q4T8h5p0NB6pzpZpKaVl+i62Jw4s 79UywNG6ENS2wEOBn8QPmmhFI1WtiwglH7Lm/6GaSn/AEks54CBnlLaoVGUie6rT rtTmBC+CmTB0xKBU3ML8UhstwCXY/phUKEabOgBrwaQ1pZoIIObMh5mxib5LeAxF 1Ipp25CDxDv3kjp8QjANErvXV/y5+cLQ4FlXwW54C9zME+udp1EXV8XVwzwR1sTJ 6XNJ1VX94kFdL3FKySScohqKeLeQcUtn6M+jhvGrbvbQ+2J9caG5IGFpPPKT+UrB fAfVwlwDb4rqFda+t36QyD8gVxpbT3pPlzmjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4i7XtBQmv1N8A14aZqE6aS1eUsYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRpN1h0QlFtdjFOOEExNGFa cUU2YVMxZVVzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xqAwDQYJKoZIhvcNAQELBQADggEBAEmf+8Z7ff1p1vRCwfWImhir0EdcuklGKe0F eF4Kody/5/cr355LFrSlU8qFY1QAHAKaJa4mxQuA5ADLgSGj2WUH7ofEN9skPoRD l6o3vvO9nwbHVbxdffhydz2ddoWwQcYABK5DyOBWv+1wMm65C6wg31EUt93p6YPB sCSAuaITlJm4Bg3RbTEu78yK7pfVsV1xqrsGR7hqyvelT2nXsW/X5rkDZKcUS5sB fiOkiIf4NoKae056B++hUSNhzzSlw461gKiq3ftaFJskzZ3hzSA+XHDH7nt/3/MM 59Xhu873NvC2N3Dk60bsOvf/TnOq8oDOVIC8NCfbkEATrb8EYyY= -----END CERTIFICATE-----Generated at Thu Apr 17 21:07:21 2025 by rpki-client