$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6924aywFN0gWvcwq3fualBj500s.roa File: 6924aywFN0gWvcwq3fualBj500s.roa (raw, json) Hash identifier: /xX0Uyll9zQa/hI6CHscOtvt+vPZR6Bekoz+AYI9r9I= Subject key identifier: EB:DD:B8:6B:2C:05:37:48:16:BD:CC:2A:DD:FB:9A:94:18:F9:D3:4B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23CA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6924aywFN0gWvcwq3fualBj500s.roa Signing time: Mon 10 Feb 2025 14:17:56 +0000 ROA not before: Mon 10 Feb 2025 14:17:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 119.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9162 (0x23ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EBDDB86B2C05374816BDCC2ADDFB9A9418F9D34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:d4:4a:8a:3a:b3:5f:2c:86:87:38:ab:ba: 62:ee:8c:2f:96:2a:64:ee:f8:ee:60:cb:28:57:8c: 52:f6:a5:9c:11:fb:7e:86:aa:a2:f6:83:a0:f0:84: 36:90:b9:68:86:f6:46:46:7d:8c:74:10:40:ff:57: 8b:77:b0:f4:7d:49:51:d4:6e:83:50:5f:2c:23:6e: 32:12:b7:21:34:18:43:28:9a:34:99:a0:72:28:9e: fb:db:76:7e:ee:42:42:5f:38:66:4e:65:26:31:2d: 33:5e:be:b8:ee:18:34:6c:0a:49:b3:15:39:6c:ff: ff:d4:31:30:bf:39:f9:cb:6b:af:f9:73:25:b6:70: e3:eb:d2:2f:6c:d3:e1:ee:a0:1d:f9:45:e0:84:c0: 7e:f8:86:ad:d2:15:0a:5b:08:d2:46:8f:26:58:25: cc:ae:46:31:38:ed:25:a9:80:5c:c0:45:b5:bd:14: ed:be:b1:de:19:78:e4:29:ff:44:f6:05:dd:3e:9e: e7:a0:5c:c4:f4:53:f6:b9:a9:1b:e0:10:ca:36:f7: 0a:41:af:39:2e:89:db:9a:a5:c3:7b:7d:f7:e1:72: 40:9b:40:05:2a:07:2f:b3:ec:ac:3b:af:c1:ce:9a: b0:29:bc:b6:43:b2:1b:c1:a2:be:f8:56:4f:8a:a9: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DD:B8:6B:2C:05:37:48:16:BD:CC:2A:DD:FB:9A:94:18:F9:D3:4B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6924aywFN0gWvcwq3fualBj500s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 14:54:b9:5c:9f:97:8b:f9:b2:ae:23:e2:08:37:7a:93:36:c8: bf:1a:76:1a:dd:f6:7a:b8:86:e7:c6:e3:39:a2:eb:dc:6c:40: 4d:41:71:c6:55:4b:00:3e:d0:b2:45:f4:37:81:b0:c1:17:01: 10:61:e4:27:22:2f:f1:ac:c9:44:bc:67:86:ab:4a:a5:b9:65: 12:05:04:39:76:fa:b0:fb:fd:06:c5:7b:25:c6:e3:ab:8e:74: cb:6b:57:cd:c7:f2:d4:13:2a:53:56:05:fc:b1:61:3c:a3:40: e8:2e:61:20:79:59:ca:9a:43:72:d7:b9:d1:07:c5:91:d7:7d: a7:d9:71:3a:db:72:b5:4c:ac:e6:ce:5d:50:17:aa:b7:f2:7c: 18:e3:b9:7c:c0:b9:5a:c0:df:93:e5:47:6b:6a:4e:63:7a:ec: 58:38:16:fb:a5:01:20:f5:b1:57:a5:8d:de:e2:b2:9e:3e:97: d3:dc:19:2b:de:2b:59:80:73:eb:aa:0e:d9:ef:f7:b0:77:22: 52:a4:c6:ae:2e:21:fa:8d:f9:de:ed:ea:a5:25:fb:d8:ef:02: ab:42:34:33:ac:8a:66:12:74:ae:48:c4:f6:dc:95:92:26:38: e6:34:8d:aa:2d:06:93:3f:c0:e6:3a:a2:56:19:03:7a:b4:d7: 24:b1:e0:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVCRERCODZCMkMwNTM3 NDgxNkJEQ0MyQURERkI5QTk0MThGOUQzNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHKNRKijqzXyyGhzirumLujC+WKmTu+O5gyyhXjFL2pZwR+36G qqL2g6DwhDaQuWiG9kZGfYx0EED/V4t3sPR9SVHUboNQXywjbjIStyE0GEMomjSZ oHIonvvbdn7uQkJfOGZOZSYxLTNevrjuGDRsCkmzFTls///UMTC/OfnLa6/5cyW2 cOPr0i9s0+HuoB35ReCEwH74hq3SFQpbCNJGjyZYJcyuRjE47SWpgFzARbW9FO2+ sd4ZeOQp/0T2Bd0+nuegXMT0U/a5qRvgEMo29wpBrzkuiduapcN7fffhckCbQAUq By+z7Kw7r8HOmrApvLZDshvBor74Vk+KqZdxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6924aywFN0gWvcwq3fualBj500swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzY5MjRheXdGTjBnV3Zjd3Ez ZnVhbEJqNTAwcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 TYAwDQYJKoZIhvcNAQELBQADggEBABRUuVyfl4v5sq4j4gg3epM2yL8adhrd9nq4 hufG4zmi69xsQE1BccZVSwA+0LJF9DeBsMEXARBh5CciL/GsyUS8Z4arSqW5ZRIF BDl2+rD7/QbFeyXG46uOdMtrV83H8tQTKlNWBfyxYTyjQOguYSB5WcqaQ3LXudEH xZHXfafZcTrbcrVMrObOXVAXqrfyfBjjuXzAuVrA35PlR2tqTmN67Fg4FvulASD1 sVeljd7isp4+l9PcGSveK1mAc+uqDtnv97B3IlKkxq4uIfqN+d7t6qUl+9jvAqtC NDOsimYSdK5IxPbclZImOOY0jaotBpM/wOY6olYZA3q01ySx4PQ= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:41 2025 by rpki-client