$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AVI6t5XHkrdIZ1_yG49a9EjGbx8.roa File: AVI6t5XHkrdIZ1_yG49a9EjGbx8.roa (raw, json) Hash identifier: T7Wd9c3l4L26EHieb2R3a4WrAEZN5pjfyzhtL1bEBaw= Subject key identifier: 01:52:3A:B7:95:C7:92:B7:48:67:5F:F2:1B:8F:5A:F4:48:C6:6F:1F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 237B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AVI6t5XHkrdIZ1_yG49a9EjGbx8.roa Signing time: Mon 10 Feb 2025 14:17:38 +0000 ROA not before: Mon 10 Feb 2025 14:17:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9083 (0x237b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=01523AB795C792B748675FF21B8F5AF448C66F1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:9f:ec:85:42:95:e5:5d:2b:a7:b2:e4:6d: c1:b0:de:92:28:e4:f8:6a:cb:ed:42:b6:a7:9f:07: f1:00:2f:b2:55:e5:88:9f:78:22:43:6f:49:ce:79: 96:42:07:4c:6f:11:a9:a6:ee:bf:4b:5f:bb:c9:45: 27:32:51:e4:e7:3a:e4:96:0e:10:14:6f:53:46:2e: 56:70:3e:71:e4:53:5e:8a:97:a3:2e:b4:42:41:93: 05:51:e4:23:dc:ae:d8:3d:4c:d3:19:8d:20:81:da: ad:6c:31:a4:8a:5f:3f:32:87:d5:25:4d:0c:fd:e1: b7:6e:05:39:e3:98:57:d7:9c:e7:a2:ee:77:59:23: 6d:83:9b:06:20:47:a5:b1:2f:f9:ed:c1:11:cc:82: c8:14:90:8b:e9:b9:49:af:65:9f:0f:2f:84:0a:d1: ae:89:be:fc:19:f8:02:1c:46:19:52:03:09:61:0c: 37:0e:1e:26:8a:c9:e2:d7:1f:6c:14:4b:e0:0e:a5: c4:d8:d2:49:aa:97:52:75:9c:fb:36:4f:2e:90:bb: e1:43:32:00:a3:80:34:a3:a1:0c:e8:af:ac:34:15: 2e:15:d5:84:df:85:95:f3:cc:f2:70:bf:36:87:a3: 6c:f3:4c:bf:2f:c0:67:68:db:6c:81:67:6e:27:c6: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:3A:B7:95:C7:92:B7:48:67:5F:F2:1B:8F:5A:F4:48:C6:6F:1F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AVI6t5XHkrdIZ1_yG49a9EjGbx8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.40.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:5c:d8:bb:d0:d4:ec:da:ac:31:0c:8c:bc:7b:0d:54:05:8f: 9c:67:89:c1:64:22:5e:fd:cc:62:a7:ff:c5:de:63:46:15:ff: 4a:6b:6d:3d:ab:7a:9d:1c:46:8a:62:0f:0e:65:ee:e6:44:82: 45:ef:eb:ab:88:dd:03:0b:e9:4d:fb:96:06:09:04:d1:96:fd: 3b:c5:fa:9e:75:2a:d9:24:dc:21:39:47:83:96:4a:7b:39:aa: 0b:a2:1f:91:26:ce:a4:6b:3b:46:0c:83:ee:8c:3d:fc:59:28: 8b:3a:ec:42:7d:ce:ba:a5:af:2a:d2:12:46:c4:ee:42:f9:14: 55:75:ec:0f:6c:3c:ef:f5:cd:29:5d:d3:10:a2:80:42:f5:7e: 62:d3:6c:46:4f:98:1a:cb:90:3d:48:d0:bc:fb:cb:56:87:65: 27:c1:27:0e:36:10:a6:bf:ef:8e:75:ee:d9:75:8b:8f:4d:8a: 35:14:43:d6:96:25:19:6c:60:aa:c6:eb:c3:53:24:9e:56:8e: fc:3c:53:f4:ed:2e:90:4a:b0:86:79:57:85:8c:2c:9c:29:5b: 50:1f:b8:64:5b:e5:00:0a:86:33:c0:58:64:68:cf:25:10:96: 1f:23:4c:7d:a6:f0:26:e3:19:51:f4:4a:14:f4:77:b7:ab:81: b5:d8:fd:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxNTIzQUI3OTVDNzky Qjc0ODY3NUZGMjFCOEY1QUY0NDhDNjZGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDErJ/shUKV5V0rp7LkbcGw3pIo5Phqy+1CtqefB/EAL7JV5Yif eCJDb0nOeZZCB0xvEamm7r9LX7vJRScyUeTnOuSWDhAUb1NGLlZwPnHkU16Kl6Mu tEJBkwVR5CPcrtg9TNMZjSCB2q1sMaSKXz8yh9UlTQz94bduBTnjmFfXnOei7ndZ I22DmwYgR6WxL/ntwRHMgsgUkIvpuUmvZZ8PL4QK0a6JvvwZ+AIcRhlSAwlhDDcO HiaKyeLXH2wUS+AOpcTY0kmql1J1nPs2Ty6Qu+FDMgCjgDSjoQzor6w0FS4V1YTf hZXzzPJwvzaHo2zzTL8vwGdo22yBZ24nxtGLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAVI6t5XHkrdIZ1/yG49a9EjGbx8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FWSTZ0NVhIa3JkSVoxX3lH NDlhOUVqR2J4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TCgwDQYJKoZIhvcNAQELBQADggEBAJ5c2LvQ1OzarDEMjLx7DVQFj5xnicFkIl79 zGKn/8XeY0YV/0prbT2rep0cRopiDw5l7uZEgkXv66uI3QML6U37lgYJBNGW/TvF +p51Ktkk3CE5R4OWSns5qguiH5EmzqRrO0YMg+6MPfxZKIs67EJ9zrqlryrSEkbE 7kL5FFV17A9sPO/1zSld0xCigEL1fmLTbEZPmBrLkD1I0Lz7y1aHZSfBJw42EKa/ 74517tl1i49NijUUQ9aWJRlsYKrG68NTJJ5Wjvw8U/TtLpBKsIZ5V4WMLJwpW1Af uGRb5QAKhjPAWGRozyUQlh8jTH2m8CbjGVH0ShT0d7ergbXY/fA= -----END CERTIFICATE-----Generated at Fri Apr 18 16:34:07 2025 by rpki-client