$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AX3bxl7kaIJdVlp7O0K7Cm5QYLw.roa File: AX3bxl7kaIJdVlp7O0K7Cm5QYLw.roa (raw, json) Hash identifier: 3xjeMgofjtuIQpYHYkLO6EknxO4dtIpYNcc/avw/NBM= Subject key identifier: 01:7D:DB:C6:5E:E4:68:82:5D:56:5A:7B:3B:42:BB:0A:6E:50:60:BC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23DB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AX3bxl7kaIJdVlp7O0K7Cm5QYLw.roa Signing time: Mon 10 Feb 2025 14:18:00 +0000 ROA not before: Mon 10 Feb 2025 14:18:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 124.6.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9179 (0x23db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=017DDBC65EE468825D565A7B3B42BB0A6E5060BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:21:eb:3e:59:67:6b:7b:dd:74:7d:ae:f5: c6:4a:08:fd:c2:0e:31:90:66:d4:86:ac:c3:bd:1c: 02:40:f0:e7:b2:bf:9d:9d:49:ee:8f:69:40:8c:6b: 37:55:2c:98:46:59:38:a4:ee:6c:c5:11:ec:2e:36: b7:c4:b4:3a:25:8f:3c:7c:7e:73:9a:83:65:8d:ef: 89:dc:5a:9f:46:7b:fb:fa:ac:8f:56:cb:80:c7:67: 8d:d8:0a:c3:e6:2c:1f:2c:9b:d7:0c:f1:78:75:b8: 26:9c:3c:f8:8e:94:73:75:50:6d:45:03:b1:ae:78: 0c:db:ee:c2:1a:8a:15:e7:df:de:05:46:61:0b:cf: 20:e2:fe:dc:8a:a2:fe:42:dd:a0:e8:47:12:69:70: 9e:13:80:23:46:b7:a3:54:82:a5:e2:b9:00:c0:95: a9:67:1f:9e:a2:60:a4:db:c8:9b:32:c0:63:a6:4d: d8:db:a5:25:71:c5:66:a6:30:1b:94:40:37:cb:37: d5:42:8a:40:3c:36:d2:9e:51:90:8c:bd:f2:dd:4c: 0d:e6:ac:70:0d:ae:e2:c5:0c:68:b9:5e:24:98:f3: 88:20:10:43:c7:0e:76:d8:a4:e6:0f:ac:43:c4:94: 0e:dc:66:79:c5:e1:ef:52:7d:f1:b9:6a:d5:49:94: 51:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:DB:C6:5E:E4:68:82:5D:56:5A:7B:3B:42:BB:0A:6E:50:60:BC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AX3bxl7kaIJdVlp7O0K7Cm5QYLw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.24.0/22 Signature Algorithm: sha256WithRSAEncryption 77:14:87:38:1c:e0:36:c2:4e:b2:cc:c7:f4:bc:af:bb:db:37: 5c:e3:9e:ad:e3:38:5b:d6:c1:8a:a1:e9:2b:7f:55:0e:5e:35: e9:60:b2:6b:e2:ef:2a:ba:24:e2:89:34:d3:a1:e9:e2:dd:df: f7:46:43:53:6c:8c:07:71:2c:a5:20:0f:fc:a4:a5:a2:01:08: 87:86:05:3f:b6:fa:e7:f9:12:e2:7d:1b:5d:d9:b3:f5:e1:68: 0d:74:57:b5:74:45:fa:fa:15:cd:c8:a9:58:d5:19:08:60:1e: 07:6b:5d:d5:ce:c2:5c:ee:a3:c2:23:96:67:95:ab:64:55:fb: 34:16:9b:41:fa:ad:e8:13:58:b1:8d:cc:90:d1:94:a4:78:ce: f0:5f:a5:f1:a4:12:5f:78:52:40:32:9f:89:31:13:b8:99:24: 79:56:83:96:14:b6:f4:d1:c9:66:70:f0:8f:ba:66:81:e7:46: af:49:e4:9b:2f:1d:23:d2:24:b0:81:d3:24:81:14:9e:45:fa: 4b:02:cf:55:ba:a0:1f:d1:73:ed:d5:5a:a8:0e:ff:7c:79:49: af:1d:fa:8c:9b:0c:f4:11:6e:e4:ff:3c:74:eb:70:db:37:3a: 65:a0:d4:f8:5c:be:29:73:97:4d:ec:5c:4f:7b:71:ad:42:8b: c6:fa:4c:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxN0REQkM2NUVFNDY4 ODI1RDU2NUE3QjNCNDJCQjBBNkU1MDYwQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC58CHrPllna3vddH2u9cZKCP3CDjGQZtSGrMO9HAJA8Oeyv52d Se6PaUCMazdVLJhGWTik7mzFEewuNrfEtDoljzx8fnOag2WN74ncWp9Ge/v6rI9W y4DHZ43YCsPmLB8sm9cM8Xh1uCacPPiOlHN1UG1FA7GueAzb7sIaihXn394FRmEL zyDi/tyKov5C3aDoRxJpcJ4TgCNGt6NUgqXiuQDAlalnH56iYKTbyJsywGOmTdjb pSVxxWamMBuUQDfLN9VCikA8NtKeUZCMvfLdTA3mrHANruLFDGi5XiSY84ggEEPH DnbYpOYPrEPElA7cZnnF4e9SffG5atVJlFEBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAX3bxl7kaIJdVlp7O0K7Cm5QYLwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FYM2J4bDdrYUlKZFZscDdP MEs3Q201UVlMdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BhgwDQYJKoZIhvcNAQELBQADggEBAHcUhzgc4DbCTrLMx/S8r7vbN1zjnq3jOFvW wYqh6St/VQ5eNelgsmvi7yq6JOKJNNOh6eLd3/dGQ1NsjAdxLKUgD/ykpaIBCIeG BT+2+uf5EuJ9G13Zs/XhaA10V7V0Rfr6Fc3IqVjVGQhgHgdrXdXOwlzuo8IjlmeV q2RV+zQWm0H6regTWLGNzJDRlKR4zvBfpfGkEl94UkAyn4kxE7iZJHlWg5YUtvTR yWZw8I+6ZoHnRq9J5JsvHSPSJLCB0ySBFJ5F+ksCz1W6oB/Rc+3VWqgO/3x5Sa8d +oybDPQRbuT/PHTrcNs3OmWg1Phcvilzl03sXE97ca1Ci8b6TGI= -----END CERTIFICATE-----Generated at Thu Apr 17 21:04:31 2025 by rpki-client