$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AidOiBOdNH4beRtRgMdS3UxGjt0.roa File: AidOiBOdNH4beRtRgMdS3UxGjt0.roa (raw, json) Hash identifier: EElxKhe1Z6wZSkRUJw+fY8O2y9qwe5YOgd7LnxI/Fhg= Subject key identifier: 02:27:4E:88:13:9D:34:7E:1B:79:1B:51:80:C7:52:DD:4C:46:8E:DD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2442 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AidOiBOdNH4beRtRgMdS3UxGjt0.roa Signing time: Mon 10 Feb 2025 14:18:26 +0000 ROA not before: Mon 10 Feb 2025 14:18:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 119.77.144.0/20 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9282 (0x2442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=02274E88139D347E1B791B5180C752DD4C468EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:58:6a:35:bf:e2:f9:e5:d5:d7:fc:df:d7: f0:e1:13:f1:f4:49:19:ff:ba:9a:12:63:03:49:22: c1:60:f7:7a:a5:19:d5:b8:d2:a0:18:77:b9:66:1e: a1:48:fd:aa:8e:f7:22:1f:94:fe:8e:c2:35:bc:97: 55:28:64:97:0a:a1:97:fa:e3:5d:7c:78:7a:c8:60: 93:d3:04:b6:5d:dd:4a:3a:95:00:3b:cb:cc:d7:f2: d4:61:ff:d1:7b:9b:5e:ea:51:36:77:43:ca:37:bf: 3c:5f:ad:48:20:ee:b1:63:d9:0a:bf:15:6e:7f:0b: df:08:d8:3b:e0:8e:88:86:c3:99:de:11:dc:f2:19: da:7e:75:d1:07:3a:f4:b3:b7:cf:56:9f:21:34:e1: 6e:ea:30:dc:e6:07:9c:dc:e2:c6:44:d1:64:ee:f0: e4:bd:90:49:37:08:20:69:c7:4c:a9:74:78:6e:8f: c6:d9:3b:75:df:80:74:0c:ac:ec:e5:9b:43:d6:bd: c9:2e:e5:bb:f6:6b:47:fe:28:64:4f:77:a6:7d:79: 07:b6:d1:52:42:bd:51:f7:7a:9a:69:e6:2c:65:14: 9b:7f:61:2c:35:1d:49:a6:18:c3:93:09:51:25:1b: 5a:43:c0:da:58:b1:bb:55:bb:b9:14:51:ea:41:e2: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:4E:88:13:9D:34:7E:1B:79:1B:51:80:C7:52:DD:4C:46:8E:DD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AidOiBOdNH4beRtRgMdS3UxGjt0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.144.0/20 Signature Algorithm: sha256WithRSAEncryption 35:91:7c:3b:07:f4:ea:16:99:2e:7f:94:43:77:54:49:82:61: 5b:cc:2b:59:1e:2c:68:2b:12:a1:4f:54:40:b8:fb:a7:6f:27: de:be:6e:5f:92:65:eb:d0:28:0a:90:90:b2:a9:99:1a:f9:39: 68:f2:2f:ea:63:d7:ce:a1:03:65:f7:32:40:fd:36:43:e4:7e: 83:72:dc:52:c7:60:fb:32:57:53:47:6d:d4:7d:28:93:e4:1a: 36:66:c2:ed:b6:14:ce:f5:bc:f5:f5:f7:b6:fc:a9:47:ea:b6: b8:f5:f3:4e:68:57:91:6c:ec:83:c1:fb:f8:84:98:87:3a:8f: e8:53:47:1f:99:ea:34:4e:1e:b6:30:69:c1:90:57:0d:b2:3e: f6:29:59:99:9a:43:d6:ec:7f:ce:96:34:11:6a:4e:9f:bd:96: 49:3b:91:2d:b6:97:9c:e1:89:b8:a8:af:3f:76:a5:3f:b5:31: 37:c4:8a:8d:e0:1b:24:10:ca:73:c8:28:77:b3:0e:2d:e7:18: 2f:17:e9:f2:ec:c7:95:b7:81:de:74:85:5d:85:b8:39:0e:7e: 80:d2:87:b8:12:28:0e:2a:e0:99:2b:16:b0:a8:60:8d:a5:e8: a8:a5:ad:30:72:43:83:c5:62:33:8d:91:bf:82:08:11:b7:4f: 26:94:06:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyMjc0RTg4MTM5RDM0 N0UxQjc5MUI1MTgwQzc1MkRENEM0NjhFREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSJ1hqNb/i+eXV1/zf1/DhE/H0SRn/upoSYwNJIsFg93qlGdW4 0qAYd7lmHqFI/aqO9yIflP6OwjW8l1UoZJcKoZf64118eHrIYJPTBLZd3Uo6lQA7 y8zX8tRh/9F7m17qUTZ3Q8o3vzxfrUgg7rFj2Qq/FW5/C98I2DvgjoiGw5neEdzy Gdp+ddEHOvSzt89WnyE04W7qMNzmB5zc4sZE0WTu8OS9kEk3CCBpx0ypdHhuj8bZ O3XfgHQMrOzlm0PWvcku5bv2a0f+KGRPd6Z9eQe20VJCvVH3eppp5ixlFJt/YSw1 HUmmGMOTCVElG1pDwNpYsbtVu7kUUepB4v2BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAidOiBOdNH4beRtRgMdS3UxGjt0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FpZE9pQk9kTkg0YmVSdFJn TWRTM1V4R2p0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR3 TZAwDQYJKoZIhvcNAQELBQADggEBADWRfDsH9OoWmS5/lEN3VEmCYVvMK1keLGgr EqFPVEC4+6dvJ96+bl+SZevQKAqQkLKpmRr5OWjyL+pj186hA2X3MkD9NkPkfoNy 3FLHYPsyV1NHbdR9KJPkGjZmwu22FM71vPX197b8qUfqtrj1805oV5Fs7IPB+/iE mIc6j+hTRx+Z6jROHrYwacGQVw2yPvYpWZmaQ9bsf86WNBFqTp+9lkk7kS22l5zh ibiorz92pT+1MTfEio3gGyQQynPIKHezDi3nGC8X6fLsx5W3gd50hV2FuDkOfoDS h7gSKA4q4JkrFrCoYI2l6KilrTByQ4PFYjONkb+CCBG3TyaUBrg= -----END CERTIFICATE-----Generated at Thu Apr 17 21:01:41 2025 by rpki-client