$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BN3Hs6VJ-fHamvxXUaVMFLLQbFg.roa File: BN3Hs6VJ-fHamvxXUaVMFLLQbFg.roa (raw, json) Hash identifier: smym4U+dNAh3fSm+VFqtn5JA+yaRl4V6gzIle/fjUKo= Subject key identifier: 04:DD:C7:B3:A5:49:F9:F1:DA:9A:FC:57:51:A5:4C:14:B2:D0:6C:58 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23F7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BN3Hs6VJ-fHamvxXUaVMFLLQbFg.roa Signing time: Mon 10 Feb 2025 14:18:08 +0000 ROA not before: Mon 10 Feb 2025 14:18:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 122.254.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9207 (0x23f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=04DDC7B3A549F9F1DA9AFC5751A54C14B2D06C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:4e:9a:d2:21:f2:40:86:38:1b:11:25:d3: 55:f8:5f:ac:20:80:1a:6c:ee:3f:3d:26:0d:90:f8: bd:71:ec:13:cc:15:31:b7:f9:0b:1a:60:3f:d4:62: e7:b5:d3:cb:a8:3d:24:59:31:73:a8:b6:06:ce:a2: 0f:09:97:88:4c:ee:82:52:6a:c9:e8:cc:08:13:ea: 5c:40:6c:41:f4:d8:ee:7c:7c:7a:68:2d:57:91:95: 87:dc:95:50:bc:dd:5f:ff:6e:24:94:fa:5c:e8:73: ec:69:8c:4d:af:52:3e:f0:39:6b:7c:b9:29:1a:e0: 2d:b2:b4:73:3f:d5:03:20:77:ed:aa:96:1a:76:36: 67:9b:58:31:62:ed:2e:23:65:d9:fa:1b:97:76:dc: 7b:78:e6:9f:9c:e3:28:7c:ab:0e:e6:e2:1f:5d:d2: ac:b9:8f:aa:ed:37:7a:cc:30:ad:8b:ad:cf:35:64: bb:5c:dc:29:97:5c:d8:5b:20:9d:8d:5a:36:12:97: e9:7c:e6:cb:9c:db:b0:5c:bf:33:3c:58:1f:d1:09: bd:96:d0:90:a1:4c:17:86:86:4a:08:0f:20:5d:98: 12:13:4b:65:ee:87:d4:5e:a2:ba:b3:49:6e:c0:5a: 1e:5f:cc:f4:c4:e7:ba:08:99:01:80:d9:b6:b8:b3: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DD:C7:B3:A5:49:F9:F1:DA:9A:FC:57:51:A5:4C:14:B2:D0:6C:58 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BN3Hs6VJ-fHamvxXUaVMFLLQbFg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.8.0/21 Signature Algorithm: sha256WithRSAEncryption 51:ae:92:25:a8:77:e3:19:83:c6:a9:a1:e8:a7:83:36:cd:58: 49:70:70:d2:04:7e:ed:7b:7c:f9:88:f6:e8:61:7f:7b:42:c2: c7:04:43:01:86:b1:75:1b:20:59:6f:41:5e:81:b5:b2:ef:47: 10:8a:2f:eb:1a:4e:f2:3c:0e:22:2b:d1:a3:7c:22:9e:ee:84: 74:3f:fe:a0:59:50:d7:c5:a1:aa:9b:21:8e:b9:0e:9d:38:cb: b4:22:af:09:ee:c9:1f:47:fe:a2:22:13:96:56:05:9b:2a:99: 02:51:3a:6c:f0:a6:bd:65:df:45:eb:4e:a7:c4:99:88:da:ec: c4:01:05:ab:d3:35:2d:f0:7c:a7:ec:22:1a:84:1e:50:d6:1d: c8:68:01:0b:8a:6c:8c:5a:ae:d1:f9:54:63:df:4c:70:b1:2a: 21:ce:4b:56:87:9d:7e:3a:47:5c:74:3e:d6:70:1b:f4:02:45: f6:a0:23:42:ad:84:0a:3e:3a:2f:ad:06:5f:fd:a2:81:e1:59: 50:b4:ec:50:28:03:63:d0:82:69:b1:15:df:30:cf:f4:51:d7: e9:4e:a5:c3:d6:42:9c:43:7e:7c:48:0a:47:12:a3:90:af:05: 97:c5:20:49:d4:bd:ed:4b:13:ba:71:ad:47:bc:08:12:a6:7e: a9:2c:57:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0RERDN0IzQTU0OUY5 RjFEQTlBRkM1NzUxQTU0QzE0QjJEMDZDNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3eE6a0iHyQIY4GxEl01X4X6wggBps7j89Jg2Q+L1x7BPMFTG3 +QsaYD/UYue108uoPSRZMXOotgbOog8Jl4hM7oJSasnozAgT6lxAbEH02O58fHpo LVeRlYfclVC83V//biSU+lzoc+xpjE2vUj7wOWt8uSka4C2ytHM/1QMgd+2qlhp2 NmebWDFi7S4jZdn6G5d23Ht45p+c4yh8qw7m4h9d0qy5j6rtN3rMMK2Lrc81ZLtc 3CmXXNhbIJ2NWjYSl+l85suc27BcvzM8WB/RCb2W0JChTBeGhkoIDyBdmBITS2Xu h9ReorqzSW7AWh5fzPTE57oImQGA2ba4sypXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBN3Hs6VJ+fHamvxXUaVMFLLQbFgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JOM0hzNlZKLWZIYW12eFhV YVZNRkxMUWJGZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /ggwDQYJKoZIhvcNAQELBQADggEBAFGukiWod+MZg8apoeingzbNWElwcNIEfu17 fPmI9uhhf3tCwscEQwGGsXUbIFlvQV6BtbLvRxCKL+saTvI8DiIr0aN8Ip7uhHQ/ /qBZUNfFoaqbIY65Dp04y7QirwnuyR9H/qIiE5ZWBZsqmQJROmzwpr1l30XrTqfE mYja7MQBBavTNS3wfKfsIhqEHlDWHchoAQuKbIxartH5VGPfTHCxKiHOS1aHnX46 R1x0PtZwG/QCRfagI0KthAo+Oi+tBl/9ooHhWVC07FAoA2PQgmmxFd8wz/RR1+lO pcPWQpxDfnxICkcSo5CvBZfFIEnUve1LE7pxrUe8CBKmfqksV5U= -----END CERTIFICATE-----Generated at Fri Apr 18 16:31:29 2025 by rpki-client