$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BRhE7GRa7gC5LuzbpXz7hiO1gZ8.roa File: BRhE7GRa7gC5LuzbpXz7hiO1gZ8.roa (raw, json) Hash identifier: /jUQ3K/+0W++5nmT9u4lZFqoiHgQpgPfM+USZ5DEhfo= Subject key identifier: 05:18:44:EC:64:5A:EE:00:B9:2E:EC:DB:A5:7C:FB:86:23:B5:81:9F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24A0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BRhE7GRa7gC5LuzbpXz7hiO1gZ8.roa Signing time: Mon 10 Feb 2025 14:18:50 +0000 ROA not before: Mon 10 Feb 2025 14:18:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 122.254.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9376 (0x24a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=051844EC645AEE00B92EECDBA57CFB8623B5819F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:8a:a7:d9:8d:d8:f8:ab:8f:13:93:16:6e: d2:48:d4:59:93:9f:b5:65:84:f5:14:42:4d:48:ab: d5:20:a5:b6:f8:30:aa:86:c9:9c:ea:8e:ed:3e:9e: 5b:7f:21:ab:5f:1f:71:9a:f7:fb:bc:64:e0:d6:e7: fc:13:48:a2:2f:b4:fe:c4:f2:f3:42:21:b5:f8:0f: 5f:87:47:91:30:53:f9:0d:62:40:de:fb:d8:5c:1b: 5c:ef:16:47:c3:51:18:f6:c3:dc:22:f9:2d:64:24: 53:7e:16:29:38:54:9a:47:cc:e9:9a:56:fc:f4:30: 14:69:c6:e1:ae:8f:69:31:b6:ea:36:5f:87:71:96: 83:1e:da:6c:c3:9b:14:4d:0e:cb:dd:75:80:68:d3: ef:81:f3:ae:f2:51:75:79:13:2b:d9:1f:0a:eb:49: 52:8a:a5:45:c3:f0:d0:10:1b:d0:b7:2d:27:8c:5a: 39:9e:a6:85:68:ea:05:47:88:82:c4:10:09:d0:83: db:53:9a:40:af:58:4c:39:4e:31:cb:77:2c:c9:db: ea:57:54:e8:bb:a9:9c:06:14:9e:92:14:6a:d7:6a: 49:c4:1b:7d:72:02:46:fc:9a:1a:0e:95:a7:bc:c4: 81:02:8a:12:62:76:a7:2d:34:c1:76:62:e9:0b:a3: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:18:44:EC:64:5A:EE:00:B9:2E:EC:DB:A5:7C:FB:86:23:B5:81:9F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BRhE7GRa7gC5LuzbpXz7hiO1gZ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.32.0/21 Signature Algorithm: sha256WithRSAEncryption 37:14:ab:19:d9:a9:aa:31:98:b4:13:77:50:9a:a3:d7:9b:10: 32:62:ee:e6:4f:4b:83:84:09:2a:79:c5:06:13:65:18:4f:f1: c9:67:a1:a5:cb:0f:bf:53:9e:b0:16:7e:e6:65:c9:e5:04:68: 36:09:a5:2c:c5:75:25:bb:c2:1d:a3:0a:87:9d:9f:fd:c2:c0: 10:44:f2:9d:c1:4a:de:ff:b4:4d:06:11:2b:6b:2c:76:7d:1e: 1f:cb:fd:a7:83:a3:c3:1a:e6:7c:47:1b:7c:5a:37:ed:ad:28: 6c:76:73:ca:39:4f:7d:29:39:c6:f4:68:f7:2a:fc:11:9a:58: 1b:28:12:f2:94:b5:fc:81:2d:d8:82:28:e5:b0:ee:e1:b1:b9: 5c:07:bd:4b:68:80:44:c7:8d:c9:2d:99:e9:b8:dc:fe:c5:94: 4e:54:d9:9e:38:a8:0f:4f:dd:30:68:36:d3:61:01:c8:59:40: 0e:df:dc:4e:df:dd:59:d6:1d:9b:06:0b:af:f1:ca:ac:d3:96: 41:81:e3:6b:f6:3c:e7:84:63:43:a3:07:e0:b6:38:b1:15:5f: 19:3e:07:d4:27:96:99:40:6b:68:ed:74:83:e6:16:88:6f:50: 32:a8:80:15:6e:0a:0d:c3:16:36:18:04:65:53:fc:67:31:c2: d9:82:e8:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1MTg0NEVDNjQ1QUVF MDBCOTJFRUNEQkE1N0NGQjg2MjNCNTgxOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdCIqn2Y3Y+KuPE5MWbtJI1FmTn7VlhPUUQk1Iq9Ugpbb4MKqG yZzqju0+nlt/IatfH3Ga9/u8ZODW5/wTSKIvtP7E8vNCIbX4D1+HR5EwU/kNYkDe +9hcG1zvFkfDURj2w9wi+S1kJFN+Fik4VJpHzOmaVvz0MBRpxuGuj2kxtuo2X4dx loMe2mzDmxRNDsvddYBo0++B867yUXV5EyvZHwrrSVKKpUXD8NAQG9C3LSeMWjme poVo6gVHiILEEAnQg9tTmkCvWEw5TjHLdyzJ2+pXVOi7qZwGFJ6SFGrXaknEG31y Akb8mhoOlae8xIECihJidqctNMF2YukLo/fzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBRhE7GRa7gC5LuzbpXz7hiO1gZ8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JSaEU3R1JhN2dDNUx1emJw WHo3aGlPMWdaOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /iAwDQYJKoZIhvcNAQELBQADggEBADcUqxnZqaoxmLQTd1Cao9ebEDJi7uZPS4OE CSp5xQYTZRhP8clnoaXLD79TnrAWfuZlyeUEaDYJpSzFdSW7wh2jCoedn/3CwBBE 8p3BSt7/tE0GEStrLHZ9Hh/L/aeDo8Ma5nxHG3xaN+2tKGx2c8o5T30pOcb0aPcq /BGaWBsoEvKUtfyBLdiCKOWw7uGxuVwHvUtogETHjcktmem43P7FlE5U2Z44qA9P 3TBoNtNhAchZQA7f3E7f3VnWHZsGC6/xyqzTlkGB42v2POeEY0OjB+C2OLEVXxk+ B9QnlplAa2jtdIPmFohvUDKogBVuCg3DFjYYBGVT/GcxwtmC6LM= -----END CERTIFICATE-----Generated at Thu Apr 17 21:08:38 2025 by rpki-client