$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C7I4_mPrVbqT9O8TWGWOq05CyXI.roa File: C7I4_mPrVbqT9O8TWGWOq05CyXI.roa (raw, json) Hash identifier: YQUgkNL01K0sB0g6LAglu5v7WLNlV4H6X0AKKnLlrqw= Subject key identifier: 0B:B2:38:FE:63:EB:55:BA:93:F4:EF:13:58:65:8E:AB:4E:42:C9:72 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2428 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C7I4_mPrVbqT9O8TWGWOq05CyXI.roa Signing time: Mon 10 Feb 2025 14:18:20 +0000 ROA not before: Mon 10 Feb 2025 14:18:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 211.76.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9256 (0x2428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0BB238FE63EB55BA93F4EF1358658EAB4E42C972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:dc:9b:e8:15:f5:45:a6:f3:cc:a9:40:35: 93:28:89:ca:0f:fd:d1:c5:56:d6:d1:06:5c:e1:36: a4:48:2c:9c:e7:53:ad:30:83:46:0a:db:20:05:1c: 47:b1:25:08:10:27:43:d0:aa:44:68:13:29:d9:d2: 07:e6:b5:1e:81:06:32:53:fe:49:c3:e8:d9:9d:61: ba:b5:31:77:44:6a:d4:e4:50:df:4d:b8:da:a0:b3: e3:20:52:fd:c1:a8:43:a8:14:a2:4d:4c:38:78:a6: 3c:02:20:0d:f9:5c:7e:af:a6:23:08:c8:05:9a:41: 7d:d7:36:3e:71:0b:a3:d6:8b:34:1b:bf:c7:d5:93: 0f:d6:8f:d1:1b:ef:64:d5:b4:a8:3a:bb:e1:aa:89: 88:12:a1:86:d2:4f:bd:1a:05:66:96:3c:b8:a9:bd: de:21:f4:c1:f2:74:83:f6:6a:be:de:40:d2:c0:15: d0:8a:40:74:ca:c8:75:9e:0b:a3:29:dd:db:0f:f6: 18:75:96:6f:58:bd:e9:28:a8:ed:3b:71:57:ff:04: 35:a8:94:7b:55:c2:b2:ad:46:bb:0c:25:c0:53:9d: f5:1f:f4:e6:81:00:2e:04:98:bb:a7:7a:35:ae:5a: 6a:40:80:5d:d9:89:65:59:be:5e:34:98:fd:1e:a0: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B2:38:FE:63:EB:55:BA:93:F4:EF:13:58:65:8E:AB:4E:42:C9:72 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C7I4_mPrVbqT9O8TWGWOq05CyXI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.44.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:c9:f7:c0:54:67:3f:82:45:5a:2f:2a:4c:81:57:5a:02:d8: 29:a8:97:a2:23:77:94:2f:65:71:f7:70:82:bd:27:c4:61:fc: 39:9f:66:b5:f5:a6:db:81:06:1d:54:dc:47:d7:c2:63:fa:f4: 67:5a:3f:dd:00:24:aa:35:93:8c:77:44:fc:cf:34:93:3b:68: d2:c4:52:be:32:4b:ec:90:e9:7c:6f:c8:6c:7a:d9:1d:e7:e3: f3:4d:44:50:74:b8:eb:87:d7:05:52:3c:a3:b1:ac:03:dc:45: 87:75:42:ba:b9:86:37:6b:8e:a0:15:cb:80:93:d0:64:cb:a2: 8d:63:f9:02:e9:54:c6:fd:31:fc:64:66:e7:68:29:20:a7:50: bb:eb:bf:b1:94:43:ef:e7:44:6b:44:c9:6a:2f:f0:6b:00:0b: c5:2d:03:59:7b:33:65:dd:86:3e:50:4c:b9:bb:e8:fe:43:20: bf:c4:7d:45:8e:e3:55:6d:15:06:9a:f1:eb:b1:85:97:95:85: 7f:bf:db:4b:98:a6:7e:61:b3:8a:85:75:d2:e9:60:db:6a:9d: 43:ac:f6:14:a2:b4:ab:80:6f:ec:db:a5:af:9f:0e:e9:b4:c9: e6:e0:60:91:ca:d7:d1:af:d0:a3:5c:b9:a1:85:18:40:e0:0c: c3:8a:54:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCQjIzOEZFNjNFQjU1 QkE5M0Y0RUYxMzU4NjU4RUFCNEU0MkM5NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnzNyb6BX1RabzzKlANZMoicoP/dHFVtbRBlzhNqRILJznU60w g0YK2yAFHEexJQgQJ0PQqkRoEynZ0gfmtR6BBjJT/knD6NmdYbq1MXdEatTkUN9N uNqgs+MgUv3BqEOoFKJNTDh4pjwCIA35XH6vpiMIyAWaQX3XNj5xC6PWizQbv8fV kw/Wj9Eb72TVtKg6u+GqiYgSoYbST70aBWaWPLipvd4h9MHydIP2ar7eQNLAFdCK QHTKyHWeC6Mp3dsP9hh1lm9YvekoqO07cVf/BDWolHtVwrKtRrsMJcBTnfUf9OaB AC4EmLunejWuWmpAgF3ZiWVZvl40mP0eoGmRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC7I4/mPrVbqT9O8TWGWOq05CyXIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0M3STRfbVByVmJxVDlPOFRX R1dPcTA1Q3lYSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TCwwDQYJKoZIhvcNAQELBQADggEBAGrJ98BUZz+CRVovKkyBV1oC2Cmol6Ijd5Qv ZXH3cIK9J8Rh/DmfZrX1ptuBBh1U3EfXwmP69GdaP90AJKo1k4x3RPzPNJM7aNLE Ur4yS+yQ6XxvyGx62R3n4/NNRFB0uOuH1wVSPKOxrAPcRYd1Qrq5hjdrjqAVy4CT 0GTLoo1j+QLpVMb9MfxkZudoKSCnULvrv7GUQ+/nRGtEyWov8GsAC8UtA1l7M2Xd hj5QTLm76P5DIL/EfUWO41VtFQaa8euxhZeVhX+/20uYpn5hs4qFddLpYNtqnUOs 9hSitKuAb+zbpa+fDum0yebgYJHK19Gv0KNcuaGFGEDgDMOKVMs= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:13 2025 by rpki-client