$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CJYeQePQJmQ3DSlnq9TMqh-MHLo.roa File: CJYeQePQJmQ3DSlnq9TMqh-MHLo.roa (raw, json) Hash identifier: 5n70BQsDWqNXxYZz2+63PMYHHFGyqMMoNhGB+mhwNAw= Subject key identifier: 08:96:1E:41:E3:D0:26:64:37:0D:29:67:AB:D4:CC:AA:1F:8C:1C:BA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2411 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CJYeQePQJmQ3DSlnq9TMqh-MHLo.roa Signing time: Mon 10 Feb 2025 14:18:14 +0000 ROA not before: Mon 10 Feb 2025 14:18:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.61.208.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9233 (0x2411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=08961E41E3D02664370D2967ABD4CCAA1F8C1CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:83:b3:e3:56:cd:31:da:ad:a9:bb:ec:2e: 5f:13:27:b3:f9:e8:f8:db:fe:4c:ce:af:68:23:fd: c3:b0:b2:da:04:21:47:22:e5:35:f5:9c:a6:4a:23: 4b:f4:2d:50:6b:95:2e:05:6d:4a:87:2c:70:a0:6b: b8:8e:c7:ee:3c:e4:28:e3:07:35:18:b4:c3:f3:a6: 85:0a:8f:e9:7c:78:b0:63:74:26:9c:6f:08:06:4c: 3a:6d:88:5f:0f:19:27:e5:8b:ad:b9:54:b7:d6:dc: ce:4c:60:93:aa:fa:5c:39:d3:95:dc:07:da:88:e7: 9c:cc:b5:31:1c:04:76:a3:3b:e2:4d:1f:28:bb:df: 85:8c:d7:75:ab:12:df:8b:41:37:57:d6:64:ed:b1: 69:71:2b:5f:30:f9:75:59:ea:6e:1f:d1:33:f5:31: 49:38:cc:6a:fd:ff:a1:d2:28:5a:78:27:dc:91:c7: 90:86:eb:24:b8:cf:14:bb:45:11:9a:a4:22:c1:d0: 89:ba:60:b3:81:f7:43:96:0e:18:b9:95:3d:19:16: 3b:1a:aa:d5:50:af:5a:68:8c:9a:00:28:75:14:5b: 25:bf:1b:b3:27:79:00:fd:fa:2a:1f:88:b7:a0:16: e2:1b:d3:07:08:68:82:d8:e5:9f:f7:f6:ef:58:90: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:96:1E:41:E3:D0:26:64:37:0D:29:67:AB:D4:CC:AA:1F:8C:1C:BA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CJYeQePQJmQ3DSlnq9TMqh-MHLo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/20 Signature Algorithm: sha256WithRSAEncryption 35:86:b2:39:8c:15:b5:b1:7c:35:f2:37:7c:79:db:a2:50:d4: f0:bc:1c:6b:06:08:55:a3:40:df:c4:e6:b4:d7:93:1a:f4:bd: 8f:b0:f3:18:1f:36:9f:24:14:fa:03:b5:7b:7b:df:61:f4:30: 01:35:fe:a4:30:10:38:89:be:6d:a6:49:b7:d3:79:9f:fb:aa: 54:ac:88:10:0c:de:24:b6:c5:0e:92:20:74:d1:0a:00:06:93: 02:1c:38:71:1e:f5:c1:14:65:d5:c6:cf:93:62:01:97:38:69: 66:13:24:4f:98:48:5f:48:62:a1:d5:dc:3d:06:54:6a:2c:20: 3e:b9:ec:87:65:25:51:31:2d:69:1c:6a:ef:df:f5:87:a7:a3: 89:5f:9c:4f:2b:ad:55:a6:cd:be:e2:8d:d4:7f:3d:41:3b:66: a6:8f:58:0b:05:56:f1:d2:ae:ac:3b:0b:d4:aa:af:18:ef:42: c1:f3:12:eb:69:37:8b:35:97:e8:aa:cb:be:a3:2c:42:2c:0d: 85:6b:21:d6:8c:e7:7e:37:85:5c:6b:61:4c:8d:ca:a8:fe:c1: 35:a9:64:48:12:89:5a:e0:4b:d4:16:3c:a4:f9:3f:28:b5:66: 6f:0f:89:af:74:2f:c2:35:b3:51:98:2f:e0:87:c8:46:83:95: d7:59:95:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4OTYxRTQxRTNEMDI2 NjQzNzBEMjk2N0FCRDRDQ0FBMUY4QzFDQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ+4Oz41bNMdqtqbvsLl8TJ7P56Pjb/kzOr2gj/cOwstoEIUci 5TX1nKZKI0v0LVBrlS4FbUqHLHCga7iOx+485CjjBzUYtMPzpoUKj+l8eLBjdCac bwgGTDptiF8PGSfli625VLfW3M5MYJOq+lw505XcB9qI55zMtTEcBHajO+JNHyi7 34WM13WrEt+LQTdX1mTtsWlxK18w+XVZ6m4f0TP1MUk4zGr9/6HSKFp4J9yRx5CG 6yS4zxS7RRGapCLB0Im6YLOB90OWDhi5lT0ZFjsaqtVQr1pojJoAKHUUWyW/G7Mn eQD9+iofiLegFuIb0wcIaILY5Z/39u9YkNZNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCJYeQePQJmQ3DSlnq9TMqh+MHLowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NKWWVRZVBRSm1RM0RTbG5x OVRNcWgtTUhMby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PdAwDQYJKoZIhvcNAQELBQADggEBADWGsjmMFbWxfDXyN3x526JQ1PC8HGsGCFWj QN/E5rTXkxr0vY+w8xgfNp8kFPoDtXt732H0MAE1/qQwEDiJvm2mSbfTeZ/7qlSs iBAM3iS2xQ6SIHTRCgAGkwIcOHEe9cEUZdXGz5NiAZc4aWYTJE+YSF9IYqHV3D0G VGosID657IdlJVExLWkcau/f9Yeno4lfnE8rrVWmzb7ijdR/PUE7ZqaPWAsFVvHS rqw7C9SqrxjvQsHzEutpN4s1l+iqy76jLEIsDYVrIdaM5343hVxrYUyNyqj+wTWp ZEgSiVrgS9QWPKT5Pyi1Zm8Pia90L8I1s1GYL+CHyEaDlddZlcI= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:39 2025 by rpki-client