$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DBxGlSiVHNN543wCo1-tA9xSxpM.roa File: DBxGlSiVHNN543wCo1-tA9xSxpM.roa (raw, json) Hash identifier: O+tSy6hIUl5C3dTFhwv1LLBaeYWU34MvKhqnV+iuiwk= Subject key identifier: 0C:1C:46:95:28:95:1C:D3:79:E3:7C:02:A3:5F:AD:03:DC:52:C6:93 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 242E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DBxGlSiVHNN543wCo1-tA9xSxpM.roa Signing time: Mon 10 Feb 2025 14:18:22 +0000 ROA not before: Mon 10 Feb 2025 14:18:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.100.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9262 (0x242e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0C1C469528951CD379E37C02A35FAD03DC52C693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4b:f7:95:43:05:88:ab:97:48:a8:fa:91:89: 03:75:33:0f:df:e6:6e:ab:40:e9:e3:34:64:9b:eb: 32:6b:44:dc:67:aa:1d:d6:e7:2f:a6:a3:a3:22:c1: 48:ea:e1:77:eb:25:de:93:88:39:ef:dd:15:85:9b: 4c:d9:1f:a7:f3:d3:f9:bf:32:7b:a9:79:5c:db:26: 4b:0b:f5:e9:85:5b:c2:12:5f:99:68:82:4a:28:2b: 7c:60:e7:2b:4e:aa:02:57:08:05:4d:6b:0a:dc:17: 4a:da:d9:1f:be:29:90:03:7b:7e:77:16:71:af:f1: 0a:f9:9f:2e:bb:15:fe:e9:a6:f9:b8:7b:cc:62:ad: 80:e5:4f:0e:2e:03:62:e0:01:57:e6:56:6d:e3:5d: c7:db:d0:38:15:e5:1e:c3:6b:ed:69:29:5f:80:3f: 86:55:63:d2:c4:e6:f5:71:7f:63:42:fc:17:01:17: 53:53:e3:24:3e:e2:5a:b7:e5:7a:5d:89:c7:25:80: d8:ac:0f:74:2e:d6:53:72:26:fc:8f:1d:5b:de:9e: 97:72:62:b9:45:e6:9b:cd:be:f8:29:92:53:e6:73: 02:0d:75:d9:88:e1:d7:7b:b7:0a:a1:b1:2a:c2:3b: ab:b7:bb:7c:f9:cf:99:b7:79:7a:77:2f:9e:13:9c: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1C:46:95:28:95:1C:D3:79:E3:7C:02:A3:5F:AD:03:DC:52:C6:93 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DBxGlSiVHNN543wCo1-tA9xSxpM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.68.0/22 Signature Algorithm: sha256WithRSAEncryption 54:01:0a:77:ad:64:21:01:5b:68:32:fc:73:c0:5a:b5:b5:d8: f1:23:49:bc:5b:4b:86:27:d6:27:a5:a4:d9:8c:84:4d:46:2f: db:81:ba:1a:65:19:40:7b:14:67:ee:ac:c9:4b:6f:10:a6:4e: fc:c3:9f:76:f0:e1:16:81:b8:3a:40:52:74:20:06:2f:c6:1d: e4:5f:9b:fe:59:df:05:3e:a9:e9:fd:50:58:7f:fd:88:b5:f1: 23:5e:59:b3:70:18:ce:50:b0:f8:a7:93:d4:fa:70:5a:58:a4: 6a:fa:30:5b:d2:68:c3:58:20:ac:76:a5:6d:6e:b0:81:68:f5: 12:a8:1e:d3:25:0e:02:57:9d:a3:eb:fd:e7:b4:49:59:3b:f9: d5:fd:f1:00:7c:ab:f9:93:d9:15:5a:a9:be:e8:b2:53:1e:de: 56:c1:9e:cb:8c:cc:3e:52:7e:d4:5e:78:6c:db:99:2d:ad:d9: 77:63:ab:06:ec:8b:63:01:b8:4c:e4:80:77:cc:94:e1:24:a1: 3e:cc:02:42:c3:c3:fb:69:58:7f:f1:c5:81:f0:75:81:f6:9f: 06:8e:5b:53:48:08:4d:ac:65:89:61:aa:e0:14:6d:a4:a0:36: 95:e8:58:3c:c4:11:c5:1b:ec:3c:92:73:55:cf:33:0f:17:55: a2:c8:00:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBDMUM0Njk1Mjg5NTFD RDM3OUUzN0MwMkEzNUZBRDAzREM1MkM2OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtS/eVQwWIq5dIqPqRiQN1Mw/f5m6rQOnjNGSb6zJrRNxnqh3W 5y+mo6MiwUjq4XfrJd6TiDnv3RWFm0zZH6fz0/m/MnupeVzbJksL9emFW8ISX5lo gkooK3xg5ytOqgJXCAVNawrcF0ra2R++KZADe353FnGv8Qr5ny67Ff7ppvm4e8xi rYDlTw4uA2LgAVfmVm3jXcfb0DgV5R7Da+1pKV+AP4ZVY9LE5vVxf2NC/BcBF1NT 4yQ+4lq35XpdicclgNisD3Qu1lNyJvyPHVvenpdyYrlF5pvNvvgpklPmcwINddmI 4dd7twqhsSrCO6u3u3z5z5m3eXp3L54TnKZTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDBxGlSiVHNN543wCo1+tA9xSxpMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0RCeEdsU2lWSE5ONTQzd0Nv MS10QTl4U3hwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6 ZEQwDQYJKoZIhvcNAQELBQADggEBAFQBCnetZCEBW2gy/HPAWrW12PEjSbxbS4Yn 1ielpNmMhE1GL9uBuhplGUB7FGfurMlLbxCmTvzDn3bw4RaBuDpAUnQgBi/GHeRf m/5Z3wU+qen9UFh//Yi18SNeWbNwGM5QsPink9T6cFpYpGr6MFvSaMNYIKx2pW1u sIFo9RKoHtMlDgJXnaPr/ee0SVk7+dX98QB8q/mT2RVaqb7oslMe3lbBnsuMzD5S ftReeGzbmS2t2Xdjqwbsi2MBuEzkgHfMlOEkoT7MAkLDw/tpWH/xxYHwdYH2nwaO W1NICE2sZYlhquAUbaSgNpXoWDzEEcUb7DySc1XPMw8XVaLIAD8= -----END CERTIFICATE-----Generated at Thu Apr 17 21:05:30 2025 by rpki-client