$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IcQOoXlkB46f-SIizpzuiqzLIdU.roa File: IcQOoXlkB46f-SIizpzuiqzLIdU.roa (raw, json) Hash identifier: OaBpGuk4Ek7Wun09sSp2IRFDT3FTNUh65PuIEfnnz6s= Subject key identifier: 21:C4:0E:A1:79:64:07:8E:9F:F9:22:22:CE:9C:EE:8A:AC:CB:21:D5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23AC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IcQOoXlkB46f-SIizpzuiqzLIdU.roa Signing time: Mon 10 Feb 2025 14:17:48 +0000 ROA not before: Mon 10 Feb 2025 14:17:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 61.61.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9132 (0x23ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=21C40EA17964078E9FF92222CE9CEE8AACCB21D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:30:72:1f:65:27:d2:48:76:a5:16:40:57: 1f:cc:00:c3:89:9f:39:97:92:63:06:15:9a:57:41: e3:f7:6e:06:69:f9:da:d1:02:c0:a6:60:47:5f:d1: 7f:c4:2b:8e:66:1c:42:ea:ff:4b:5f:51:76:5d:03: ef:d9:d2:92:30:82:50:98:66:ce:92:a2:5f:21:a3: 54:dd:83:a9:a5:89:1c:f8:65:03:38:89:10:6b:6d: 60:a4:b3:8c:a0:42:9a:70:df:c9:48:ef:4d:85:27: 42:32:01:01:e5:b6:f5:9d:49:9d:40:bd:6a:bd:7c: 94:63:00:18:22:c6:0d:79:36:28:d7:23:f8:37:7a: ce:7f:30:22:33:c3:8f:3a:d9:79:3d:66:0f:67:85: 24:a3:4b:de:53:59:2b:57:91:d9:62:b4:2f:1a:dd: 83:ff:9c:f0:49:f8:c5:62:a8:a4:5a:d0:9a:0c:4f: 8b:0e:de:f7:a7:cc:62:75:25:87:96:e9:30:98:2b: fd:55:e1:01:50:11:1c:df:18:80:4b:80:c1:cb:5f: 36:ce:48:d6:05:20:78:4d:dd:4f:c7:49:f5:25:da: 3d:5b:05:08:1b:b3:c2:73:22:30:01:ca:d3:3c:7c: ec:4d:eb:fc:a7:0b:83:0e:37:68:d4:d3:61:bf:b3: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C4:0E:A1:79:64:07:8E:9F:F9:22:22:CE:9C:EE:8A:AC:CB:21:D5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IcQOoXlkB46f-SIizpzuiqzLIdU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/21 Signature Algorithm: sha256WithRSAEncryption 30:bb:b5:7b:58:54:28:0e:d1:ce:b4:e0:7c:3c:69:4e:df:16: 76:97:9e:78:b5:87:07:48:75:b2:5c:d7:d9:e9:4b:6f:59:4a: f5:48:2a:89:e1:b5:0e:2e:59:b7:ee:e9:30:36:41:c4:40:a0: a2:54:87:21:cd:a1:97:2f:d8:fc:4b:49:6b:cd:5d:77:ff:dd: 65:dd:60:07:44:66:f1:0c:5b:e4:56:5b:5f:7b:80:5c:3f:da: 02:04:a6:7c:67:1b:28:49:d2:0c:26:40:09:02:b1:83:21:fb: 55:6d:f2:16:97:5d:b5:ff:bc:45:1a:ff:d1:dd:b4:c3:60:57: 1f:8d:9d:e6:11:35:25:8f:9b:b7:f2:4a:cd:66:cd:8f:d3:00: 99:ae:e3:47:ca:2c:c5:8d:ba:9d:38:cd:17:df:9b:22:48:47: d3:09:b0:a8:49:c2:63:fe:58:5b:90:ac:21:de:4a:14:0a:eb: aa:00:8a:99:69:8d:0c:67:a9:4f:8b:7d:30:80:f8:38:18:cf: 8b:8b:7f:9a:81:90:05:cd:c5:2e:c6:a4:36:d9:dd:27:70:92: 05:05:6e:0a:8e:a2:25:6e:90:ae:66:be:7c:c7:c2:e8:c6:f9: 38:bc:ac:51:d7:d6:65:35:7f:10:04:73:9a:d8:e8:cc:56:b1: ec:19:f8:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxQzQwRUExNzk2NDA3 OEU5RkY5MjIyMkNFOUNFRThBQUNDQjIxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNETByH2Un0kh2pRZAVx/MAMOJnzmXkmMGFZpXQeP3bgZp+drR AsCmYEdf0X/EK45mHELq/0tfUXZdA+/Z0pIwglCYZs6Sol8ho1Tdg6mliRz4ZQM4 iRBrbWCks4ygQppw38lI702FJ0IyAQHltvWdSZ1AvWq9fJRjABgixg15NijXI/g3 es5/MCIzw4862Xk9Zg9nhSSjS95TWStXkdlitC8a3YP/nPBJ+MViqKRa0JoMT4sO 3venzGJ1JYeW6TCYK/1V4QFQERzfGIBLgMHLXzbOSNYFIHhN3U/HSfUl2j1bBQgb s8JzIjABytM8fOxN6/ynC4MON2jU02G/s0KpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIcQOoXlkB46f+SIizpzuiqzLIdUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ljUU9vWGxrQjQ2Zi1TSWl6 cHp1aXF6TElkVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 PdAwDQYJKoZIhvcNAQELBQADggEBADC7tXtYVCgO0c604Hw8aU7fFnaXnni1hwdI dbJc19npS29ZSvVIKonhtQ4uWbfu6TA2QcRAoKJUhyHNoZcv2PxLSWvNXXf/3WXd YAdEZvEMW+RWW197gFw/2gIEpnxnGyhJ0gwmQAkCsYMh+1Vt8haXXbX/vEUa/9Hd tMNgVx+NneYRNSWPm7fySs1mzY/TAJmu40fKLMWNup04zRffmyJIR9MJsKhJwmP+ WFuQrCHeShQK66oAiplpjQxnqU+LfTCA+DgYz4uLf5qBkAXNxS7GpDbZ3SdwkgUF bgqOoiVukK5mvnzHwujG+Ti8rFHX1mU1fxAEc5rY6MxWsewZ+Mk= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:42 2025 by rpki-client