$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa File: KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa (raw, json) Hash identifier: eY5mdcmSc00EjcPFASp8zOvxDaD85sdkRQ5t+KEvTGQ= Subject key identifier: 29:78:1F:56:FE:4D:02:0A:55:D3:0C:A0:F2:A0:34:8D:FD:94:2E:86 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23F9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa Signing time: Mon 10 Feb 2025 14:18:08 +0000 ROA not before: Mon 10 Feb 2025 14:18:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9209 (0x23f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=29781F56FE4D020A55D30CA0F2A0348DFD942E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:0f:c9:4c:58:69:4a:11:84:dc:36:75:69: a5:a5:2b:d0:8c:cc:eb:e8:54:88:d8:be:ea:c3:7b: 5d:1a:05:d3:f5:e2:9f:2d:fa:cf:1e:99:80:4b:e3: 4f:c7:60:60:d8:b0:8a:bc:6a:89:54:dd:06:4e:43: 66:ac:12:ce:57:3c:00:5a:5b:ad:df:76:ca:cc:43: 4a:bf:77:f6:91:be:83:03:0a:6a:c4:db:52:e7:3c: 82:b5:1e:c2:cd:ac:3e:d8:c7:62:94:1b:52:42:fc: 4e:d5:f8:ed:59:7d:52:d4:ea:12:6d:fa:af:f2:df: e7:82:fb:0a:5e:a2:c1:95:01:11:d8:31:73:e6:fc: b4:af:42:40:43:05:8a:9e:d0:5a:4e:b2:4b:49:42: 60:56:10:2c:20:bd:dd:bc:eb:0c:f9:64:09:c0:1f: 79:54:99:2b:7b:66:4a:7d:b4:d3:f6:b1:a4:89:fd: c2:71:88:80:a1:63:a3:6d:ef:bd:a0:6c:5b:40:58: 77:f7:64:f8:1a:41:b4:b1:a5:1c:e1:40:50:85:c2: fe:35:45:72:9b:24:98:04:af:12:1e:d4:37:47:9d: ab:3f:7b:28:59:e3:b4:9c:2e:60:2a:60:e7:28:ea: eb:e3:0a:d7:b4:5b:e5:2b:49:11:27:10:b6:8a:b0: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:1F:56:FE:4D:02:0A:55:D3:0C:A0:F2:A0:34:8D:FD:94:2E:86 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.77.0/24 Signature Algorithm: sha256WithRSAEncryption 16:bb:69:b8:f7:0c:1d:3c:44:fd:0e:4a:93:e4:da:a9:c4:ba: d2:ff:ef:c0:ec:57:fd:b9:da:93:4a:34:c8:5a:8c:2f:d0:63: be:d4:25:1d:ac:19:2e:ed:f9:a7:10:06:6a:39:aa:a8:a3:bd: 03:85:23:a3:e1:98:6c:50:06:7c:55:3c:71:25:13:63:75:4e: 27:b5:54:5c:87:48:f7:b6:28:8f:ab:3b:fb:38:6d:29:ab:12: f5:b1:59:7d:a3:6e:51:cc:1f:af:aa:8e:e1:7e:23:13:48:89: 34:2d:a9:10:0f:00:08:da:c6:4d:0c:9b:01:97:2b:21:3e:a0: 07:d3:b8:c1:92:86:4a:a8:e6:ba:72:00:a5:ee:b9:2b:dd:2f: 14:6a:6d:b5:c3:2f:02:52:07:26:83:69:e2:42:5c:95:64:01: ab:82:b8:ae:e5:36:99:4d:8a:f1:7a:c5:31:0d:39:5e:9f:b2: 2a:2e:16:e5:ed:07:d0:77:86:f4:ec:11:45:9d:44:69:99:8c: 39:e1:2b:bd:0e:5f:b5:07:1e:92:20:ed:6f:42:9e:39:0d:0f: 2e:c1:b9:b8:d7:e0:02:f6:20:20:89:68:b9:63:75:26:35:7a: fb:8a:cc:47:de:34:78:23:bc:2a:df:fd:19:f8:2e:2f:a6:bb: e9:5d:6f:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5NzgxRjU2RkU0RDAy MEE1NUQzMENBMEYyQTAzNDhERkQ5NDJFODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2iw/JTFhpShGE3DZ1aaWlK9CMzOvoVIjYvurDe10aBdP14p8t +s8emYBL40/HYGDYsIq8aolU3QZOQ2asEs5XPABaW63fdsrMQ0q/d/aRvoMDCmrE 21LnPIK1HsLNrD7Yx2KUG1JC/E7V+O1ZfVLU6hJt+q/y3+eC+wpeosGVARHYMXPm /LSvQkBDBYqe0FpOsktJQmBWECwgvd286wz5ZAnAH3lUmSt7Zkp9tNP2saSJ/cJx iIChY6Nt772gbFtAWHf3ZPgaQbSxpRzhQFCFwv41RXKbJJgErxIe1DdHnas/eyhZ 47ScLmAqYOco6uvjCte0W+UrSREnELaKsNPvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKXgfVv5NAgpV0wyg8qA0jf2ULoYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tYZ2ZWdjVOQWdwVjB3eWc4 cUEwamYyVUxvWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TE0wDQYJKoZIhvcNAQELBQADggEBABa7abj3DB08RP0OSpPk2qnEutL/78DsV/25 2pNKNMhajC/QY77UJR2sGS7t+acQBmo5qqijvQOFI6PhmGxQBnxVPHElE2N1Tie1 VFyHSPe2KI+rO/s4bSmrEvWxWX2jblHMH6+qjuF+IxNIiTQtqRAPAAjaxk0MmwGX KyE+oAfTuMGShkqo5rpyAKXuuSvdLxRqbbXDLwJSByaDaeJCXJVkAauCuK7lNplN ivF6xTENOV6fsiouFuXtB9B3hvTsEUWdRGmZjDnhK70OX7UHHpIg7W9CnjkNDy7B ubjX4AL2ICCJaLljdSY1evuKzEfeNHgjvCrf/Rn4Li+mu+ldbw4= -----END CERTIFICATE-----Generated at Thu Apr 17 21:08:09 2025 by rpki-client