$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MUotgJUtLOl2BBOWG3ZdMFMzlhU.roa File: MUotgJUtLOl2BBOWG3ZdMFMzlhU.roa (raw, json) Hash identifier: bS4ScdFNV8UxrkqpqP6COKGSbcNAAVDZCECofUCy7u0= Subject key identifier: 31:4A:2D:80:95:2D:2C:E9:76:04:13:96:1B:76:5D:30:53:33:96:15 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2358 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MUotgJUtLOl2BBOWG3ZdMFMzlhU.roa Signing time: Mon 10 Feb 2025 14:17:29 +0000 ROA not before: Mon 10 Feb 2025 14:17:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.64.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9048 (0x2358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=314A2D80952D2CE9760413961B765D3053339615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:d6:e8:f5:ca:82:96:87:83:ba:21:16:92: 94:94:0a:d5:b3:18:e2:a1:56:7b:96:ec:0c:54:ea: 9c:49:59:f4:39:74:f3:5c:3a:0f:cb:5c:14:0e:e0: ca:c4:1b:02:d3:8c:3c:07:53:4d:d4:5b:e5:bf:e2: 44:92:67:b7:96:3c:09:dc:13:e4:47:97:fa:2f:48: 36:85:30:ab:c0:2c:17:30:6b:58:5b:61:74:f5:ed: f8:63:56:4a:e6:d7:41:a7:a6:7a:bc:3d:33:75:41: 55:8c:4b:5b:02:70:05:87:51:7b:f2:f2:97:ce:fe: 9e:10:11:ac:5b:34:a1:b3:1b:a3:c3:40:d8:76:ce: 1f:6b:ab:08:a3:35:86:84:d8:30:7f:d1:d8:04:e4: 2f:67:37:da:5a:b0:45:43:d7:6b:15:eb:3e:22:15: 17:82:20:1c:93:6b:8f:74:bd:ae:26:b6:a8:7f:13: d6:9f:86:9a:d5:6d:77:65:9f:14:3c:5a:fb:de:1a: 28:d6:c6:34:93:36:79:17:4b:a1:c3:0f:0c:e0:f9: 08:02:2e:26:5e:9d:60:f0:76:10:48:48:f1:dd:2e: 8d:47:fc:61:98:18:f1:3e:b6:e1:30:45:f0:d3:65: 70:ab:ad:f0:cb:e4:4f:2f:43:24:eb:5b:79:d1:b7: 7e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:2D:80:95:2D:2C:E9:76:04:13:96:1B:76:5D:30:53:33:96:15 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MUotgJUtLOl2BBOWG3ZdMFMzlhU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.28.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:a1:53:eb:0d:fd:05:83:d9:f1:a0:78:5b:23:a0:a6:f7:c6: e0:fd:b0:59:62:c7:f2:a6:3f:37:46:a9:a0:1b:b4:9c:13:e8: 0f:0d:f0:18:1a:75:40:3b:79:35:64:cb:59:9d:4a:41:19:30: 97:ce:bf:2b:aa:62:68:d4:b1:b0:ef:11:55:ab:bc:cc:6f:60: bc:20:d4:9f:44:4d:ad:03:87:32:b7:41:2d:9a:ce:d8:22:bf: 5d:70:41:0c:98:3a:87:7c:73:22:54:cb:00:76:cc:d4:3c:52: 99:51:1a:3f:33:49:2b:09:7a:e9:c4:1b:1f:f0:51:11:28:1f: 9a:5b:95:7d:e0:b6:fe:ef:e4:7a:57:79:63:84:61:d4:1d:b3: 0c:e8:06:16:23:61:6d:aa:cd:bb:87:a3:12:a0:88:22:31:03: 27:eb:31:2a:55:33:e1:15:22:8e:a9:4c:d2:e6:cc:28:ce:71: c4:de:ca:65:aa:e3:0e:af:6d:25:bb:8d:20:c5:c9:40:44:72: 54:f7:86:28:7c:82:3c:4b:9f:9b:41:85:94:21:3d:49:21:1e: 41:da:3e:c2:18:47:6b:df:c4:b9:e6:52:a1:31:11:49:fe:51: ae:2c:2d:84:03:00:bd:e0:19:a8:53:e3:93:4a:44:f5:a9:ae: 5e:5e:a9:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMxNEEyRDgwOTUyRDJD RTk3NjA0MTM5NjFCNzY1RDMwNTMzMzk2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU3Nbo9cqCloeDuiEWkpSUCtWzGOKhVnuW7AxU6pxJWfQ5dPNc Og/LXBQO4MrEGwLTjDwHU03UW+W/4kSSZ7eWPAncE+RHl/ovSDaFMKvALBcwa1hb YXT17fhjVkrm10Gnpnq8PTN1QVWMS1sCcAWHUXvy8pfO/p4QEaxbNKGzG6PDQNh2 zh9rqwijNYaE2DB/0dgE5C9nN9pasEVD12sV6z4iFReCIByTa490va4mtqh/E9af hprVbXdlnxQ8WvveGijWxjSTNnkXS6HDDwzg+QgCLiZenWDwdhBISPHdLo1H/GGY GPE+tuEwRfDTZXCrrfDL5E8vQyTrW3nRt35nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMUotgJUtLOl2BBOWG3ZdMFMzlhUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01Vb3RnSlV0TE9sMkJCT1dH M1pkTUZNemxoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QBwwDQYJKoZIhvcNAQELBQADggEBAF2hU+sN/QWD2fGgeFsjoKb3xuD9sFlix/Km PzdGqaAbtJwT6A8N8BgadUA7eTVky1mdSkEZMJfOvyuqYmjUsbDvEVWrvMxvYLwg 1J9ETa0DhzK3QS2aztgiv11wQQyYOod8cyJUywB2zNQ8UplRGj8zSSsJeunEGx/w UREoH5pblX3gtv7v5HpXeWOEYdQdswzoBhYjYW2qzbuHoxKgiCIxAyfrMSpVM+EV Io6pTNLmzCjOccTeymWq4w6vbSW7jSDFyUBEclT3hih8gjxLn5tBhZQhPUkhHkHa PsIYR2vfxLnmUqExEUn+Ua4sLYQDAL3gGahT45NKRPWprl5eqWU= -----END CERTIFICATE-----Generated at Fri Apr 18 16:45:00 2025 by rpki-client