$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NrsSJE4QjisiWz9mkHnYyk427VM.roa File: NrsSJE4QjisiWz9mkHnYyk427VM.roa (raw, json) Hash identifier: dusHuiCbYQ6AvU394iGRqY076HXA2Qlw4aAJoVrfS6c= Subject key identifier: 36:BB:12:24:4E:10:8E:2B:22:5B:3F:66:90:79:D8:CA:4E:36:ED:53 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2448 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NrsSJE4QjisiWz9mkHnYyk427VM.roa Signing time: Mon 10 Feb 2025 14:18:28 +0000 ROA not before: Mon 10 Feb 2025 14:18:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.61.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9288 (0x2448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=36BB12244E108E2B225B3F669079D8CA4E36ED53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:42:6d:ed:96:24:05:d1:00:8b:c9:41:b8: 01:57:20:af:18:46:b3:93:17:b6:c1:95:ab:f2:53: 0d:7c:a5:44:32:76:ea:d6:00:22:20:ca:27:31:2c: ad:3b:d2:c1:24:ed:45:94:d4:af:54:84:6b:95:de: 79:34:8e:5a:7f:bf:d9:b4:26:b7:e4:9e:af:e6:26: 38:a8:a7:6a:ad:5d:2d:6f:0b:1f:d1:dd:a6:58:1f: 71:4f:b7:51:04:2e:80:cf:40:fb:11:30:4a:fc:26: 25:b8:d5:d6:13:a3:ce:45:b6:ce:43:cf:4a:a2:67: 70:3b:79:a2:60:d1:22:5e:9d:73:ae:d1:50:38:5e: ed:d7:ac:29:71:e4:92:09:e9:2c:d9:73:8e:f7:4f: 68:f6:9f:81:8b:e1:7f:8e:a7:f3:36:bd:e1:57:d5: 9a:e8:28:70:82:2f:75:5f:32:1b:aa:2c:e0:e9:59: eb:42:81:7e:53:1c:7c:21:80:72:7d:63:48:ed:21: a3:05:1d:f0:77:9a:4a:8f:0e:33:12:d2:d3:4c:8a: d7:43:8d:52:59:67:0b:8d:1e:41:8e:ea:be:9d:a7: 7c:6c:f2:47:ee:cb:83:1b:e1:ba:ff:e6:bc:ab:56: ec:55:64:07:6a:60:0f:74:4b:dd:bc:2e:a5:cc:45: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BB:12:24:4E:10:8E:2B:22:5B:3F:66:90:79:D8:CA:4E:36:ED:53 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NrsSJE4QjisiWz9mkHnYyk427VM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:2e:ee:49:43:d2:4d:24:b2:a4:68:bd:cf:81:3f:98:a6:3b: 35:39:cb:c5:21:92:69:15:65:0b:d5:c8:b6:e0:8a:1f:b6:8b: 4f:18:a8:f2:b7:d9:35:8f:ff:c1:7a:ae:86:e0:cc:83:53:f4: 62:50:f9:af:33:65:cb:77:6c:8d:43:04:ef:27:ff:5e:26:7c: 8c:aa:32:25:f5:2d:89:1e:5d:c8:0d:71:08:b2:5a:97:89:36: 51:9e:3d:51:c7:21:b0:f8:a3:64:cf:13:a3:d0:ad:b5:e7:cd: d2:75:38:04:33:66:0f:ee:5a:08:6c:70:55:ca:38:77:7a:e7: 55:c9:17:a9:fe:5b:cf:0b:df:fa:42:15:7d:0c:9b:fa:11:82: b1:67:aa:8c:b2:7e:3b:21:b1:d8:f4:13:3a:a0:4e:4c:87:e8: 9b:2e:03:eb:00:31:01:b0:63:1a:bb:63:e7:1e:e8:d9:9c:83: 1f:c4:0b:ff:82:a0:cf:b8:4c:e1:27:72:5c:d7:f8:aa:20:ed: 37:d2:d7:ad:25:02:b2:52:82:df:0d:c1:24:27:9e:e8:97:db: 2e:47:a3:c1:94:e8:18:bd:36:0e:e0:a3:fc:66:57:d6:4c:06: 7f:18:6d:11:8f:da:4d:47:28:35:dd:71:79:a5:32:b1:6a:6c: ea:23:a9:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2QkIxMjI0NEUxMDhF MkIyMjVCM0Y2NjkwNzlEOENBNEUzNkVENTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcPEJt7ZYkBdEAi8lBuAFXIK8YRrOTF7bBlavyUw18pUQydurW ACIgyicxLK070sEk7UWU1K9UhGuV3nk0jlp/v9m0Jrfknq/mJjiop2qtXS1vCx/R 3aZYH3FPt1EELoDPQPsRMEr8JiW41dYTo85Fts5Dz0qiZ3A7eaJg0SJenXOu0VA4 Xu3XrClx5JIJ6SzZc473T2j2n4GL4X+Op/M2veFX1ZroKHCCL3VfMhuqLODpWetC gX5THHwhgHJ9Y0jtIaMFHfB3mkqPDjMS0tNMitdDjVJZZwuNHkGO6r6dp3xs8kfu y4Mb4br/5ryrVuxVZAdqYA90S928LqXMRco1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNrsSJE4QjisiWz9mkHnYyk427VMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL05yc1NKRTRRamlzaVd6OW1r SG5ZeWs0MjdWTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PdAwDQYJKoZIhvcNAQELBQADggEBAH0u7klD0k0ksqRovc+BP5imOzU5y8UhkmkV ZQvVyLbgih+2i08YqPK32TWP/8F6robgzINT9GJQ+a8zZct3bI1DBO8n/14mfIyq MiX1LYkeXcgNcQiyWpeJNlGePVHHIbD4o2TPE6PQrbXnzdJ1OAQzZg/uWghscFXK OHd651XJF6n+W88L3/pCFX0Mm/oRgrFnqoyyfjshsdj0EzqgTkyH6JsuA+sAMQGw Yxq7Y+ce6Nmcgx/EC/+CoM+4TOEnclzX+Kog7TfS160lArJSgt8NwSQnnuiX2y5H o8GU6Bi9Ng7go/xmV9ZMBn8YbRGP2k1HKDXdcXmlMrFqbOojqVM= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:35 2025 by rpki-client