$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OlPd5CFpg3vwM8Qo6l7PAVeFD2E.roa File: OlPd5CFpg3vwM8Qo6l7PAVeFD2E.roa (raw, json) Hash identifier: 8fSgrxVvo3BVMmWHUdiej0R2qSQciWpEnE7DY1yKLgk= Subject key identifier: 3A:53:DD:E4:21:69:83:7B:F0:33:C4:28:EA:5E:CF:01:57:85:0F:61 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23C1 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OlPd5CFpg3vwM8Qo6l7PAVeFD2E.roa Signing time: Mon 10 Feb 2025 14:17:54 +0000 ROA not before: Mon 10 Feb 2025 14:17:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 61.61.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9153 (0x23c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3A53DDE42169837BF033C428EA5ECF0157850F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:4e:c5:f6:d1:07:8c:f7:c9:11:f2:4c:c8: 46:5d:88:d3:bf:14:17:ec:7d:44:b7:6e:1e:a7:c1: b0:9c:ce:8f:87:fa:02:04:dd:37:dd:24:b5:a1:54: 5f:5e:5c:a5:44:60:6f:11:52:b5:9e:16:7c:ea:35: 9c:72:de:5f:b6:f3:07:6a:5b:96:c7:c7:c7:64:01: f9:0d:6c:08:39:fa:94:90:90:6f:39:83:78:be:38: ab:84:23:ea:74:9f:44:bf:2e:b8:56:78:7d:9a:65: 2a:2e:ab:11:fc:7d:31:74:4a:a4:0a:73:3b:8b:0e: 16:ec:64:7f:33:e3:86:4a:e2:d7:07:9d:49:05:19: 26:3f:f9:86:37:68:93:56:74:70:6b:59:4b:e1:6b: c4:5f:49:0f:8c:ec:a6:f1:6d:a5:ae:df:be:78:7e: 8b:52:a0:14:e7:41:a0:33:cb:fc:9b:91:75:5f:27: 02:f1:16:bf:c7:17:a2:1d:f4:61:51:d8:a2:76:e1: 95:f0:84:17:c4:39:52:98:0c:16:ba:04:45:0c:c1: 75:97:e3:89:03:26:a8:f9:a8:c0:71:a2:dc:9d:21: c1:e9:f5:bc:41:e2:b5:64:33:c9:4c:32:85:95:71: 80:4c:98:5d:20:84:28:8a:b3:08:2e:0e:b7:e2:65: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:DD:E4:21:69:83:7B:F0:33:C4:28:EA:5E:CF:01:57:85:0F:61 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OlPd5CFpg3vwM8Qo6l7PAVeFD2E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.216.0/22 Signature Algorithm: sha256WithRSAEncryption 08:36:6b:85:b8:f1:49:87:0d:12:e0:3b:9b:9e:44:b6:12:9b: 12:2e:04:39:e3:ec:84:3d:88:ed:37:39:d6:50:47:a4:b6:ae: e4:f1:ee:7e:31:59:98:c9:47:7d:2e:d3:5b:92:cc:80:ae:4d: 4a:b7:52:17:7c:cf:53:d9:a5:f1:17:48:b3:a5:e4:79:9f:bc: d7:fc:5c:e0:19:fc:a1:50:48:ea:88:d6:90:ad:c8:89:d2:78: ac:42:8f:4a:31:5e:12:fa:6e:c0:96:dd:f6:42:de:f4:e9:6e: 64:c8:77:51:32:a6:f5:66:8b:18:eb:89:78:63:48:e5:be:6b: b8:b8:42:33:72:13:b0:a2:54:85:a2:7f:b6:de:eb:aa:46:6d: ed:62:ea:30:4c:07:fd:18:69:cc:32:c4:43:aa:58:0b:0e:84: 49:90:1c:ea:cc:a3:59:81:d2:bc:ad:d9:68:31:55:be:02:85: 77:a8:33:75:15:6b:3a:3f:f0:bc:01:89:85:60:c5:9b:20:15: a5:01:90:a9:67:7f:e9:00:ec:b6:4f:79:c0:be:d4:91:49:48: a2:b1:1d:e5:ed:f2:87:9b:cb:7d:4e:2a:a9:51:31:2c:fe:14: 8b:28:4c:cb:72:60:4d:7d:5d:d7:26:ef:8c:6a:67:6c:80:4a: 35:af:3b:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI8EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNBNTNEREU0MjE2OTgz N0JGMDMzQzQyOEVBNUVDRjAxNTc4NTBGNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpxE7F9tEHjPfJEfJMyEZdiNO/FBfsfUS3bh6nwbCczo+H+gIE 3TfdJLWhVF9eXKVEYG8RUrWeFnzqNZxy3l+28wdqW5bHx8dkAfkNbAg5+pSQkG85 g3i+OKuEI+p0n0S/LrhWeH2aZSouqxH8fTF0SqQKczuLDhbsZH8z44ZK4tcHnUkF GSY/+YY3aJNWdHBrWUvha8RfSQ+M7KbxbaWu3754fotSoBTnQaAzy/ybkXVfJwLx Fr/HF6Id9GFR2KJ24ZXwhBfEOVKYDBa6BEUMwXWX44kDJqj5qMBxotydIcHp9bxB 4rVkM8lMMoWVcYBMmF0ghCiKswguDrfiZVX/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOlPd5CFpg3vwM8Qo6l7PAVeFD2EwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09sUGQ1Q0ZwZzN2d004UW82 bDdQQVZlRkQyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PdgwDQYJKoZIhvcNAQELBQADggEBAAg2a4W48UmHDRLgO5ueRLYSmxIuBDnj7IQ9 iO03OdZQR6S2ruTx7n4xWZjJR30u01uSzICuTUq3Uhd8z1PZpfEXSLOl5HmfvNf8 XOAZ/KFQSOqI1pCtyInSeKxCj0oxXhL6bsCW3fZC3vTpbmTId1EypvVmixjriXhj SOW+a7i4QjNyE7CiVIWif7be66pGbe1i6jBMB/0YacwyxEOqWAsOhEmQHOrMo1mB 0ryt2WgxVb4ChXeoM3UVazo/8LwBiYVgxZsgFaUBkKlnf+kA7LZPecC+1JFJSKKx HeXt8oeby31OKqlRMSz+FIsoTMtyYE19Xdcm74xqZ2yASjWvO8U= -----END CERTIFICATE-----Generated at Fri Apr 18 16:45:22 2025 by rpki-client