$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PDL8cfs0426sU2ks8Ez3IggGRgw.roa File: PDL8cfs0426sU2ks8Ez3IggGRgw.roa (raw, json) Hash identifier: fMPm5tAXRhL+HZn4kiSG4TeXsq6mZViM0bt0/cdb0LA= Subject key identifier: 3C:32:FC:71:FB:34:E3:6E:AC:53:69:2C:F0:4C:F7:22:08:06:46:0C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 249F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PDL8cfs0426sU2ks8Ez3IggGRgw.roa Signing time: Mon 10 Feb 2025 14:18:50 +0000 ROA not before: Mon 10 Feb 2025 14:18:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 114.198.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9375 (0x249f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3C32FC71FB34E36EAC53692CF04CF7220806460C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:5c:40:29:42:c0:ac:52:ae:e1:50:3e:d5: ce:e4:dd:34:6c:ce:c8:4c:9a:ff:d1:bc:37:7f:b2: 8f:29:66:4d:72:c5:dc:a9:f3:6e:ff:1b:a0:b5:17: 46:0e:4d:5e:4a:88:53:28:1c:0c:0f:f2:f0:24:94: 55:fc:60:cd:7b:32:21:25:9b:79:5c:23:bd:8b:8d: 71:ba:07:74:3a:6e:21:19:61:84:bc:e0:f1:97:a5: 52:50:d9:9b:25:ce:29:e2:38:b4:57:5a:65:65:fe: e0:73:00:65:85:96:64:3b:fe:99:d6:c9:0e:23:56: 4b:1a:6b:b7:67:8c:57:ff:85:0c:f0:4e:01:98:2c: 03:f5:de:fa:9e:1c:6b:88:f7:7b:ad:17:e7:d4:6c: 06:d6:35:92:d8:e2:b1:07:7e:50:4c:12:05:70:9f: 1c:00:91:fa:c6:f2:a7:ba:5a:a9:2b:4b:71:79:b1: a7:ff:2d:de:45:88:21:dd:ea:41:45:c1:6a:db:4f: 34:c6:9e:dc:b1:55:e4:79:67:a1:d4:8e:bf:a3:b0: c4:7c:d8:c6:c8:21:1f:03:71:71:93:61:cd:59:0b: 25:ea:75:18:76:51:08:0a:14:b0:11:58:09:4a:67: 58:9e:14:92:73:bd:bf:33:77:84:5c:2b:fe:94:b9: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:FC:71:FB:34:E3:6E:AC:53:69:2C:F0:4C:F7:22:08:06:46:0C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PDL8cfs0426sU2ks8Ez3IggGRgw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.160.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:17:c8:58:92:5d:db:cd:2e:69:2a:e6:88:13:4c:7b:4d:d5: 6b:fc:4a:67:6d:27:f2:b7:e5:52:86:22:38:d3:d1:dc:79:00: 19:6d:5b:7b:48:08:c2:cd:1a:2e:f5:05:8f:bc:29:27:b9:e9: eb:08:b3:80:af:e5:db:4f:e8:14:39:1f:ac:c9:10:8a:5c:57: 6c:06:5e:a7:36:63:59:21:31:36:6e:34:0c:d3:ca:1e:f6:85: 05:c2:99:cc:83:b3:45:cb:81:44:a3:bf:e9:b6:d3:6d:9e:ad: 8b:6c:ec:41:e0:66:fe:22:08:c9:ad:0f:e1:6e:60:bc:d8:a5: e1:c9:e6:10:55:4b:41:08:1c:54:6d:95:23:8c:08:d6:36:75: 2a:74:6a:9e:59:03:25:cc:ba:4b:21:09:de:82:a6:74:40:5d: 9e:09:68:3f:e2:4d:43:e2:06:28:90:0d:81:f1:1d:b0:a0:b4: ec:3a:55:e4:d5:e6:c7:4e:58:cd:82:9a:1f:d1:02:b9:64:cb: 56:39:74:0e:8b:83:29:9a:07:df:25:d4:7b:f5:60:f5:b0:00: 4d:92:95:11:fa:5f:d1:2f:86:8b:a1:90:03:5c:ce:d7:e6:31: d0:a9:f5:60:ab:6d:f6:e6:42:42:56:8e:c7:c8:d3:1c:e8:86: f0:12:19:57 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDMzJGQzcxRkIzNEUz NkVBQzUzNjkyQ0YwNENGNzIyMDgwNjQ2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLH1xAKULArFKu4VA+1c7k3TRszshMmv/RvDd/so8pZk1yxdyp 827/G6C1F0YOTV5KiFMoHAwP8vAklFX8YM17MiElm3lcI72LjXG6B3Q6biEZYYS8 4PGXpVJQ2ZslziniOLRXWmVl/uBzAGWFlmQ7/pnWyQ4jVksaa7dnjFf/hQzwTgGY LAP13vqeHGuI93utF+fUbAbWNZLY4rEHflBMEgVwnxwAkfrG8qe6WqkrS3F5saf/ Ld5FiCHd6kFFwWrbTzTGntyxVeR5Z6HUjr+jsMR82MbIIR8DcXGTYc1ZCyXqdRh2 UQgKFLARWAlKZ1ieFJJzvb8zd4RcK/6UuVjpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPDL8cfs0426sU2ks8Ez3IggGRgwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BETDhjZnMwNDI2c1Uya3M4 RXozSWdnR1Jndy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xqAwDQYJKoZIhvcNAQELBQADggEBAE0XyFiSXdvNLmkq5ogTTHtN1Wv8SmdtJ/K3 5VKGIjjT0dx5ABltW3tICMLNGi71BY+8KSe56esIs4Cv5dtP6BQ5H6zJEIpcV2wG Xqc2Y1khMTZuNAzTyh72hQXCmcyDs0XLgUSjv+m2022erYts7EHgZv4iCMmtD+Fu YLzYpeHJ5hBVS0EIHFRtlSOMCNY2dSp0ap5ZAyXMukshCd6CpnRAXZ4JaD/iTUPi BiiQDYHxHbCgtOw6VeTV5sdOWM2Cmh/RArlky1Y5dA6LgymaB98l1Hv1YPWwAE2S lRH6X9EvhouhkANcztfmMdCp9WCrbfbmQkJWjsfI0xzohvASGVc= -----END CERTIFICATE-----Generated at Mon Apr 7 01:57:43 2025 by rpki-client