$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PuoHYBvPFXnpv0NlYL1XxU1RFuM.roa File: PuoHYBvPFXnpv0NlYL1XxU1RFuM.roa (raw, json) Hash identifier: c4H8j3tuY6sj+4SZL089ZdHblIdzoAwcjkTC87o+HsU= Subject key identifier: 3E:EA:07:60:1B:CF:15:79:E9:BF:43:65:60:BD:57:C5:4D:51:16:E3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23D7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PuoHYBvPFXnpv0NlYL1XxU1RFuM.roa Signing time: Mon 10 Feb 2025 14:17:59 +0000 ROA not before: Mon 10 Feb 2025 14:17:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 211.76.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9175 (0x23d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3EEA07601BCF1579E9BF436560BD57C54D5116E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:94:eb:de:e2:81:45:69:55:c7:02:24:f4:3b: b7:17:84:75:ac:59:2a:cf:3c:e2:d6:dc:71:34:96: 11:1b:d0:73:f9:0a:27:74:74:e0:2e:4b:95:33:61: e6:85:a3:e0:ed:79:4b:d5:95:fb:f6:35:33:ef:6f: 4b:e2:24:a6:c9:51:a4:dd:30:ae:b4:5e:a3:80:02: 3b:49:f4:cd:f5:62:b5:14:b1:4e:cc:5c:09:9d:bd: c5:cd:e0:a9:b7:bb:04:24:7c:6c:3e:97:1b:d3:98: f6:d2:71:bd:fe:c6:f9:d1:cf:ac:45:55:cf:c6:dd: c4:0c:0c:93:ea:bc:46:b2:e7:38:d6:74:b3:f9:e8: 18:41:83:8e:46:83:cd:0d:34:d8:ac:3a:93:ed:79: 37:1a:c5:e6:0b:e2:71:00:dc:a5:25:69:d8:75:2d: 14:15:35:8d:6e:6b:c5:f4:70:68:b0:d1:95:66:e9: 5e:c5:2e:17:e6:32:d4:24:5c:33:cb:52:8b:5a:59: 1a:7a:7a:fc:c0:88:50:50:17:b8:07:56:31:b7:ea: aa:8c:01:63:7c:da:59:99:dd:ae:de:7c:d1:5c:a1: 19:3a:cc:87:09:16:fc:eb:e6:98:c3:8e:41:d6:23: 8b:f4:7b:bc:68:92:0f:49:57:57:c6:43:13:db:c1: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:07:60:1B:CF:15:79:E9:BF:43:65:60:BD:57:C5:4D:51:16:E3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PuoHYBvPFXnpv0NlYL1XxU1RFuM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.48.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:4e:28:05:6c:68:63:3f:f2:10:d2:78:8c:29:de:34:07:27: 97:f4:82:93:62:88:78:2d:c7:dd:c1:be:4c:ed:b9:7d:07:5e: c9:b0:ee:c2:74:e8:cf:fe:91:92:11:c4:7b:db:e8:ba:f6:da: 5f:cb:0b:88:37:e9:a1:a9:0d:67:76:d7:4d:c2:7b:62:95:6a: 06:6f:b9:04:e1:a1:70:99:e2:61:70:8f:ff:8e:2c:5e:95:a3: 79:6b:43:74:12:cf:b7:5b:b9:8f:17:6a:27:94:ed:ae:a3:ff: ee:51:40:f5:0a:57:7e:02:d1:7c:6a:c0:d8:94:f0:ee:bf:9e: 38:9f:9a:4a:d2:1e:36:7b:5c:44:c7:bb:99:1a:45:3d:cb:20: cb:30:77:f9:a6:80:2b:86:80:18:b4:51:a4:75:80:4b:b7:59: 18:39:92:41:e0:6c:3e:47:4d:57:ed:4d:32:74:4c:67:2a:23: cc:fb:f3:2f:46:b9:b5:31:61:ff:13:0a:98:4b:45:8f:72:9a: 91:22:8d:28:b6:b9:c8:12:12:58:c0:65:9b:e2:ea:18:4b:02: 22:02:13:f3:b9:17:4c:0a:39:61:32:4a:67:0e:7b:c7:28:43: 35:1f:d8:6c:de:23:9c:4a:1d:5f:ec:97:39:93:3c:cb:bc:28: e3:4e:78:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFRUEwNzYwMUJDRjE1 NzlFOUJGNDM2NTYwQkQ1N0M1NEQ1MTE2RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDklOve4oFFaVXHAiT0O7cXhHWsWSrPPOLW3HE0lhEb0HP5Cid0 dOAuS5UzYeaFo+DteUvVlfv2NTPvb0viJKbJUaTdMK60XqOAAjtJ9M31YrUUsU7M XAmdvcXN4Km3uwQkfGw+lxvTmPbScb3+xvnRz6xFVc/G3cQMDJPqvEay5zjWdLP5 6BhBg45Gg80NNNisOpPteTcaxeYL4nEA3KUladh1LRQVNY1ua8X0cGiw0ZVm6V7F LhfmMtQkXDPLUotaWRp6evzAiFBQF7gHVjG36qqMAWN82lmZ3a7efNFcoRk6zIcJ Fvzr5pjDjkHWI4v0e7xokg9JV1fGQxPbwUbbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPuoHYBvPFXnpv0NlYL1XxU1RFuMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1B1b0hZQnZQRlhucHYwTmxZ TDFYeFUxUkZ1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TDAwDQYJKoZIhvcNAQELBQADggEBAJxOKAVsaGM/8hDSeIwp3jQHJ5f0gpNiiHgt x93BvkztuX0HXsmw7sJ06M/+kZIRxHvb6Lr22l/LC4g36aGpDWd2103Ce2KVagZv uQThoXCZ4mFwj/+OLF6Vo3lrQ3QSz7dbuY8XaieU7a6j/+5RQPUKV34C0XxqwNiU 8O6/njifmkrSHjZ7XETHu5kaRT3LIMswd/mmgCuGgBi0UaR1gEu3WRg5kkHgbD5H TVftTTJ0TGcqI8z78y9GubUxYf8TCphLRY9ympEijSi2ucgSEljAZZvi6hhLAiIC E/O5F0wKOWEySmcOe8coQzUf2GzeI5xKHV/slzmTPMu8KONOeCQ= -----END CERTIFICATE-----Generated at Fri Apr 18 16:43:10 2025 by rpki-client