$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q4PRGBAQKges4Y5Mx7JKZ-faGpE.roa File: Q4PRGBAQKges4Y5Mx7JKZ-faGpE.roa (raw, json) Hash identifier: J16lDxUSYeYKwy1kdcgtE9g72T4LXLpQenqQmlpYPxs= Subject key identifier: 43:83:D1:18:10:10:2A:07:AC:E1:8E:4C:C7:B2:4A:67:E7:DA:1A:91 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2370 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q4PRGBAQKges4Y5Mx7JKZ-faGpE.roa Signing time: Mon 10 Feb 2025 14:17:36 +0000 ROA not before: Mon 10 Feb 2025 14:17:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 61.61.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9072 (0x2370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4383D11810102A07ACE18E4CC7B24A67E7DA1A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9d:30:05:51:30:c4:79:3c:fc:e9:a3:84:b4: ee:4d:db:72:e0:84:cd:f2:0b:58:2e:64:88:2b:f9: 5b:6f:90:f9:bb:80:c1:ef:79:28:2d:04:d4:62:8e: 3b:46:c6:88:5c:47:be:87:0f:ce:a2:20:74:50:21: 88:41:1a:43:b6:71:99:ca:ab:d3:ab:70:b7:86:26: 27:ac:c7:e1:fe:f8:ca:a6:d1:0b:ed:41:91:17:2c: 73:87:7c:c8:a9:27:80:9d:f1:6c:3b:27:63:28:4e: bd:ef:27:c8:fa:66:ec:19:51:16:06:9f:b3:72:1a: e0:ed:be:3a:72:c1:31:6b:19:79:1f:85:db:d1:21: 8d:4f:2b:8c:e9:85:bf:5c:58:13:2b:cd:67:10:f6: 34:25:7c:ed:e5:24:a7:69:39:a9:eb:ed:a1:ae:a8: e7:48:f4:aa:62:ad:56:ea:eb:d2:00:de:be:cf:97: 46:01:38:3a:3a:79:a0:7d:cb:90:51:a0:27:7e:4a: ea:68:e9:3c:ba:04:4d:1d:5a:9e:2d:b1:4b:b8:ac: 50:9d:5b:d1:70:09:81:09:55:eb:f7:17:2a:29:df: 4b:d6:b1:90:76:8f:78:d3:e9:cb:a1:61:2d:b2:ca: 39:c4:37:3c:f2:ee:9f:0c:51:da:d7:9f:0d:ed:d8: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:D1:18:10:10:2A:07:AC:E1:8E:4C:C7:B2:4A:67:E7:DA:1A:91 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q4PRGBAQKges4Y5Mx7JKZ-faGpE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.224.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:d4:97:b1:04:45:66:da:1a:d8:39:78:e0:05:99:08:4d:28: 31:f8:ee:8b:34:35:7e:04:84:30:49:50:97:93:78:ba:a3:ed: c7:b3:b8:86:22:b4:94:0a:99:9c:fe:ec:4c:7f:b2:58:b0:b8: 72:30:9e:86:bb:8a:e2:e8:e2:a1:44:0b:16:5a:42:9a:d4:5b: f4:87:d4:be:57:f6:f7:74:71:ed:29:0a:9a:0c:d8:4b:1a:57: 4a:4f:da:44:67:07:c6:0b:76:aa:79:c9:08:be:71:c1:84:5c: 6a:16:fe:f8:09:c5:13:3f:28:da:ff:61:b8:2f:1a:4c:3f:71: ad:0b:e0:42:e9:d4:31:1f:24:03:7e:d7:aa:67:30:4b:2d:18: 47:fd:a5:e6:bc:2b:a5:04:98:e9:95:5a:1c:f9:2d:f8:0d:76: 9b:08:fb:34:8d:c3:15:d6:11:75:8c:9b:a3:03:de:97:2c:a1: e1:aa:73:27:cf:a0:8a:fb:49:a2:c8:0c:e3:87:e5:0b:bf:cf: 88:9d:29:83:3f:e8:35:29:39:d8:eb:c1:8b:a6:12:b2:65:97: 05:0a:75:0d:62:2d:e9:45:51:45:74:b1:72:b0:b9:0a:9d:22: b3:d8:37:22:c6:b9:df:7d:ce:2a:f2:64:7a:98:90:32:5e:16: 1a:d0:58:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzODNEMTE4MTAxMDJB MDdBQ0UxOEU0Q0M3QjI0QTY3RTdEQTFBOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDunTAFUTDEeTz86aOEtO5N23LghM3yC1guZIgr+VtvkPm7gMHv eSgtBNRijjtGxohcR76HD86iIHRQIYhBGkO2cZnKq9OrcLeGJiesx+H++Mqm0Qvt QZEXLHOHfMipJ4Cd8Ww7J2MoTr3vJ8j6ZuwZURYGn7NyGuDtvjpywTFrGXkfhdvR IY1PK4zphb9cWBMrzWcQ9jQlfO3lJKdpOanr7aGuqOdI9KpirVbq69IA3r7Pl0YB ODo6eaB9y5BRoCd+Supo6Ty6BE0dWp4tsUu4rFCdW9FwCYEJVev3Fyop30vWsZB2 j3jT6cuhYS2yyjnENzzy7p8MUdrXnw3t2HzDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQ4PRGBAQKges4Y5Mx7JKZ+faGpEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1E0UFJHQkFRS2dlczRZNU14 N0pLWi1mYUdwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PeAwDQYJKoZIhvcNAQELBQADggEBAJ/Ul7EERWbaGtg5eOAFmQhNKDH47os0NX4E hDBJUJeTeLqj7cezuIYitJQKmZz+7Ex/sliwuHIwnoa7iuLo4qFECxZaQprUW/SH 1L5X9vd0ce0pCpoM2EsaV0pP2kRnB8YLdqp5yQi+ccGEXGoW/vgJxRM/KNr/Ybgv Gkw/ca0L4ELp1DEfJAN+16pnMEstGEf9pea8K6UEmOmVWhz5LfgNdpsI+zSNwxXW EXWMm6MD3pcsoeGqcyfPoIr7SaLIDOOH5Qu/z4idKYM/6DUpOdjrwYumErJllwUK dQ1iLelFUUV0sXKwuQqdIrPYNyLGud99ziryZHqYkDJeFhrQWPA= -----END CERTIFICATE-----Generated at Fri Apr 18 16:42:52 2025 by rpki-client