$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGtNcGXcz6KMBrgGsrRsv1n849U.roa File: QGtNcGXcz6KMBrgGsrRsv1n849U.roa (raw, json) Hash identifier: SYNZF5r+rA8VW950o93LFWOeLTBExB2J+6YtXzSWbdE= Subject key identifier: 40:6B:4D:70:65:DC:CF:A2:8C:06:B8:06:B2:B4:6C:BF:59:FC:E3:D5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23ED Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGtNcGXcz6KMBrgGsrRsv1n849U.roa Signing time: Mon 10 Feb 2025 14:18:05 +0000 ROA not before: Mon 10 Feb 2025 14:18:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.64.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9197 (0x23ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=406B4D7065DCCFA28C06B806B2B46CBF59FCE3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:01:8e:7c:a0:78:03:31:f1:71:c0:b7:2e: 8d:d4:e7:13:a5:d2:b9:31:35:51:e4:ce:ab:e3:06: 42:a8:64:61:9c:b5:cd:c3:40:8f:4c:30:ac:48:fd: 77:52:6c:2b:e6:69:4d:0f:48:b4:9c:2e:25:13:bf: a8:f4:82:b0:7d:8f:de:a4:4e:aa:78:25:77:c5:f5: 19:81:4e:2b:e6:be:b5:55:0f:e9:c2:d0:b0:62:08: a4:c9:1a:31:3a:47:ad:b9:ce:d1:26:3e:4e:10:aa: 25:63:ce:cf:11:05:19:51:88:08:ef:19:80:e6:c8: 42:55:b9:b5:66:6d:6d:b2:6d:68:14:c4:c8:32:9e: 9c:dc:2a:c6:a9:e2:52:0d:06:02:38:ad:5e:53:6a: 4e:5a:95:40:ff:7c:7e:8c:1a:51:21:cb:4a:e7:3b: 29:91:d1:64:47:c8:ed:5e:da:5b:98:a8:c7:e3:1c: fe:61:03:99:74:45:45:8a:29:99:f4:7e:a7:19:9a: 28:fb:c8:aa:b2:17:e5:bb:01:4f:78:19:48:cd:0f: d5:34:fc:f7:2f:19:72:57:f7:3d:59:ed:b3:3a:39: 2a:3c:d9:5c:20:a6:f8:0a:04:52:07:19:22:c7:6c: a6:11:91:db:06:8a:44:e9:77:10:07:f1:4f:16:95: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6B:4D:70:65:DC:CF:A2:8C:06:B8:06:B2:B4:6C:BF:59:FC:E3:D5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGtNcGXcz6KMBrgGsrRsv1n849U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.0.0/22 Signature Algorithm: sha256WithRSAEncryption 34:b9:17:e5:fd:3a:62:09:6b:51:d7:f8:f5:d6:4f:49:69:ad: 03:d0:b1:dc:86:28:aa:93:07:46:3f:26:b2:17:4f:45:0d:3d: 4f:9b:e6:f6:22:27:c3:03:a7:ef:f8:84:9d:37:8c:09:3a:83: 5c:d4:1e:58:53:7c:b5:5f:e3:db:3f:1e:01:5b:90:c6:21:14: 6e:e6:7a:c4:11:e6:79:55:23:95:45:f4:9b:86:2a:30:35:c3: 56:0d:ad:9f:ed:e4:eb:93:f0:53:8b:25:27:36:3b:19:3c:8c: e9:1a:e2:6b:f3:40:03:3c:ce:4c:b9:54:27:5f:65:76:3e:ff: 38:ac:ef:f7:1c:0d:60:75:ae:7a:b2:91:88:6f:7e:7a:f4:bd: 15:c0:28:b6:b1:47:58:b6:14:2b:c6:b1:21:5a:9a:5a:8b:88: c9:c8:0f:32:f3:c0:d2:46:b1:bc:fc:37:0b:4d:d2:82:50:84: ac:96:3e:56:2b:44:e7:3c:03:16:56:47:91:a1:40:83:71:a1: 49:30:5f:ef:3f:fc:63:5c:90:f3:8e:87:80:9c:49:77:d7:bd: 0b:7f:43:65:c1:bd:51:12:94:17:ed:94:4f:3a:ac:89:a2:bc: 15:fe:ad:05:17:69:02:c0:7b:59:2a:51:dd:06:dc:80:73:29: 5b:d9:4a:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwNkI0RDcwNjVEQ0NG QTI4QzA2QjgwNkIyQjQ2Q0JGNTlGQ0UzRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6TAGOfKB4AzHxccC3Lo3U5xOl0rkxNVHkzqvjBkKoZGGctc3D QI9MMKxI/XdSbCvmaU0PSLScLiUTv6j0grB9j96kTqp4JXfF9RmBTivmvrVVD+nC 0LBiCKTJGjE6R625ztEmPk4QqiVjzs8RBRlRiAjvGYDmyEJVubVmbW2ybWgUxMgy npzcKsap4lINBgI4rV5Tak5alUD/fH6MGlEhy0rnOymR0WRHyO1e2luYqMfjHP5h A5l0RUWKKZn0fqcZmij7yKqyF+W7AU94GUjND9U0/PcvGXJX9z1Z7bM6OSo82Vwg pvgKBFIHGSLHbKYRkdsGikTpdxAH8U8WlYRXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQGtNcGXcz6KMBrgGsrRsv1n849UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FHdE5jR1hjejZLTUJyZ0dz clJzdjFuODQ5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QAAwDQYJKoZIhvcNAQELBQADggEBADS5F+X9OmIJa1HX+PXWT0lprQPQsdyGKKqT B0Y/JrIXT0UNPU+b5vYiJ8MDp+/4hJ03jAk6g1zUHlhTfLVf49s/HgFbkMYhFG7m esQR5nlVI5VF9JuGKjA1w1YNrZ/t5OuT8FOLJSc2Oxk8jOka4mvzQAM8zky5VCdf ZXY+/zis7/ccDWB1rnqykYhvfnr0vRXAKLaxR1i2FCvGsSFamlqLiMnIDzLzwNJG sbz8NwtN0oJQhKyWPlYrROc8AxZWR5GhQINxoUkwX+8//GNckPOOh4CcSXfXvQt/ Q2XBvVESlBftlE86rImivBX+rQUXaQLAe1kqUd0G3IBzKVvZSis= -----END CERTIFICATE-----Generated at Thu Apr 17 21:08:21 2025 by rpki-client