$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R1iAIPIKCYTZmZ09DHMoG2ONtm0.roa File: R1iAIPIKCYTZmZ09DHMoG2ONtm0.roa (raw, json) Hash identifier: /zjeDEtm+5jPFsGdZcvFpUkqaBBdkNNKsWcYpBVnqn8= Subject key identifier: 47:58:80:20:F2:0A:09:84:D9:99:9D:3D:0C:73:28:1B:63:8D:B6:6D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2394 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R1iAIPIKCYTZmZ09DHMoG2ONtm0.roa Signing time: Mon 10 Feb 2025 14:17:42 +0000 ROA not before: Mon 10 Feb 2025 14:17:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.254.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9108 (0x2394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=47588020F20A0984D9999D3D0C73281B638DB66D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:3f:59:82:b5:30:52:fe:75:15:77:d6:02: c3:61:b3:17:76:6e:d2:5d:09:3a:92:93:04:ae:ba: 41:7c:1d:ba:bd:2c:a3:fa:f2:45:bd:c5:73:f9:bd: 3c:b7:af:d2:ae:9f:da:6e:cf:77:24:ea:1d:c4:70: 72:ae:78:2b:e8:9d:a8:14:6b:47:1d:ee:c6:e2:12: fe:6e:e3:43:b2:5f:5a:e6:05:5c:61:b1:cd:ba:0a: f7:c9:e4:fc:81:cb:46:3d:af:04:38:ec:7b:07:42: 0e:31:66:5b:3f:9c:77:be:1d:ba:a4:6c:88:0a:ad: 74:83:a7:08:9f:70:8b:7c:1e:5d:6b:5e:7a:60:b9: 6a:eb:e4:b0:93:10:cf:e2:45:6c:47:a8:04:2d:61: 5d:f2:2e:f9:18:2a:c1:0b:0f:d4:52:39:07:78:19: 81:e7:ae:b6:59:7d:83:27:70:13:bf:cc:4f:a7:f1: 1b:5c:a8:85:8f:e5:9f:8b:5a:50:52:a8:d3:9d:6f: 78:55:70:05:fa:b2:49:79:41:28:6c:38:fa:ae:6d: a6:fb:d5:9c:f2:9b:a6:10:0d:4a:02:4f:a6:ab:13: cf:9b:23:f9:ce:85:f9:b4:c4:1b:e1:c3:e5:63:7b: 80:be:e4:c6:d1:a7:48:83:45:11:86:33:fb:cb:2b: fe:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:80:20:F2:0A:09:84:D9:99:9D:3D:0C:73:28:1B:63:8D:B6:6D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R1iAIPIKCYTZmZ09DHMoG2ONtm0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.48.0/21 Signature Algorithm: sha256WithRSAEncryption 77:ae:cd:4d:07:f7:72:79:aa:06:8e:36:dc:3c:73:f2:31:2d: 0e:83:2f:fd:a8:cf:25:8d:3b:e5:99:e4:ea:77:e2:6f:30:16: 12:08:0e:6f:67:02:a7:48:9f:80:10:b9:42:ee:84:8e:8f:be: e8:61:85:d4:fd:3b:35:c7:fb:de:d7:0c:4b:44:59:b3:52:4d: 8a:4c:08:e4:d9:f9:78:9c:b2:d8:eb:a4:1a:c4:25:67:c2:91: 59:90:7f:35:ae:f8:a9:75:85:30:83:b3:a8:2f:b0:9f:60:a9: 1d:6b:e0:bf:40:a9:8f:ee:93:87:c0:b6:32:06:05:64:ec:29: cb:1e:1c:5c:bf:a5:88:ee:cf:92:4c:7d:e7:83:2d:34:ef:7f: 81:8c:16:e7:b4:3d:58:58:24:77:7a:9a:4f:12:28:4e:c9:0d: 51:9b:18:a7:41:47:56:12:99:30:75:a6:45:12:30:5d:8d:a4: 11:6e:7a:15:b8:26:cc:c6:c0:a7:22:e1:85:6d:28:82:d3:cf: 04:1e:fb:b1:38:4e:b6:97:81:97:ae:8f:c6:df:b5:dc:e2:01: 25:f9:35:5e:71:5f:ab:b2:6b:e8:1b:d8:50:af:c2:dd:de:98: 80:c7:0d:e2:0f:d7:95:53:37:6f:f9:03:47:43:1f:4e:70:dc: 78:d3:76:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ3NTg4MDIwRjIwQTA5 ODREOTk5OUQzRDBDNzMyODFCNjM4REI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9yT9ZgrUwUv51FXfWAsNhsxd2btJdCTqSkwSuukF8Hbq9LKP6 8kW9xXP5vTy3r9Kun9puz3ck6h3EcHKueCvonagUa0cd7sbiEv5u40OyX1rmBVxh sc26CvfJ5PyBy0Y9rwQ47HsHQg4xZls/nHe+HbqkbIgKrXSDpwifcIt8Hl1rXnpg uWrr5LCTEM/iRWxHqAQtYV3yLvkYKsELD9RSOQd4GYHnrrZZfYMncBO/zE+n8Rtc qIWP5Z+LWlBSqNOdb3hVcAX6skl5QShsOPqubab71Zzym6YQDUoCT6arE8+bI/nO hfm0xBvhw+Vje4C+5MbRp0iDRRGGM/vLK/6bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUR1iAIPIKCYTZmZ09DHMoG2ONtm0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1IxaUFJUElLQ1lUWm1aMDlE SE1vRzJPTnRtMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /jAwDQYJKoZIhvcNAQELBQADggEBAHeuzU0H93J5qgaONtw8c/IxLQ6DL/2ozyWN O+WZ5Op34m8wFhIIDm9nAqdIn4AQuULuhI6PvuhhhdT9OzXH+97XDEtEWbNSTYpM COTZ+XicstjrpBrEJWfCkVmQfzWu+Kl1hTCDs6gvsJ9gqR1r4L9AqY/uk4fAtjIG BWTsKcseHFy/pYjuz5JMfeeDLTTvf4GMFue0PVhYJHd6mk8SKE7JDVGbGKdBR1YS mTB1pkUSMF2NpBFuehW4JszGwKci4YVtKILTzwQe+7E4TraXgZeuj8bftdziASX5 NV5xX6uya+gb2FCvwt3emIDHDeIP15VTN2/5A0dDH05w3HjTdrk= -----END CERTIFICATE-----Generated at Fri Apr 18 16:43:33 2025 by rpki-client