$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAEBmkQNQnNEv_ANzfeTnPhZuuc.roa File: RAEBmkQNQnNEv_ANzfeTnPhZuuc.roa (raw, json) Hash identifier: 1GXlhg9nDnukDloxl55hXW6x4kmJsSKsiTMmJwSgHLM= Subject key identifier: 44:01:01:9A:44:0D:42:73:44:BF:F0:0D:CD:F7:93:9C:F8:59:BA:E7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2462 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAEBmkQNQnNEv_ANzfeTnPhZuuc.roa Signing time: Mon 10 Feb 2025 14:18:34 +0000 ROA not before: Mon 10 Feb 2025 14:18:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 119.77.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9314 (0x2462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4401019A440D427344BFF00DCDF7939CF859BAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:82:7a:2b:2b:dc:f9:fc:d3:8c:2d:23:eb: b5:63:51:f2:d2:95:16:b7:f4:22:59:ee:7c:0e:06: fe:2f:7a:a1:b0:68:b5:84:ed:60:4b:fd:10:76:6f: 15:8a:e9:e7:75:e4:9d:81:eb:18:53:1f:10:9b:bc: 2f:6d:db:29:54:08:13:d0:17:da:9e:9c:94:08:53: 88:3f:70:9e:74:04:db:8f:1a:20:e5:2b:9a:19:c7: bd:ac:e6:f4:d9:f0:4a:6e:2d:4b:6d:ef:f5:4d:34: 6b:de:74:d7:77:94:6a:24:1d:f3:bd:c9:14:8a:c1: 72:25:39:08:c8:5f:64:a1:65:cf:f2:b3:61:02:d4: 66:66:90:d2:bc:57:c8:b2:33:70:5d:d2:2f:e0:27: 60:8b:ea:88:ee:80:6f:cb:52:a0:e2:7f:cd:7d:63: 3e:01:1a:38:9f:1f:1f:aa:a9:7b:85:06:73:75:b8: 98:9b:a9:59:40:ea:44:b0:e4:ec:0e:39:42:1f:65: cf:15:34:03:73:56:c6:36:aa:ec:2b:d1:01:e9:b7: a2:98:03:f0:77:a9:e7:73:ea:6f:84:69:06:4a:b4: 2d:f2:b2:4f:c3:66:2e:b1:cf:dd:cf:6d:eb:e2:c9: 79:02:30:bf:7a:3b:46:61:d3:64:39:35:5f:23:a1: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:01:01:9A:44:0D:42:73:44:BF:F0:0D:CD:F7:93:9C:F8:59:BA:E7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAEBmkQNQnNEv_ANzfeTnPhZuuc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/22 Signature Algorithm: sha256WithRSAEncryption 60:72:ec:d7:85:35:5f:fe:f1:e8:5a:65:e0:23:ad:8e:fd:45: f2:e6:85:04:1c:d5:91:17:2a:d0:d4:ae:6d:d7:c1:03:b7:2f: dc:15:00:76:68:1a:70:01:41:43:80:7d:aa:84:a4:7e:ed:9f: 86:9d:47:8c:ef:75:16:ef:82:91:a8:5e:82:fe:c6:79:31:ab: 55:0b:84:90:d9:49:1b:04:11:df:83:88:22:1d:f8:a0:4d:ad: 74:d9:b7:73:d2:57:5b:04:75:cf:c6:30:38:d4:e6:6b:23:71: 8b:09:09:1b:6c:35:6c:7c:bc:55:56:bd:f4:5d:0c:f4:8e:38: c9:3d:2b:f5:4c:dc:e4:df:83:12:7c:f2:ed:e6:7b:2d:49:27: af:fa:f9:f4:23:ff:8f:cc:88:a1:f7:09:d4:5b:ef:b1:a8:c5: d9:3e:50:82:c2:a3:35:d4:90:92:01:9e:74:8a:36:de:b3:27: 2d:da:0b:68:78:49:a4:38:a8:6c:51:18:fb:64:a6:f3:f0:52: eb:67:b9:12:48:d1:5b:3f:93:69:e8:f4:1f:8a:71:be:e3:62: 6b:81:7a:62:d4:6b:c3:a8:71:94:ea:3f:b6:2f:b1:4e:ee:0b: ba:6d:21:74:28:92:c8:0d:a6:04:af:d4:03:54:86:79:18:fb: e8:fc:3a:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ0MDEwMTlBNDQwRDQy NzM0NEJGRjAwRENERjc5MzlDRjg1OUJBRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiiIJ6Kyvc+fzTjC0j67VjUfLSlRa39CJZ7nwOBv4veqGwaLWE 7WBL/RB2bxWK6ed15J2B6xhTHxCbvC9t2ylUCBPQF9qenJQIU4g/cJ50BNuPGiDl K5oZx72s5vTZ8EpuLUtt7/VNNGvedNd3lGokHfO9yRSKwXIlOQjIX2ShZc/ys2EC 1GZmkNK8V8iyM3Bd0i/gJ2CL6ojugG/LUqDif819Yz4BGjifHx+qqXuFBnN1uJib qVlA6kSw5OwOOUIfZc8VNANzVsY2quwr0QHpt6KYA/B3qedz6m+EaQZKtC3ysk/D Zi6xz93PbeviyXkCML96O0Zh02Q5NV8jocgDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURAEBmkQNQnNEv/ANzfeTnPhZuucwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1JBRUJta1FOUW5ORXZfQU56 ZmVUblBoWnV1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3 TYAwDQYJKoZIhvcNAQELBQADggEBAGBy7NeFNV/+8ehaZeAjrY79RfLmhQQc1ZEX KtDUrm3XwQO3L9wVAHZoGnABQUOAfaqEpH7tn4adR4zvdRbvgpGoXoL+xnkxq1UL hJDZSRsEEd+DiCId+KBNrXTZt3PSV1sEdc/GMDjU5msjcYsJCRtsNWx8vFVWvfRd DPSOOMk9K/VM3OTfgxJ88u3mey1JJ6/6+fQj/4/MiKH3CdRb77Goxdk+UILCozXU kJIBnnSKNt6zJy3aC2h4SaQ4qGxRGPtkpvPwUutnuRJI0Vs/k2no9B+Kcb7jYmuB emLUa8OocZTqP7YvsU7uC7ptIXQoksgNpgSv1ANUhnkY++j8OqU= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:39 2025 by rpki-client