$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SS57HP01GkpJGRVjDlvpNIvrTbA.roa File: SS57HP01GkpJGRVjDlvpNIvrTbA.roa (raw, json) Hash identifier: UnIEL2KlsBPsCgaaLVvC+HS1twUyIS8zucgIx9Sszqg= Subject key identifier: 49:2E:7B:1C:FD:35:1A:4A:49:19:15:63:0E:5B:E9:34:8B:EB:4D:B0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2447 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SS57HP01GkpJGRVjDlvpNIvrTbA.roa Signing time: Mon 10 Feb 2025 14:18:28 +0000 ROA not before: Mon 10 Feb 2025 14:18:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.61.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9287 (0x2447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=492E7B1CFD351A4A491915630E5BE9348BEB4DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c9:b2:7d:e4:2c:ad:d7:34:84:75:87:a2:75: c1:9f:28:bc:fe:a2:1d:6c:35:a6:e3:65:bd:72:83: c0:31:a1:fb:1e:3d:17:5b:ac:bc:aa:cf:de:9f:0d: cf:4a:16:f6:13:13:49:4e:ae:31:92:ac:4f:91:aa: de:93:2a:35:75:64:81:36:f0:fc:fa:80:c6:1d:3a: 1d:c2:b3:3c:53:0e:1c:95:f6:72:2b:2c:52:2a:f8: a9:d8:bd:37:2c:6d:39:f3:b8:33:24:5d:39:e8:2e: db:cd:71:fe:29:98:e1:5f:07:30:52:b0:27:06:51: 5a:1d:29:57:dc:32:61:9a:4a:70:f2:97:14:5f:ce: ac:63:e8:30:87:ba:b1:51:18:c8:f5:e4:2b:bd:50: 99:dc:16:ef:f3:9e:96:0a:3d:51:86:88:55:77:70: 39:54:e7:1b:e6:b3:d0:a8:5f:98:75:ae:7b:3d:28: 21:4d:f1:40:85:ba:f0:01:15:57:6e:66:5e:93:a5: 67:c0:70:b4:0a:19:03:1d:36:03:95:7d:a3:6e:70: 79:c2:79:13:e0:f2:3a:f0:56:f7:52:9e:fc:aa:65: 27:5a:71:c9:6e:6b:bb:d5:2f:db:94:31:3d:b1:6e: 5a:01:56:d9:c8:bf:d3:0e:68:1e:1e:78:41:36:4a: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2E:7B:1C:FD:35:1A:4A:49:19:15:63:0E:5B:E9:34:8B:EB:4D:B0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SS57HP01GkpJGRVjDlvpNIvrTbA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.224.0/20 Signature Algorithm: sha256WithRSAEncryption 49:85:13:4a:45:68:27:2a:63:fb:4e:24:78:ec:36:7a:37:d2: aa:81:49:79:ac:84:b9:71:76:75:6e:66:80:39:c5:56:82:bf: 00:33:43:3f:53:de:5f:7d:5f:e6:d0:3c:4b:cb:aa:df:fa:45: 4a:59:ca:62:32:4a:3e:f9:7b:1e:44:40:fa:c2:2f:e6:5d:2c: 25:e2:55:7e:dd:91:d9:82:ee:09:87:41:7d:24:5d:4a:3c:40: 33:79:eb:ae:08:2b:ad:39:cb:9e:76:86:f0:9b:99:35:21:e1: 40:cd:f4:ea:ec:53:60:1d:81:95:02:1c:28:f6:ed:bf:d4:c5: 64:f3:71:6a:8e:59:54:44:d3:0f:54:38:fd:a0:18:78:16:1a: d5:3c:6e:60:34:72:60:4b:de:cb:37:fc:e6:4e:09:f9:f6:5f: d4:b1:02:58:7c:25:ed:e2:96:85:64:c4:8f:d4:c9:6d:1c:30: f0:e2:39:f3:9c:6b:07:59:3a:d4:90:b7:a2:70:25:66:ae:67: dc:be:ac:da:34:32:42:11:b8:24:50:1a:b6:7a:2b:45:f4:28: 56:c5:b3:af:1d:03:78:a9:b5:f0:95:42:e5:59:a4:e1:0d:10: 9e:e9:1a:bb:bb:10:8f:a0:99:82:59:5f:18:1f:f2:20:d1:d1: 98:9c:82:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5MkU3QjFDRkQzNTFB NEE0OTE5MTU2MzBFNUJFOTM0OEJFQjREQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaybJ95Cyt1zSEdYeidcGfKLz+oh1sNabjZb1yg8AxofsePRdb rLyqz96fDc9KFvYTE0lOrjGSrE+Rqt6TKjV1ZIE28Pz6gMYdOh3CszxTDhyV9nIr LFIq+KnYvTcsbTnzuDMkXTnoLtvNcf4pmOFfBzBSsCcGUVodKVfcMmGaSnDylxRf zqxj6DCHurFRGMj15Cu9UJncFu/znpYKPVGGiFV3cDlU5xvms9CoX5h1rns9KCFN 8UCFuvABFVduZl6TpWfAcLQKGQMdNgOVfaNucHnCeRPg8jrwVvdSnvyqZSdacclu a7vVL9uUMT2xbloBVtnIv9MOaB4eeEE2SvS1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSS57HP01GkpJGRVjDlvpNIvrTbAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NTNTdIUDAxR2twSkdSVmpE bHZwTkl2clRiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PeAwDQYJKoZIhvcNAQELBQADggEBAEmFE0pFaCcqY/tOJHjsNno30qqBSXmshLlx dnVuZoA5xVaCvwAzQz9T3l99X+bQPEvLqt/6RUpZymIySj75ex5EQPrCL+ZdLCXi VX7dkdmC7gmHQX0kXUo8QDN5664IK605y552hvCbmTUh4UDN9OrsU2AdgZUCHCj2 7b/UxWTzcWqOWVRE0w9UOP2gGHgWGtU8bmA0cmBL3ss3/OZOCfn2X9SxAlh8Je3i loVkxI/UyW0cMPDiOfOcawdZOtSQt6JwJWauZ9y+rNo0MkIRuCRQGrZ6K0X0KFbF s68dA3iptfCVQuVZpOENEJ7pGru7EI+gmYJZXxgf8iDR0Zicgls= -----END CERTIFICATE-----Generated at Fri Apr 18 16:35:23 2025 by rpki-client