$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VyjNrlqrotXaaRZzJD-4nvr5HmA.roa File: VyjNrlqrotXaaRZzJD-4nvr5HmA.roa (raw, json) Hash identifier: zLCek7XM0iC8h1bh8HA72mB+NIP/xDpdL9cbR64bA2Y= Subject key identifier: 57:28:CD:AE:5A:AB:A2:D5:DA:69:16:73:24:3F:B8:9E:FA:F9:1E:60 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23DA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VyjNrlqrotXaaRZzJD-4nvr5HmA.roa Signing time: Mon 10 Feb 2025 14:18:00 +0000 ROA not before: Mon 10 Feb 2025 14:18:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.58.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9178 (0x23da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5728CDAE5AABA2D5DA691673243FB89EFAF91E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:ab:20:d4:6e:c1:2a:9e:8f:05:4b:c2:6c: 17:2d:07:bb:bd:05:a2:99:f9:ed:b4:3d:3d:4f:9d: 51:1b:97:63:12:2c:a7:12:f9:77:a3:6e:07:c7:30: f8:13:57:a8:c9:f9:87:98:a7:1e:55:d5:c4:8a:8c: 48:52:0e:4e:0e:5b:08:7a:90:21:94:91:b0:35:b6: d5:23:81:7e:f2:f1:ad:90:c6:79:4b:cc:f4:60:d4: 46:53:98:d7:4e:f9:09:6d:e2:b3:a9:b4:3c:ed:3c: 85:93:36:ab:92:47:61:20:6e:9a:8b:69:36:4b:53: 56:cc:4a:44:90:26:ec:23:e7:6d:98:6f:08:93:60: da:a4:ed:fd:ba:bc:be:f6:e9:eb:4f:3f:61:83:f6: 12:d6:49:d8:8c:44:f2:69:96:b2:65:a8:93:b8:91: 8a:c9:a1:a3:4e:c7:f2:e2:8c:59:7e:a6:63:48:e8: 26:5b:fd:51:5f:11:ec:06:40:bd:e2:27:28:b5:d9: d9:9c:3a:21:d2:5c:00:3b:b4:92:b8:29:fc:09:a9: cc:a6:7c:5e:85:a4:0a:9c:97:1a:6b:14:59:ef:b3: fe:0b:d4:c7:7d:6e:c0:b7:00:17:48:e0:be:db:d0: 8e:4f:c8:2a:a2:dc:1b:1f:74:54:61:75:ea:c1:c4: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:CD:AE:5A:AB:A2:D5:DA:69:16:73:24:3F:B8:9E:FA:F9:1E:60 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VyjNrlqrotXaaRZzJD-4nvr5HmA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.112.0/20 Signature Algorithm: sha256WithRSAEncryption 77:fc:17:ab:a3:2f:ee:52:3c:9c:04:e7:1c:d6:ea:d0:de:97: e3:89:43:5a:05:b1:9c:f2:99:ef:0a:9a:f9:f2:35:12:99:29: e1:6d:2a:e1:47:94:c5:7a:c9:52:7b:7a:ce:6f:b7:fc:bb:d3: 85:6f:76:a6:e7:5c:78:df:21:40:01:92:05:54:97:5e:47:c9: 38:aa:20:d7:fb:1b:f2:cf:57:c5:08:3a:c9:f3:f3:e1:15:ba: aa:1b:61:cb:28:a0:99:7e:ac:70:79:d4:a2:ab:fd:44:df:95: 7f:70:b6:b4:7d:02:05:a5:89:88:c7:8c:a1:1e:e2:b6:9f:55: ed:35:3f:e7:4a:a2:f3:69:c6:70:8c:81:f4:f2:49:fe:1c:55: df:5d:dd:50:14:b2:6f:13:7d:6e:9c:4f:20:2e:f8:1e:2a:69: cc:50:e5:8b:eb:cc:9e:41:e6:eb:4b:14:1b:f7:21:a4:57:23: 1a:36:57:9a:0e:e9:5a:09:06:e5:cd:b6:42:16:e3:e3:22:4d: 80:5a:e7:88:09:c1:55:f9:60:94:47:e2:d3:a3:ed:a1:4f:a8: 6e:32:67:19:ea:1d:df:dc:3c:73:a6:2a:35:de:7c:b2:af:66: 85:ce:b9:38:1e:3c:05:4c:f0:73:24:32:91:88:02:77:2e:e7: 3c:61:3b:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU3MjhDREFFNUFBQkEy RDVEQTY5MTY3MzI0M0ZCODlFRkFGOTFFNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC11qsg1G7BKp6PBUvCbBctB7u9BaKZ+e20PT1PnVEbl2MSLKcS +XejbgfHMPgTV6jJ+YeYpx5V1cSKjEhSDk4OWwh6kCGUkbA1ttUjgX7y8a2QxnlL zPRg1EZTmNdO+Qlt4rOptDztPIWTNquSR2EgbpqLaTZLU1bMSkSQJuwj522YbwiT YNqk7f26vL726etPP2GD9hLWSdiMRPJplrJlqJO4kYrJoaNOx/LijFl+pmNI6CZb /VFfEewGQL3iJyi12dmcOiHSXAA7tJK4KfwJqcymfF6FpAqclxprFFnvs/4L1Md9 bsC3ABdI4L7b0I5PyCqi3BsfdFRhderBxMRlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVyjNrlqrotXaaRZzJD+4nvr5HmAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1Z5ak5ybHFyb3RYYWFSWnpK RC00bnZyNUhtQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OnAwDQYJKoZIhvcNAQELBQADggEBAHf8F6ujL+5SPJwE5xzW6tDel+OJQ1oFsZzy me8KmvnyNRKZKeFtKuFHlMV6yVJ7es5vt/y704VvdqbnXHjfIUABkgVUl15HyTiq INf7G/LPV8UIOsnz8+EVuqobYcsooJl+rHB51KKr/UTflX9wtrR9AgWliYjHjKEe 4rafVe01P+dKovNpxnCMgfTySf4cVd9d3VAUsm8TfW6cTyAu+B4qacxQ5YvrzJ5B 5utLFBv3IaRXIxo2V5oO6VoJBuXNtkIW4+MiTYBa54gJwVX5YJRH4tOj7aFPqG4y ZxnqHd/cPHOmKjXefLKvZoXOuTgePAVM8HMkMpGIAncu5zxhOwY= -----END CERTIFICATE-----Generated at Fri Apr 18 16:41:12 2025 by rpki-client