$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YmoqFlzNrcUQET8gUiIekQFcfUQ.roa File: YmoqFlzNrcUQET8gUiIekQFcfUQ.roa (raw, json) Hash identifier: ytWyf50bm4SBYXTyjp1yBwpqCkuAj+2S0xe1VJgjgCY= Subject key identifier: 62:6A:2A:16:5C:CD:AD:C5:10:11:3F:20:52:22:1E:91:01:5C:7D:44 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24D0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YmoqFlzNrcUQET8gUiIekQFcfUQ.roa Signing time: Mon 10 Feb 2025 14:19:02 +0000 ROA not before: Mon 10 Feb 2025 14:19:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 61.64.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9424 (0x24d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:19:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=626A2A165CCDADC510113F2052221E91015C7D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:1e:9d:4e:26:76:7b:d8:33:d6:03:3b:41: 5f:f4:a6:d6:e2:60:47:34:7e:04:56:da:15:c8:31: 1c:a8:a0:62:c1:a3:12:ba:5f:21:8b:2a:2e:ad:48: 81:04:81:6a:1c:75:3d:47:bc:79:c4:ae:eb:84:54: 18:d6:dd:fe:f3:96:1b:9a:f7:3e:fa:7c:3f:7d:38: e3:ba:c3:cb:5d:af:c2:46:3c:11:69:ce:34:0d:c7: 7e:b9:cd:ea:7a:03:e1:74:80:32:e2:55:4c:0b:45: cc:8a:e4:cf:5a:86:f9:98:b3:f5:44:45:4a:de:33: c3:16:60:95:1a:99:f8:4a:7c:51:e1:30:9f:70:39: d9:7e:c3:37:51:bb:32:9c:d4:d7:7c:23:94:d7:2d: f1:e3:4f:23:03:15:f9:72:9d:73:ec:d0:56:08:3d: 59:26:e5:f4:0a:0d:50:68:00:a3:00:0d:4a:2b:58: 47:77:2d:ae:d9:bd:e1:5a:94:6b:93:59:6d:1c:7a: a4:9c:3f:62:1d:c1:79:2f:0d:75:51:2a:b6:cb:26: 2d:63:8d:42:eb:86:64:ac:d6:9b:6d:82:63:21:b4: 6a:54:a6:8a:95:af:fd:9e:2f:0b:61:82:41:a5:f2: a7:8f:1a:03:9d:dc:45:85:42:33:ca:73:82:ae:c8: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6A:2A:16:5C:CD:AD:C5:10:11:3F:20:52:22:1E:91:01:5C:7D:44 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YmoqFlzNrcUQET8gUiIekQFcfUQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.16.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:2b:15:38:d2:83:ec:2c:e5:7b:ab:9e:c4:89:aa:dc:ff:00: 60:fd:b8:19:48:59:ab:82:67:28:92:a1:1d:52:b3:31:67:8e: 31:4f:1a:d6:4b:1e:2a:73:1a:77:64:d8:00:5c:d9:0e:9d:34: b4:f9:01:25:a8:dd:be:a9:12:2d:e8:98:35:9d:19:bf:84:91: 58:c0:81:a1:35:cb:7e:52:51:5f:d6:09:47:68:c0:3b:0a:d2: fc:1b:65:2d:a3:af:6f:d2:58:ac:30:85:12:37:b6:11:15:c2: 9e:94:bd:75:b6:ca:61:84:ab:1b:99:0a:04:08:83:b9:f7:08: c9:28:29:56:11:28:c1:51:8e:01:a3:06:39:2f:33:12:0c:62: 0f:ae:67:03:36:8d:fd:7b:15:ac:87:81:e8:61:4d:af:c7:ac: ff:c7:ae:c8:1d:24:9f:06:82:9e:b0:61:2e:b4:ae:99:62:76: 46:25:e9:8e:27:e3:67:9d:c2:ae:02:c9:da:8a:20:52:6e:a4: 75:e0:ca:60:f0:bc:6d:05:20:98:51:8c:54:ce:49:b2:4d:fa: 5e:33:f8:e4:cb:a3:63:50:7d:33:e8:ef:2e:9b:5e:42:a1:fb: 1c:e0:e5:f6:5c:71:6b:f7:f3:c2:01:f8:5f:b8:0c:61:d3:2d: 2f:ca:53:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyNkEyQTE2NUNDREFE QzUxMDExM0YyMDUyMjIxRTkxMDE1QzdENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMah6dTiZ2e9gz1gM7QV/0ptbiYEc0fgRW2hXIMRyooGLBoxK6 XyGLKi6tSIEEgWocdT1HvHnEruuEVBjW3f7zlhua9z76fD99OOO6w8tdr8JGPBFp zjQNx365zep6A+F0gDLiVUwLRcyK5M9ahvmYs/VERUreM8MWYJUamfhKfFHhMJ9w Odl+wzdRuzKc1Nd8I5TXLfHjTyMDFflynXPs0FYIPVkm5fQKDVBoAKMADUorWEd3 La7ZveFalGuTWW0ceqScP2IdwXkvDXVRKrbLJi1jjULrhmSs1pttgmMhtGpUpoqV r/2eLwthgkGl8qePGgOd3EWFQjPKc4KuyMMnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYmoqFlzNrcUQET8gUiIekQFcfUQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ltb3FGbHpOcmNVUUVUOGdV aUlla1FGY2ZVUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 QBAwDQYJKoZIhvcNAQELBQADggEBAA4rFTjSg+ws5XurnsSJqtz/AGD9uBlIWauC ZyiSoR1SszFnjjFPGtZLHipzGndk2ABc2Q6dNLT5ASWo3b6pEi3omDWdGb+EkVjA gaE1y35SUV/WCUdowDsK0vwbZS2jr2/SWKwwhRI3thEVwp6UvXW2ymGEqxuZCgQI g7n3CMkoKVYRKMFRjgGjBjkvMxIMYg+uZwM2jf17FayHgehhTa/HrP/HrsgdJJ8G gp6wYS60rplidkYl6Y4n42edwq4CydqKIFJupHXgymDwvG0FIJhRjFTOSbJN+l4z +OTLo2NQfTPo7y6bXkKh+xzg5fZccWv388IB+F+4DGHTLS/KU4s= -----END CERTIFICATE-----Generated at Fri Apr 18 16:40:10 2025 by rpki-client