$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a8hSe_MLm1pr7BG7LmfTXIFYuJ4.roa File: a8hSe_MLm1pr7BG7LmfTXIFYuJ4.roa (raw, json) Hash identifier: SnD/bk9tPQAzAqbL3vQkT+x6aSU6hqR3+T6IKuOblm8= Subject key identifier: 6B:C8:52:7B:F3:0B:9B:5A:6B:EC:11:BB:2E:67:D3:5C:81:58:B8:9E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23C3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a8hSe_MLm1pr7BG7LmfTXIFYuJ4.roa Signing time: Mon 10 Feb 2025 14:17:54 +0000 ROA not before: Mon 10 Feb 2025 14:17:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.61.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9155 (0x23c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6BC8527BF30B9B5A6BEC11BB2E67D35C8158B89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:0d:7f:70:52:51:03:f1:f0:53:e5:0d:05: 66:ed:c6:2e:b4:1a:aa:1b:7c:d2:a8:4d:3f:32:8e: 3e:57:a5:63:ea:b3:69:8d:79:3f:25:40:40:68:e4: bb:2c:17:75:57:f5:68:5e:9a:64:68:b0:8a:a6:12: 41:34:f8:d4:ff:21:7b:04:87:ad:16:5d:68:7b:27: a1:7c:09:4f:09:ce:6c:fb:86:10:db:11:b0:2e:77: 9c:58:ec:6e:08:38:e4:83:07:db:48:b7:15:ea:f5: ac:61:bb:99:77:82:85:48:3c:55:bc:52:cb:12:c0: 25:4c:0b:15:92:ea:fb:e9:bd:b8:6d:e8:ee:c7:62: 96:c1:89:a0:4b:4a:31:1d:73:4c:fa:c8:1c:b4:55: 9d:fb:04:3d:4b:c3:af:4d:81:89:2d:66:f5:da:92: 77:15:af:f5:d6:89:90:89:9b:26:04:90:62:bb:b8: a4:be:e8:14:1d:2f:a2:1b:b7:21:19:e2:13:cc:8d: 3b:b1:19:d7:21:f2:15:0e:73:f0:52:c4:b0:6e:ad: 07:f3:97:cb:5e:5d:33:8a:3b:09:40:2f:a3:84:3e: cf:f4:22:58:97:87:0d:ab:34:76:78:1d:4a:b1:81: 0e:f5:58:9a:50:ce:11:b2:53:2c:f2:6d:ca:79:4a: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C8:52:7B:F3:0B:9B:5A:6B:EC:11:BB:2E:67:D3:5C:81:58:B8:9E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a8hSe_MLm1pr7BG7LmfTXIFYuJ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.212.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:8d:fb:c3:d0:78:4e:f5:44:a7:22:85:a8:1c:83:0d:8a:2f: 1a:ce:17:4e:a4:3e:21:9b:88:d2:1b:14:89:91:cb:60:1e:51: 03:3a:92:31:04:f5:d4:d0:5f:c5:94:54:2f:e2:c6:c4:b6:77: e1:27:ec:69:b7:83:23:68:a7:dc:73:8c:6c:34:de:d0:7c:32: e4:77:7e:0f:b5:ee:a2:8a:ff:b8:e4:f7:0b:9f:fe:44:ab:c6: e0:28:bd:75:fb:97:2c:c0:77:c2:d3:76:f3:d7:b0:2b:3d:f4: c4:1b:da:59:e9:e7:d9:b6:98:60:57:df:dc:c5:5d:b4:58:0a: 4e:dc:09:d4:00:c0:44:57:34:f4:07:c3:99:e7:94:23:d5:f0: f1:cc:fb:c3:11:83:8c:9c:01:86:ef:cd:4a:a2:42:c3:13:c6: de:22:ff:d8:ae:c5:7a:fc:bb:95:19:e6:e5:a0:f6:b9:d8:7a: d1:0d:43:dd:f5:0b:a1:d2:5e:fd:66:3e:9d:ec:05:a5:14:5b: d7:8e:13:4a:5a:79:54:d9:1c:4c:88:b8:08:81:5d:8f:5e:b9: c5:3b:a0:3e:c2:7a:18:c8:b5:52:84:e2:8b:0f:3a:50:a8:2e: d4:d8:ee:e7:97:0e:f5:38:69:0b:0b:44:c0:e3:a7:57:88:3e: fa:c3:42:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCQzg1MjdCRjMwQjlC NUE2QkVDMTFCQjJFNjdEMzVDODE1OEI4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Jg1/cFJRA/HwU+UNBWbtxi60GqobfNKoTT8yjj5XpWPqs2mN eT8lQEBo5LssF3VX9WhemmRosIqmEkE0+NT/IXsEh60WXWh7J6F8CU8Jzmz7hhDb EbAud5xY7G4IOOSDB9tItxXq9axhu5l3goVIPFW8UssSwCVMCxWS6vvpvbht6O7H YpbBiaBLSjEdc0z6yBy0VZ37BD1Lw69NgYktZvXakncVr/XWiZCJmyYEkGK7uKS+ 6BQdL6IbtyEZ4hPMjTuxGdch8hUOc/BSxLBurQfzl8teXTOKOwlAL6OEPs/0IliX hw2rNHZ4HUqxgQ71WJpQzhGyUyzybcp5SiUnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUa8hSe/MLm1pr7BG7LmfTXIFYuJ4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2E4aFNlX01MbTFwcjdCRzdM bWZUWElGWXVKNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PdQwDQYJKoZIhvcNAQELBQADggEBAIuN+8PQeE71RKcihagcgw2KLxrOF06kPiGb iNIbFImRy2AeUQM6kjEE9dTQX8WUVC/ixsS2d+En7Gm3gyNop9xzjGw03tB8MuR3 fg+17qKK/7jk9wuf/kSrxuAovXX7lyzAd8LTdvPXsCs99MQb2lnp59m2mGBX39zF XbRYCk7cCdQAwERXNPQHw5nnlCPV8PHM+8MRg4ycAYbvzUqiQsMTxt4i/9iuxXr8 u5UZ5uWg9rnYetENQ931C6HSXv1mPp3sBaUUW9eOE0paeVTZHEyIuAiBXY9eucU7 oD7CehjItVKE4osPOlCoLtTY7ueXDvU4aQsLRMDjp1eIPvrDQk4= -----END CERTIFICATE-----Generated at Thu Apr 17 20:56:16 2025 by rpki-client