$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/agGamLHQvlJWL96LYzISLFGMxwQ.roa File: agGamLHQvlJWL96LYzISLFGMxwQ.roa (raw, json) Hash identifier: 0zO6/vHbHAeBC/d4rCRa/1l4CFwh8svxygLtKGmcVJ0= Subject key identifier: 6A:01:9A:98:B1:D0:BE:52:56:2F:DE:8B:63:32:12:2C:51:8C:C7:04 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24A2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/agGamLHQvlJWL96LYzISLFGMxwQ.roa Signing time: Mon 10 Feb 2025 14:18:50 +0000 ROA not before: Mon 10 Feb 2025 14:18:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.58.112.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9378 (0x24a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6A019A98B1D0BE52562FDE8B6332122C518CC704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:42:35:44:9b:08:90:e8:ad:d8:c5:6c:75: 2b:7a:bc:f3:dd:2f:ef:2f:05:6d:b8:57:9e:3d:24: a6:2e:63:42:32:d7:b1:34:7f:09:af:e3:66:26:fb: c9:c9:bd:9b:d5:70:26:c4:07:50:62:f6:a7:28:6f: 31:34:a8:65:ed:b1:58:bb:57:f1:d6:ec:9d:49:5d: 87:fb:8c:c7:dd:54:29:fc:d2:eb:69:5d:b6:f9:be: 32:b9:49:bc:2a:e2:ef:c2:de:f9:1a:17:13:eb:0d: f6:71:6a:59:02:b0:a4:28:6a:b2:bf:a6:b4:73:34: f3:8f:6a:54:7a:8f:08:ac:1c:74:ba:56:67:da:c9: 8e:1c:64:8e:5d:d7:47:49:22:d5:06:fe:e8:b4:46: e5:ef:4e:7b:60:da:d3:3a:35:66:d6:bf:c3:00:0c: 20:f7:fc:a1:fa:a3:52:61:c0:25:d4:8b:5c:a7:bc: dd:3b:59:e8:d2:8e:5e:ea:c0:71:33:81:3d:cc:3e: 0c:2c:1a:49:4f:25:f4:95:d6:7e:26:4b:d9:11:d6: 6a:a8:85:de:50:2b:0a:5b:c9:fa:62:92:4a:9a:83: 88:e2:0b:a1:25:54:81:e5:de:7b:fc:27:b0:02:5c: 60:c5:ba:5e:77:39:2a:d1:50:ef:fb:b1:5a:10:23: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:01:9A:98:B1:D0:BE:52:56:2F:DE:8B:63:32:12:2C:51:8C:C7:04 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/agGamLHQvlJWL96LYzISLFGMxwQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.112.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:c6:b0:7e:cc:a1:fa:0e:a0:e4:1e:7d:ec:fa:b4:b7:c2:bd: 87:1d:c9:47:87:bf:05:db:ad:90:82:87:4e:0e:c3:0a:05:f2: 8e:41:06:99:9a:1e:08:a2:e8:79:2b:87:98:a5:2a:0f:49:73: 81:5f:6f:a1:0e:63:d1:c5:9a:03:99:35:b5:47:ea:ce:63:9e: 6b:05:22:00:42:16:35:a1:e5:99:c6:20:c5:ce:bb:26:c8:50: 33:f5:c9:d7:d8:93:e5:8d:ae:0c:8d:44:a6:8d:f4:9e:f5:2d: d8:66:13:13:07:77:0e:cf:41:bb:3c:69:34:43:94:27:bf:85: aa:01:98:b9:20:f9:ae:57:82:60:ac:73:84:0d:69:37:97:bc: 96:cf:67:18:9a:70:39:c4:f0:11:30:e7:62:53:4e:9d:e0:a1: b6:8c:1b:c7:09:79:5d:26:76:d1:79:d1:8e:b5:cc:de:a0:81: df:13:86:53:bf:8c:34:39:2a:2c:70:5c:99:92:0e:5b:12:11: 4f:97:dc:9a:12:76:8f:04:dc:5a:ed:a0:d6:23:95:d8:8b:17: e7:db:6f:fe:e3:b0:71:72:5d:c3:4e:1c:70:d1:18:37:ff:8c: 32:a0:ed:b8:4d:9d:dc:bc:6a:0c:82:21:92:e2:01:4c:c8:b3: 55:e8:86:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZBMDE5QTk4QjFEMEJF NTI1NjJGREU4QjYzMzIxMjJDNTE4Q0M3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCra0I1RJsIkOit2MVsdSt6vPPdL+8vBW24V549JKYuY0Iy17E0 fwmv42Ym+8nJvZvVcCbEB1Bi9qcobzE0qGXtsVi7V/HW7J1JXYf7jMfdVCn80utp Xbb5vjK5Sbwq4u/C3vkaFxPrDfZxalkCsKQoarK/prRzNPOPalR6jwisHHS6Vmfa yY4cZI5d10dJItUG/ui0RuXvTntg2tM6NWbWv8MADCD3/KH6o1JhwCXUi1ynvN07 WejSjl7qwHEzgT3MPgwsGklPJfSV1n4mS9kR1mqohd5QKwpbyfpikkqag4jiC6El VIHl3nv8J7ACXGDFul53OSrRUO/7sVoQI8bzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUagGamLHQvlJWL96LYzISLFGMxwQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2FnR2FtTEhRdmxKV0w5NkxZ eklTTEZHTXh3US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OnAwDQYJKoZIhvcNAQELBQADggEBABrGsH7MofoOoOQefez6tLfCvYcdyUeHvwXb rZCCh04OwwoF8o5BBpmaHgii6Hkrh5ilKg9Jc4Ffb6EOY9HFmgOZNbVH6s5jnmsF IgBCFjWh5ZnGIMXOuybIUDP1ydfYk+WNrgyNRKaN9J71LdhmExMHdw7PQbs8aTRD lCe/haoBmLkg+a5XgmCsc4QNaTeXvJbPZxiacDnE8BEw52JTTp3gobaMG8cJeV0m dtF50Y61zN6ggd8ThlO/jDQ5KixwXJmSDlsSEU+X3JoSdo8E3FrtoNYjldiLF+fb b/7jsHFyXcNOHHDRGDf/jDKg7bhNndy8agyCIZLiAUzIs1XohuM= -----END CERTIFICATE-----Generated at Thu Apr 17 21:07:13 2025 by rpki-client