$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dKgEKblN3CHZ8lyZcEib8S38UFs.roa File: dKgEKblN3CHZ8lyZcEib8S38UFs.roa (raw, json) Hash identifier: 6nWdVizpjI80K1JgJRTRCtVGiZX1vHqgg4IXOYF8qgU= Subject key identifier: 74:A8:04:29:B9:4D:DC:21:D9:F2:5C:99:70:48:9B:F1:2D:FC:50:5B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 238F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dKgEKblN3CHZ8lyZcEib8S38UFs.roa Signing time: Mon 10 Feb 2025 14:17:42 +0000 ROA not before: Mon 10 Feb 2025 14:17:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 61.58.96.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9103 (0x238f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=74A80429B94DDC21D9F25C9970489BF12DFC505B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:4d:9e:d5:34:df:32:ea:a9:e4:89:b7:20: 19:d7:4f:88:0c:33:b6:18:f9:96:93:6b:d7:2c:88: 6f:eb:8f:d9:9b:ff:6b:f3:3a:1e:6b:e1:73:10:a3: f5:04:ca:a2:b8:44:e3:90:39:87:10:6e:de:79:35: 19:29:38:92:9c:cf:87:82:b9:88:94:f0:63:ed:9a: 7c:fc:48:c7:d0:08:57:3d:51:70:b3:f2:87:ad:23: 25:25:59:59:fd:03:1c:61:a5:dc:c6:a4:05:81:d9: 7f:3a:61:77:27:51:9a:2c:9a:02:11:ad:da:fe:35: d0:90:64:7c:4d:a5:f0:4e:d6:2c:13:06:c1:83:a6: 56:58:06:4b:c7:05:64:ca:08:65:55:4a:f4:25:fc: 7a:2c:a8:e3:1b:bf:d4:a4:f2:a5:8e:64:fd:e8:80: 4a:2e:70:4c:77:69:71:27:44:c5:1a:30:eb:6d:c8: 8d:58:57:09:7b:84:dc:b3:f7:2a:67:3c:f8:a9:43: ba:c9:84:ff:ea:0e:eb:46:a7:75:fb:48:bf:d8:09: 2d:be:b4:06:48:f2:80:c9:35:c7:6e:1e:fc:fc:32: c7:78:24:75:71:81:ef:72:f3:ef:58:8d:0e:7f:0f: bd:60:94:37:5c:64:3b:42:56:0f:8f:f1:b4:b0:b8: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A8:04:29:B9:4D:DC:21:D9:F2:5C:99:70:48:9B:F1:2D:FC:50:5B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dKgEKblN3CHZ8lyZcEib8S38UFs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.96.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:3e:5f:3a:2e:d1:0d:70:98:67:2a:06:8c:15:6a:9d:58:39: 68:cb:45:52:8c:30:21:8e:e4:80:d2:df:99:1c:6f:e9:87:61: 2d:b5:02:0f:13:4a:30:9b:81:c0:1e:3e:8f:4e:40:1f:9a:75: 94:37:59:84:14:7e:71:5b:0d:4d:25:b9:a4:41:7e:34:5f:4e: b8:ad:7c:09:d0:cf:64:53:31:16:7f:ef:34:ca:ca:77:61:ea: 60:52:6d:fe:d1:f8:33:9c:65:3d:cd:a7:d5:bb:c7:37:07:42: 68:e5:31:36:53:ad:6a:1e:91:82:c0:db:d3:aa:e3:c7:4c:f7: e1:e8:02:83:7f:b1:7e:8d:4c:2c:49:91:ad:3f:66:bf:fb:13: d6:3a:e1:7a:c2:76:7d:d2:7f:1e:78:ee:3b:de:4d:0c:a5:fa: f6:e2:ca:03:36:a6:92:e2:a2:41:f6:56:c7:4e:83:18:b0:38: 59:3b:42:2d:67:50:89:49:8b:84:68:fe:a5:32:1c:d2:7e:d8: 1d:dd:aa:78:46:f9:ac:20:a3:30:b1:35:03:df:e8:ab:f6:1e: 9f:c4:76:12:15:bc:ca:46:81:e5:17:24:24:03:78:f1:df:81: 30:0f:cc:21:bf:66:7f:32:e3:a0:88:81:28:90:86:ca:07:69: 16:d3:ef:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0QTgwNDI5Qjk0RERD MjFEOUYyNUM5OTcwNDg5QkYxMkRGQzUwNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0mk2e1TTfMuqp5Im3IBnXT4gMM7YY+ZaTa9csiG/rj9mb/2vz Oh5r4XMQo/UEyqK4ROOQOYcQbt55NRkpOJKcz4eCuYiU8GPtmnz8SMfQCFc9UXCz 8oetIyUlWVn9AxxhpdzGpAWB2X86YXcnUZosmgIRrdr+NdCQZHxNpfBO1iwTBsGD plZYBkvHBWTKCGVVSvQl/HosqOMbv9Sk8qWOZP3ogEoucEx3aXEnRMUaMOttyI1Y Vwl7hNyz9ypnPPipQ7rJhP/qDutGp3X7SL/YCS2+tAZI8oDJNcduHvz8Msd4JHVx ge9y8+9YjQ5/D71glDdcZDtCVg+P8bSwuKxVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdKgEKblN3CHZ8lyZcEib8S38UFswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2RLZ0VLYmxOM0NIWjhseVpj RWliOFMzOFVGcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OmAwDQYJKoZIhvcNAQELBQADggEBAD4+Xzou0Q1wmGcqBowVap1YOWjLRVKMMCGO 5IDS35kcb+mHYS21Ag8TSjCbgcAePo9OQB+adZQ3WYQUfnFbDU0luaRBfjRfTrit fAnQz2RTMRZ/7zTKyndh6mBSbf7R+DOcZT3Np9W7xzcHQmjlMTZTrWoekYLA29Oq 48dM9+HoAoN/sX6NTCxJka0/Zr/7E9Y64XrCdn3Sfx547jveTQyl+vbiygM2ppLi okH2VsdOgxiwOFk7Qi1nUIlJi4Ro/qUyHNJ+2B3dqnhG+awgozCxNQPf6Kv2Hp/E dhIVvMpGgeUXJCQDePHfgTAPzCG/Zn8y46CIgSiQhsoHaRbT74w= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:07 2025 by rpki-client