$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fdrTydZFICsxK17srJR-_SEtCzU.roa File: fdrTydZFICsxK17srJR-_SEtCzU.roa (raw, json) Hash identifier: o17+VvOaQO6s8/T8taJOH7stnbKxkR8a4yPkbzP5oP8= Subject key identifier: 7D:DA:D3:C9:D6:45:20:2B:31:2B:5E:EC:AC:94:7E:FD:21:2D:0B:35 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2415 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fdrTydZFICsxK17srJR-_SEtCzU.roa Signing time: Mon 10 Feb 2025 14:18:15 +0000 ROA not before: Mon 10 Feb 2025 14:18:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 114.198.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9237 (0x2415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7DDAD3C9D645202B312B5EECAC947EFD212D0B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:63:cb:e6:f0:67:89:df:51:42:6b:5b:9e: 3b:c6:a1:8a:d9:c7:7d:cd:bb:fb:49:aa:ce:b9:be: 8e:01:c2:98:6e:5c:a6:9b:1f:e7:8d:b4:88:cc:75: 1e:f0:e5:de:86:09:4c:f2:96:6c:af:e8:41:10:16: 83:0a:99:16:20:9d:1b:f8:df:a1:cc:c0:18:01:ad: 65:0b:eb:c8:51:12:b6:f2:91:60:de:a7:b9:21:3b: 76:0a:81:f0:62:6b:1b:39:85:91:99:da:70:b1:98: c8:3b:15:7b:c8:e7:8f:ca:69:29:70:e4:cd:d3:b7: df:9d:e1:9c:40:bd:d9:23:23:12:63:06:54:d5:cb: 85:67:a9:68:17:81:9a:fd:36:0d:3e:93:6b:fd:97: dc:5b:29:a7:bf:66:9f:44:0f:db:48:14:a6:6c:e1: 2b:df:bf:dd:fa:e8:bb:a7:44:3d:ca:73:94:7b:4c: 90:40:83:5e:af:df:f7:d3:c2:f7:14:a4:a5:fd:69: ef:91:7d:be:1a:6a:bf:0a:4f:31:c4:d1:a2:3a:df: e7:94:20:2a:cd:9f:a8:c7:fc:f8:4d:90:b9:eb:7c: b8:6b:64:2e:87:73:da:c5:bf:83:b3:9e:1a:80:34: de:ea:5f:28:76:b8:c8:bb:d5:63:e2:60:5a:1a:10: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DA:D3:C9:D6:45:20:2B:31:2B:5E:EC:AC:94:7E:FD:21:2D:0B:35 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fdrTydZFICsxK17srJR-_SEtCzU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.160.0/20 Signature Algorithm: sha256WithRSAEncryption 13:f0:11:e0:61:c3:cc:e2:1c:43:be:62:f8:b1:a7:03:83:19: 0d:63:da:4a:ef:18:88:1e:ba:ff:58:07:64:f4:54:b3:0d:bc: 0d:41:21:68:06:ba:c7:aa:70:f5:6b:8a:79:2c:0f:a2:07:3e: 9a:63:ea:a3:0a:e4:ee:2b:62:e4:bc:a5:51:8f:b7:a0:8a:85: 67:34:18:2b:a8:c4:b2:cc:a6:94:d2:8f:e3:a7:06:a1:1a:40: 24:d1:76:10:29:cf:e4:4e:f3:3c:b1:e4:4f:50:8c:85:80:21: 72:38:ef:ae:cb:05:3e:52:cd:f7:85:1f:1c:94:82:a5:2c:9f: c8:62:a1:4a:13:1a:cd:e6:cf:a5:00:44:10:7c:65:4b:42:85: fe:38:ec:17:d7:55:31:7b:10:e7:b6:85:b3:d1:9d:db:81:ac: 7e:09:02:62:50:a4:e6:97:cc:28:73:dd:8a:40:7c:30:9c:1b: 5a:cf:24:a7:58:b4:3a:c8:fc:0d:b0:e6:63:f3:86:f8:62:27: b2:6e:94:76:55:f8:92:65:da:00:18:a2:41:76:30:3e:72:1d: 58:4b:5b:98:90:9b:5d:e7:fe:6c:ad:76:b6:1b:a4:5d:96:38: c6:33:9e:a3:4e:0f:95:46:58:d9:1b:ff:4c:95:71:70:d3:83: 2e:f7:ef:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdEREFEM0M5RDY0NTIw MkIzMTJCNUVFQ0FDOTQ3RUZEMjEyRDBCMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtJ2PL5vBnid9RQmtbnjvGoYrZx33Nu/tJqs65vo4BwphuXKab H+eNtIjMdR7w5d6GCUzylmyv6EEQFoMKmRYgnRv436HMwBgBrWUL68hRErbykWDe p7khO3YKgfBiaxs5hZGZ2nCxmMg7FXvI54/KaSlw5M3Tt9+d4ZxAvdkjIxJjBlTV y4VnqWgXgZr9Ng0+k2v9l9xbKae/Zp9ED9tIFKZs4Svfv9366LunRD3Kc5R7TJBA g16v3/fTwvcUpKX9ae+Rfb4aar8KTzHE0aI63+eUICrNn6jH/PhNkLnrfLhrZC6H c9rFv4OznhqANN7qXyh2uMi71WPiYFoaEM2VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfdrTydZFICsxK17srJR+/SEtCzUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZkclR5ZFpGSUNzeEsxN3Ny SlItX1NFdEN6VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xqAwDQYJKoZIhvcNAQELBQADggEBABPwEeBhw8ziHEO+YvixpwODGQ1j2krvGIge uv9YB2T0VLMNvA1BIWgGuseqcPVrinksD6IHPppj6qMK5O4rYuS8pVGPt6CKhWc0 GCuoxLLMppTSj+OnBqEaQCTRdhApz+RO8zyx5E9QjIWAIXI4767LBT5SzfeFHxyU gqUsn8hioUoTGs3mz6UARBB8ZUtChf447BfXVTF7EOe2hbPRnduBrH4JAmJQpOaX zChz3YpAfDCcG1rPJKdYtDrI/A2w5mPzhvhiJ7JulHZV+JJl2gAYokF2MD5yHVhL W5iQm13n/mytdrYbpF2WOMYznqNOD5VGWNkb/0yVcXDTgy7370g= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:17 2025 by rpki-client