$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kFyoXMzQAMWoJuHOJ0SY5d5n7Go.roa File: kFyoXMzQAMWoJuHOJ0SY5d5n7Go.roa (raw, json) Hash identifier: c1xh2nqKLpb/Oz76fPg//1EB//BrgCupP/dADVCE/4g= Subject key identifier: 90:5C:A8:5C:CC:D0:00:C5:A8:26:E1:CE:27:44:98:E5:DE:67:EC:6A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24A9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kFyoXMzQAMWoJuHOJ0SY5d5n7Go.roa Signing time: Mon 10 Feb 2025 14:18:52 +0000 ROA not before: Mon 10 Feb 2025 14:18:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.100.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9385 (0x24a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=905CA85CCCD000C5A826E1CE274498E5DE67EC6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:da:b4:df:d8:3e:b3:b4:d7:c4:0d:26:69: 46:64:ca:e7:f2:83:8f:d6:a7:6e:f7:02:8e:69:f0: 53:26:02:58:ab:7e:df:ca:21:e6:2c:8a:2e:aa:8e: 1d:4c:cc:bc:82:5b:29:03:2b:4f:ae:79:17:87:e1: 5a:31:bb:a9:5b:64:cf:5d:32:86:15:46:df:49:e2: 22:e0:97:79:ec:81:1c:2d:87:82:47:1b:fe:7e:62: c5:79:cd:72:27:d6:34:70:13:44:05:31:e2:67:f6: 63:52:cf:62:d7:ac:06:bc:8e:00:f6:62:9a:55:13: 38:5c:a9:8e:3f:64:18:2e:5e:58:6a:fa:81:48:f1: 1c:1c:39:12:a3:01:eb:04:64:87:1c:b2:a9:90:b7: de:2f:97:3c:78:34:59:6e:f7:64:b8:b9:cf:cc:3c: f5:43:a5:93:0b:66:31:20:9a:c0:8d:ab:67:30:64: d8:0c:0f:fc:f4:81:28:63:00:e9:a9:c6:55:9b:41: 81:e5:b5:88:bc:77:d3:4a:ce:ff:31:ff:be:c5:d7: 44:d1:13:34:81:a2:78:a9:83:fb:da:e0:c3:d6:e9: 2a:5d:1c:f0:1e:76:79:44:d1:ad:5c:96:81:25:8f: 74:d6:cd:2c:1e:30:27:44:e6:da:10:ba:7b:d1:be: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5C:A8:5C:CC:D0:00:C5:A8:26:E1:CE:27:44:98:E5:DE:67:EC:6A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kFyoXMzQAMWoJuHOJ0SY5d5n7Go.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.126.0/23 Signature Algorithm: sha256WithRSAEncryption 61:b4:71:97:bc:fd:89:52:a7:2b:61:84:a5:64:21:a8:0d:25: a9:c9:c2:74:66:fe:96:0b:14:e3:d6:c8:95:07:cc:7f:2b:6f: 6e:05:fd:bb:e8:7a:5b:23:9d:a5:8e:fd:0f:e9:7d:3a:90:f0: 99:a6:65:36:84:df:d9:99:b7:23:d2:8b:af:e0:e2:c0:26:18: 9e:2d:b9:d0:e4:9e:c5:35:19:c2:09:77:4d:d9:aa:1b:40:f8: b2:f8:d7:10:04:80:c7:56:39:15:d8:45:c3:3d:09:1f:d4:63: ac:8e:f8:8c:6d:71:8e:4c:f7:76:45:62:e5:43:0d:a0:8b:38: 2b:60:77:c6:9a:ea:91:cf:c2:31:73:77:4c:e2:cb:82:f5:e0: 33:35:1c:20:54:ea:6e:17:1e:9a:2c:35:5d:a1:1a:2f:98:42: 3a:06:15:03:9f:95:29:58:ea:f6:55:c2:d7:99:dc:db:5f:a9: 5e:3d:49:14:89:31:49:c6:77:03:d2:b8:c4:0e:3b:f7:82:74: ef:cd:a2:63:38:a2:3a:e0:b7:80:6c:b0:2d:3f:06:6c:07:be: 27:eb:a1:61:23:ac:9d:29:be:78:9b:f5:63:dd:1e:9a:d1:4a: 4b:e3:ea:3f:81:ea:2e:d8:8a:5d:99:31:31:5e:42:d9:61:96: d7:c7:60:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwNUNBODVDQ0NEMDAw QzVBODI2RTFDRTI3NDQ5OEU1REU2N0VDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIk9q039g+s7TXxA0maUZkyufyg4/Wp273Ao5p8FMmAlirft/K IeYsii6qjh1MzLyCWykDK0+ueReH4Voxu6lbZM9dMoYVRt9J4iLgl3nsgRwth4JH G/5+YsV5zXIn1jRwE0QFMeJn9mNSz2LXrAa8jgD2YppVEzhcqY4/ZBguXlhq+oFI 8RwcORKjAesEZIccsqmQt94vlzx4NFlu92S4uc/MPPVDpZMLZjEgmsCNq2cwZNgM D/z0gShjAOmpxlWbQYHltYi8d9NKzv8x/77F10TREzSBonipg/va4MPW6SpdHPAe dnlE0a1cloElj3TWzSweMCdE5toQunvRvgDJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkFyoXMzQAMWoJuHOJ0SY5d5n7GowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tGeW9YTXpRQU1Xb0p1SE9K MFNZNWQ1bjdHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF6 ZH4wDQYJKoZIhvcNAQELBQADggEBAGG0cZe8/YlSpythhKVkIagNJanJwnRm/pYL FOPWyJUHzH8rb24F/bvoelsjnaWO/Q/pfTqQ8JmmZTaE39mZtyPSi6/g4sAmGJ4t udDknsU1GcIJd03ZqhtA+LL41xAEgMdWORXYRcM9CR/UY6yO+IxtcY5M93ZFYuVD DaCLOCtgd8aa6pHPwjFzd0ziy4L14DM1HCBU6m4XHposNV2hGi+YQjoGFQOflSlY 6vZVwteZ3NtfqV49SRSJMUnGdwPSuMQOO/eCdO/NomM4ojrgt4BssC0/BmwHvifr oWEjrJ0pvnib9WPdHprRSkvj6j+B6i7Yil2ZMTFeQtlhltfHYLI= -----END CERTIFICATE-----Generated at Thu Apr 17 21:00:12 2025 by rpki-client