$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lAuk4okbB8cmAd77xx29IxaPu8A.roa File: lAuk4okbB8cmAd77xx29IxaPu8A.roa (raw, json) Hash identifier: xae8q3XrxtlkHfJEmvzu11KDEqJfm4Hkm1XOVVq5fD4= Subject key identifier: 94:0B:A4:E2:89:1B:07:C7:26:01:DE:FB:C7:1D:BD:23:16:8F:BB:C0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 248D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lAuk4okbB8cmAd77xx29IxaPu8A.roa Signing time: Mon 10 Feb 2025 14:18:45 +0000 ROA not before: Mon 10 Feb 2025 14:18:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 122.100.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9357 (0x248d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=940BA4E2891B07C72601DEFBC71DBD23168FBBC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:de:d1:9e:06:e9:bf:b2:ba:0d:18:da:5e: 9e:79:41:ab:8c:e2:4e:a9:65:db:57:7f:f2:a8:56: a6:0e:87:8e:b4:94:bf:92:e1:4b:ac:a2:90:18:49: 09:8a:7b:29:e6:3b:e8:fb:f4:7c:b6:f3:9c:e7:19: d0:95:ae:02:11:c6:88:05:d8:14:a7:e9:f9:b2:61: db:a6:ac:a4:b9:2b:70:6b:29:70:a7:aa:a5:93:71: 32:b7:8c:db:2e:89:ed:47:ae:ae:72:68:ca:e7:be: c1:62:4d:8f:15:0a:8c:a7:fe:35:8b:2b:42:93:be: a2:be:e8:1b:4c:11:5d:26:f9:1f:e3:0e:f4:bd:19: 35:e4:75:bb:43:7c:eb:3f:c6:a4:94:93:ba:dd:2e: 09:c4:e4:f0:83:26:7f:e5:34:8f:6d:ce:3e:b5:34: 15:67:d1:79:59:f8:08:97:55:aa:bc:4b:50:8f:a5: 24:c6:85:5a:f8:00:26:87:a5:05:e4:57:dc:0b:de: 18:96:8d:fe:78:cc:55:ac:e0:b7:b0:41:e8:c3:92: 95:03:16:e5:bd:a7:9a:8b:dc:bf:87:a6:22:95:59: 67:1d:ac:9d:fe:23:c3:7a:41:18:ea:89:94:30:3e: b0:e8:68:71:3d:8e:09:a8:b2:d8:b9:43:35:d6:f0: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0B:A4:E2:89:1B:07:C7:26:01:DE:FB:C7:1D:BD:23:16:8F:BB:C0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lAuk4okbB8cmAd77xx29IxaPu8A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.120.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:49:bf:1b:d5:e8:bf:5a:cc:b5:3f:45:8b:54:83:3d:1a:c5: 5e:21:13:73:9a:1c:d4:75:79:01:57:3e:e7:a3:aa:8c:38:4e: fe:6c:9e:4c:e6:e2:33:63:21:3a:bf:4d:72:7d:ab:e1:38:23: a9:70:e1:0d:02:16:fd:e0:73:83:8b:4a:6b:8f:57:de:dc:88: 50:bf:07:93:b0:4a:5a:94:cf:d3:4d:3a:cb:88:00:ff:81:ee: 78:45:93:9b:f4:4e:09:29:b1:9c:4d:a4:23:e1:8a:3a:dc:da: 41:95:41:6b:ba:8d:43:76:5a:d4:2a:e1:4b:98:12:d9:f0:87: 3b:a1:f9:4f:15:13:37:87:f1:9f:d4:60:7b:b5:a7:d5:fb:b6: 2b:9c:c3:d4:ff:18:4e:5e:25:3e:fe:0e:bc:ba:53:ca:d5:64: ff:bc:41:17:4d:7c:e0:7d:43:eb:3b:b6:93:1f:93:de:da:a2: 29:19:9b:3a:93:e6:7f:62:5a:3b:c5:5b:95:61:dc:93:59:8a: 1a:52:76:83:34:cf:41:25:51:9a:12:90:00:97:d1:86:67:3b: bb:92:98:35:a0:d7:1e:3f:d5:07:5a:43:d9:5f:45:18:69:20: d8:4e:f0:7f:82:b0:c9:97:b9:07:95:7b:d9:1c:aa:2d:fd:71: 23:cd:13:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0MEJBNEUyODkxQjA3 QzcyNjAxREVGQkM3MURCRDIzMTY4RkJCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrt97Rngbpv7K6DRjaXp55QauM4k6pZdtXf/KoVqYOh460lL+S 4UusopAYSQmKeynmO+j79Hy285znGdCVrgIRxogF2BSn6fmyYdumrKS5K3BrKXCn qqWTcTK3jNsuie1Hrq5yaMrnvsFiTY8VCoyn/jWLK0KTvqK+6BtMEV0m+R/jDvS9 GTXkdbtDfOs/xqSUk7rdLgnE5PCDJn/lNI9tzj61NBVn0XlZ+AiXVaq8S1CPpSTG hVr4ACaHpQXkV9wL3hiWjf54zFWs4LewQejDkpUDFuW9p5qL3L+HpiKVWWcdrJ3+ I8N6QRjqiZQwPrDoaHE9jgmosti5QzXW8Cq5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlAuk4okbB8cmAd77xx29IxaPu8AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xBdWs0b2tiQjhjbUFkNzd4 eDI5SXhhUHU4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6 ZHgwDQYJKoZIhvcNAQELBQADggEBAJtJvxvV6L9azLU/RYtUgz0axV4hE3OaHNR1 eQFXPuejqow4Tv5snkzm4jNjITq/TXJ9q+E4I6lw4Q0CFv3gc4OLSmuPV97ciFC/ B5OwSlqUz9NNOsuIAP+B7nhFk5v0TgkpsZxNpCPhijrc2kGVQWu6jUN2WtQq4UuY Etnwhzuh+U8VEzeH8Z/UYHu1p9X7tiucw9T/GE5eJT7+Dry6U8rVZP+8QRdNfOB9 Q+s7tpMfk97aoikZmzqT5n9iWjvFW5Vh3JNZihpSdoM0z0ElUZoSkACX0YZnO7uS mDWg1x4/1QdaQ9lfRRhpINhO8H+CsMmXuQeVe9kcqi39cSPNEwc= -----END CERTIFICATE-----Generated at Thu Apr 17 21:07:08 2025 by rpki-client