$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m8NpkXzhiu1dr5lUIKjYnveZgqM.roa File: m8NpkXzhiu1dr5lUIKjYnveZgqM.roa (raw, json) Hash identifier: Ll2zni8vanTGSbG+bM4wNU2zquJyyTrrazWtDhHXzK0= Subject key identifier: 9B:C3:69:91:7C:E1:8A:ED:5D:AF:99:54:20:A8:D8:9E:F7:99:82:A3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2478 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m8NpkXzhiu1dr5lUIKjYnveZgqM.roa Signing time: Mon 10 Feb 2025 14:18:40 +0000 ROA not before: Mon 10 Feb 2025 14:18:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 122.254.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9336 (0x2478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9BC369917CE18AED5DAF995420A8D89EF79982A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:61:21:d3:cf:43:03:30:91:72:ce:e4:93:d5: 4b:8d:d9:c5:06:a4:1f:44:46:eb:df:d3:33:60:38: 2e:c2:b5:a9:72:b0:eb:92:2e:9d:75:2c:82:51:3d: dd:86:e3:3b:39:16:b7:e6:59:e7:bb:bf:67:e9:df: cd:af:de:4d:7a:63:94:b5:fa:8e:ae:91:03:ca:64: 34:7c:59:0d:96:c2:7c:fd:5a:b7:c8:b9:9c:f1:9a: ed:2c:4c:e2:42:e9:5c:95:23:cf:06:3c:48:bc:5f: c5:0e:7a:79:84:c1:66:d6:ec:c3:7b:34:5d:c0:12: bc:34:a2:8e:84:8d:3b:07:09:d2:ab:dd:e7:0f:79: e8:aa:81:7d:1f:cb:f0:76:8f:b3:6e:c1:d1:f5:c1: bc:42:33:0b:03:14:bb:b9:f8:f7:f1:6a:44:51:cb: 1f:dd:67:47:85:ea:07:51:43:3e:11:e8:7d:50:32: 6b:3c:ae:90:9a:ef:b4:b8:8c:ae:bf:d1:c0:b3:f1: 63:d9:57:b7:ab:b7:d7:00:2e:e1:fa:ed:c9:14:5c: 18:13:a1:c2:8c:20:50:4b:a6:a4:12:f5:51:99:46: 2d:c3:4d:80:18:de:bd:c5:a7:58:1d:9e:f6:86:d7: 65:d4:c2:f6:9d:0a:2d:89:59:b3:34:bc:a1:2e:ad: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C3:69:91:7C:E1:8A:ED:5D:AF:99:54:20:A8:D8:9E:F7:99:82:A3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m8NpkXzhiu1dr5lUIKjYnveZgqM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.0.0/21 Signature Algorithm: sha256WithRSAEncryption 74:67:80:37:38:28:b2:20:ee:69:6b:4c:67:54:13:59:f5:ac: bb:53:c6:4d:2a:6a:e7:79:77:59:b7:12:e7:4c:7e:61:44:c8: 23:04:48:21:67:0d:b5:51:6a:58:26:cb:7f:65:2c:df:ca:31: e7:65:d2:0a:f8:75:af:a2:43:b7:73:aa:d1:e5:99:de:af:ad: 01:a4:79:e0:c2:27:74:8e:4e:c7:fb:e7:75:71:66:aa:79:68: 42:c5:db:f5:6b:42:53:e6:7f:d0:43:ad:9c:62:8d:68:ad:e8: 05:30:16:7b:b1:8b:f7:a4:6f:2b:16:24:b8:0c:ad:bc:b3:b4: a0:f2:20:be:40:5f:6c:c5:c4:f2:1a:da:b6:fa:c6:4a:f3:5d: 28:bf:7c:ae:05:67:0c:76:81:85:d7:77:43:c1:f4:2c:de:0a: d2:9c:0c:dd:3d:ed:9c:64:e2:2d:87:bd:34:3f:eb:2c:84:bf: 41:e8:a1:d6:3f:d2:6f:34:91:77:49:a2:e0:39:ad:2b:4a:11: a7:cf:88:85:f0:c8:e2:85:41:37:40:fd:32:40:57:22:0a:b2: bc:3f:f1:ac:12:19:25:39:9e:8e:c0:76:e2:ca:14:85:8f:12: 5c:14:91:9c:0d:f6:f3:9b:bd:a4:69:1d:9e:56:84:9a:6b:31: f0:f1:f8:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCQzM2OTkxN0NFMThB RUQ1REFGOTk1NDIwQThEODlFRjc5OTgyQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2YSHTz0MDMJFyzuST1UuN2cUGpB9ERuvf0zNgOC7CtalysOuS Lp11LIJRPd2G4zs5FrfmWee7v2fp382v3k16Y5S1+o6ukQPKZDR8WQ2Wwnz9WrfI uZzxmu0sTOJC6VyVI88GPEi8X8UOenmEwWbW7MN7NF3AErw0oo6EjTsHCdKr3ecP eeiqgX0fy/B2j7NuwdH1wbxCMwsDFLu5+PfxakRRyx/dZ0eF6gdRQz4R6H1QMms8 rpCa77S4jK6/0cCz8WPZV7ert9cALuH67ckUXBgTocKMIFBLpqQS9VGZRi3DTYAY 3r3Fp1gdnvaG12XUwvadCi2JWbM0vKEurRxXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUm8NpkXzhiu1dr5lUIKjYnveZgqMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL204TnBrWHpoaXUxZHI1bFVJ S2pZbnZlWmdxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /gAwDQYJKoZIhvcNAQELBQADggEBAHRngDc4KLIg7mlrTGdUE1n1rLtTxk0qaud5 d1m3EudMfmFEyCMESCFnDbVRalgmy39lLN/KMedl0gr4da+iQ7dzqtHlmd6vrQGk eeDCJ3SOTsf753VxZqp5aELF2/VrQlPmf9BDrZxijWit6AUwFnuxi/ekbysWJLgM rbyztKDyIL5AX2zFxPIa2rb6xkrzXSi/fK4FZwx2gYXXd0PB9CzeCtKcDN097Zxk 4i2HvTQ/6yyEv0HoodY/0m80kXdJouA5rStKEafPiIXwyOKFQTdA/TJAVyIKsrw/ 8awSGSU5no7AduLKFIWPElwUkZwN9vObvaRpHZ5WhJprMfDx+KY= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:15 2025 by rpki-client