$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mbCk6a0GdV12X8JyLh5--yrUujU.roa File: mbCk6a0GdV12X8JyLh5--yrUujU.roa (raw, json) Hash identifier: hNTnG47bRR4Po2UAoBULz42ZNHoIHSOTrhx4slnQZpA= Subject key identifier: 99:B0:A4:E9:AD:06:75:5D:76:5F:C2:72:2E:1E:7E:FB:2A:D4:BA:35 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24A3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mbCk6a0GdV12X8JyLh5--yrUujU.roa Signing time: Mon 10 Feb 2025 14:18:50 +0000 ROA not before: Mon 10 Feb 2025 14:18:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 61.56.160.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9379 (0x24a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99B0A4E9AD06755D765FC2722E1E7EFB2AD4BA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:4b:71:e4:74:41:e3:6c:4c:5e:42:32:54: 7b:f1:c5:cd:9a:14:05:bc:ba:fb:13:0b:d9:84:c1: c2:94:54:e5:ce:7c:4a:e9:36:fb:4e:23:6c:06:f3: 32:c1:25:d0:32:ed:9b:42:77:df:6e:59:a4:d9:39: 5e:b8:ed:4d:0c:77:57:d3:ca:4e:bf:e9:4e:be:65: 08:21:52:ad:6d:ec:55:e1:6e:2f:78:87:6a:da:6e: 2a:44:17:22:1f:65:79:80:88:10:35:12:5e:46:03: a3:26:89:a9:72:29:d8:4b:6e:e7:45:b8:c1:16:90: 35:65:47:16:71:14:f5:85:2e:75:16:89:f5:00:c2: d7:39:a7:b7:4f:89:dd:95:a5:0c:ff:a8:8c:09:38: c9:ee:c4:ed:8c:2e:1f:1e:78:e5:96:38:a0:94:78: 42:cb:23:4f:21:4a:b3:75:d1:a4:06:ff:12:81:25: 97:f0:57:a7:52:73:22:b6:03:68:fa:bb:f2:23:39: db:42:23:36:41:2d:82:00:dc:34:17:a8:8f:0f:69: 48:8e:8f:12:30:dd:12:af:81:0e:68:e5:15:5a:d3: 3a:de:8e:31:be:47:d4:76:7a:fb:4a:4d:7c:f2:2f: df:23:ac:49:f3:43:c2:46:50:46:8c:a3:12:11:5c: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B0:A4:E9:AD:06:75:5D:76:5F:C2:72:2E:1E:7E:FB:2A:D4:BA:35 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mbCk6a0GdV12X8JyLh5--yrUujU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.160.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:3e:1d:70:99:d5:6a:2d:81:8d:e3:3a:98:d0:e5:6e:8f:5b: aa:13:a1:71:eb:97:6c:c8:63:ef:7b:68:e2:35:d4:34:c5:cb: da:34:df:22:e1:b1:db:66:e5:38:b0:f9:d9:bd:e3:ce:d1:07: 07:20:da:f4:49:45:5e:0b:e1:c2:55:c9:b5:3b:28:c0:0b:a0: 5f:ef:3d:0e:c4:27:a3:96:29:dd:b4:18:f7:be:dd:93:20:7f: 11:fa:08:0a:2f:f9:62:cb:e2:9f:e9:38:04:87:29:6d:42:b6: 3e:54:c1:db:57:35:86:88:18:84:b9:1d:bb:55:5f:f5:5a:bf: d5:1d:1a:5c:00:5d:5c:2a:eb:83:9d:bf:3f:39:8d:73:04:61: 2b:a2:52:48:89:a5:0c:1a:dc:1d:b3:ec:f2:0f:f9:f2:3e:ec: 22:35:fa:ec:b5:13:82:8f:d1:01:8b:ce:01:fc:68:83:8a:e2: 21:d9:b4:f7:61:12:ec:f8:49:13:3f:ad:ca:13:89:db:3d:2a: af:f7:ac:40:f6:d5:8a:1e:75:58:2e:a5:1c:f7:1b:e8:55:29: d2:07:fd:a1:08:8c:e1:16:a4:d1:d3:fc:0c:7a:85:29:3e:80: 2d:ac:e1:66:31:f0:a7:d1:9e:5a:38:72:53:87:98:e9:51:38: dd:54:36:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5QjBBNEU5QUQwNjc1 NUQ3NjVGQzI3MjJFMUU3RUZCMkFENEJBMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC15Etx5HRB42xMXkIyVHvxxc2aFAW8uvsTC9mEwcKUVOXOfErp NvtOI2wG8zLBJdAy7ZtCd99uWaTZOV647U0Md1fTyk6/6U6+ZQghUq1t7FXhbi94 h2rabipEFyIfZXmAiBA1El5GA6MmialyKdhLbudFuMEWkDVlRxZxFPWFLnUWifUA wtc5p7dPid2VpQz/qIwJOMnuxO2MLh8eeOWWOKCUeELLI08hSrN10aQG/xKBJZfw V6dScyK2A2j6u/IjOdtCIzZBLYIA3DQXqI8PaUiOjxIw3RKvgQ5o5RVa0zrejjG+ R9R2evtKTXzyL98jrEnzQ8JGUEaMoxIRXPYNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmbCk6a0GdV12X8JyLh5++yrUujUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21iQ2s2YTBHZFYxMlg4SnlM aDUtLXlyVXVqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 OKAwDQYJKoZIhvcNAQELBQADggEBAJ8+HXCZ1WotgY3jOpjQ5W6PW6oToXHrl2zI Y+97aOI11DTFy9o03yLhsdtm5Tiw+dm9487RBwcg2vRJRV4L4cJVybU7KMALoF/v PQ7EJ6OWKd20GPe+3ZMgfxH6CAov+WLL4p/pOASHKW1Ctj5UwdtXNYaIGIS5HbtV X/Vav9UdGlwAXVwq64Odvz85jXMEYSuiUkiJpQwa3B2z7PIP+fI+7CI1+uy1E4KP 0QGLzgH8aIOK4iHZtPdhEuz4SRM/rcoTids9Kq/3rED21YoedVgupRz3G+hVKdIH /aEIjOEWpNHT/Ax6hSk+gC2s4WYx8KfRnlo4clOHmOlRON1UNqs= -----END CERTIFICATE-----Generated at Fri Apr 18 16:47:27 2025 by rpki-client