$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pKxXsE8nB_TxL5hxtQBrFUDJtEo.roa File: pKxXsE8nB_TxL5hxtQBrFUDJtEo.roa (raw, json) Hash identifier: fBXmF2G4X6K0iU4rx4mWw6+YxpjMZDO1KYgi7ftL3N8= Subject key identifier: A4:AC:57:B0:4F:27:07:F4:F1:2F:98:71:B5:00:6B:15:40:C9:B4:4A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 244A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pKxXsE8nB_TxL5hxtQBrFUDJtEo.roa Signing time: Mon 10 Feb 2025 14:18:29 +0000 ROA not before: Mon 10 Feb 2025 14:18:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 123.0.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9290 (0x244a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A4AC57B04F2707F4F12F9871B5006B1540C9B44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:1d:fd:16:64:50:e4:57:86:3a:5d:5d:28: 92:ed:12:22:cc:ba:7b:9c:ee:49:e1:01:cc:af:1d: 4b:a6:1a:4f:73:16:15:c5:a7:ad:33:88:46:d6:f6: 39:28:e8:77:8d:a5:1a:51:a9:61:39:1f:61:19:82: ae:4c:68:8a:83:b0:81:98:1a:26:65:a2:7f:47:ac: cb:69:9b:f6:ab:a3:f2:b0:36:61:07:aa:7d:ef:5a: b2:e6:09:b9:55:f2:25:71:4f:2e:88:c4:1a:af:40: d7:15:43:a6:b3:e7:ed:64:ac:bc:4e:2b:81:f9:10: b3:34:7f:14:80:bc:25:b3:a5:c2:c0:2e:05:58:79: 15:c3:ea:24:2d:7f:b8:bc:69:1f:09:0c:08:dd:f0: f3:8c:24:85:a2:f5:0d:7c:a4:7c:b1:b2:e1:e5:e8: a2:c7:6b:e4:74:17:05:e2:cc:06:e6:a2:c6:0b:40: b1:37:5e:4d:31:26:b8:a6:5a:1e:a9:cb:55:50:63: 4d:9d:b3:57:47:0e:a1:70:ed:6c:ab:74:03:19:5e: 22:22:e5:ef:3d:44:fc:77:e5:62:19:0e:c6:e6:71: 25:73:30:20:64:a0:cf:da:22:9e:d4:09:61:8e:d5: 48:d0:2a:75:a8:f9:4b:ec:a1:86:b0:6d:a3:b8:e4: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AC:57:B0:4F:27:07:F4:F1:2F:98:71:B5:00:6B:15:40:C9:B4:4A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pKxXsE8nB_TxL5hxtQBrFUDJtEo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.40.0/23 Signature Algorithm: sha256WithRSAEncryption 25:87:0c:26:ec:34:a3:76:cc:fe:17:4e:4b:44:83:d6:77:13: a9:70:07:7a:e3:ec:5a:27:54:15:22:00:f9:20:ea:4b:3d:ac: 2e:16:3e:33:cb:dc:65:e7:16:56:4c:18:3d:3f:37:4c:09:c4: e9:0f:70:6d:e6:4d:43:cb:07:e7:81:25:67:8a:73:f8:ec:7e: fb:96:4a:26:26:a5:af:5c:35:e1:9d:97:20:58:dd:35:40:2d: 84:e7:9e:ec:01:c7:92:aa:6c:ff:af:6b:28:4f:9e:bf:eb:9b: 93:75:7e:56:63:88:b6:16:e4:06:fc:3c:60:fd:56:a5:56:6a: c6:15:ae:db:de:b6:a1:f9:4e:af:bc:22:30:0c:63:22:3d:cc: 61:58:ce:c4:83:10:ec:f3:5a:db:e0:5e:1e:71:5d:b6:5e:56: 22:a4:da:17:cd:ae:77:56:18:b2:56:df:28:9e:7b:b1:eb:12: 87:26:5a:97:27:38:bd:3f:17:1a:27:ed:d2:bc:12:2b:6e:30: 7f:3f:71:47:f5:7e:4b:39:81:56:c0:7d:87:14:16:d5:9d:84: 8d:c7:b8:07:91:87:9c:41:dc:70:f7:e9:04:05:61:ad:42:38: 90:94:0a:1d:9c:46:08:8a:6c:c2:a1:08:29:b1:ab:de:4e:bb: 68:ab:2f:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0QUM1N0IwNEYyNzA3 RjRGMTJGOTg3MUI1MDA2QjE1NDBDOUI0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfaR39FmRQ5FeGOl1dKJLtEiLMunuc7knhAcyvHUumGk9zFhXF p60ziEbW9jko6HeNpRpRqWE5H2EZgq5MaIqDsIGYGiZlon9HrMtpm/aro/KwNmEH qn3vWrLmCblV8iVxTy6IxBqvQNcVQ6az5+1krLxOK4H5ELM0fxSAvCWzpcLALgVY eRXD6iQtf7i8aR8JDAjd8POMJIWi9Q18pHyxsuHl6KLHa+R0FwXizAbmosYLQLE3 Xk0xJrimWh6py1VQY02ds1dHDqFw7WyrdAMZXiIi5e89RPx35WIZDsbmcSVzMCBk oM/aIp7UCWGO1UjQKnWo+UvsoYawbaO45PZ/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpKxXsE8nB/TxL5hxtQBrFUDJtEowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BLeFhzRThuQl9UeEw1aHh0 UUJyRlVESnRFby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 ACgwDQYJKoZIhvcNAQELBQADggEBACWHDCbsNKN2zP4XTktEg9Z3E6lwB3rj7Fon VBUiAPkg6ks9rC4WPjPL3GXnFlZMGD0/N0wJxOkPcG3mTUPLB+eBJWeKc/jsfvuW SiYmpa9cNeGdlyBY3TVALYTnnuwBx5KqbP+vayhPnr/rm5N1flZjiLYW5Ab8PGD9 VqVWasYVrtvetqH5Tq+8IjAMYyI9zGFYzsSDEOzzWtvgXh5xXbZeViKk2hfNrndW GLJW3yiee7HrEocmWpcnOL0/Fxon7dK8EituMH8/cUf1fks5gVbAfYcUFtWdhI3H uAeRh5xB3HD36QQFYa1COJCUCh2cRgiKbMKhCCmxq95Ou2irL0M= -----END CERTIFICATE-----Generated at Thu Apr 17 20:58:15 2025 by rpki-client