$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ri9RfPU1rX0nhTC8b9JVTZ5fqY8.roa File: ri9RfPU1rX0nhTC8b9JVTZ5fqY8.roa (raw, json) Hash identifier: 3PdFC7Ifm7zuIL9OTqRkQtcloYRjNFyBV0hzlXp7b8w= Subject key identifier: AE:2F:51:7C:F5:35:AD:7D:27:85:30:BC:6F:D2:55:4D:9E:5F:A9:8F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2354 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ri9RfPU1rX0nhTC8b9JVTZ5fqY8.roa Signing time: Mon 10 Feb 2025 14:17:28 +0000 ROA not before: Mon 10 Feb 2025 14:17:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 119.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9044 (0x2354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AE2F517CF535AD7D278530BC6FD2554D9E5FA98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cf:5b:78:d0:98:d9:5d:2f:d1:92:a8:b9:be: 4b:23:e8:6f:65:ee:96:9a:96:de:d6:b5:02:c0:7e: 6a:67:c8:e8:af:18:80:aa:2f:96:41:b4:df:22:61: f6:24:bc:66:f5:42:13:db:2e:e6:49:e4:04:21:70: 9c:24:bb:a8:4d:8e:da:06:77:16:79:28:e3:2b:3d: 95:48:67:37:5e:62:44:f1:63:b4:9e:28:e3:78:9e: 68:ba:ed:fa:f8:3d:fa:12:50:66:96:75:d0:0a:d4: b3:2c:a8:04:3c:1d:7b:47:11:35:23:48:c2:d8:e7: 41:00:0b:c0:d3:23:39:11:36:be:42:8a:30:9a:7d: 90:0f:cc:22:8c:4e:56:f6:e0:32:94:d4:b9:6c:02: a5:ec:78:70:3b:d6:d4:8d:0a:60:cb:07:4b:04:6e: 99:36:b3:61:b7:31:72:4a:fa:65:fc:05:40:1f:48: d7:3d:d9:9c:a1:a4:8b:12:b1:6e:c7:a5:03:29:83: 2b:d6:3f:05:18:3c:73:21:c5:f9:8b:67:44:c3:05: 5e:7d:8a:b4:ac:61:3c:52:b7:33:78:59:e3:4a:35: a9:37:6d:c7:1d:b2:1e:37:8e:ba:52:bb:31:4c:a3: b7:fc:25:eb:10:13:c9:21:e7:d3:35:7a:01:96:67: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2F:51:7C:F5:35:AD:7D:27:85:30:BC:6F:D2:55:4D:9E:5F:A9:8F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ri9RfPU1rX0nhTC8b9JVTZ5fqY8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 01:fa:88:75:a5:16:80:66:82:93:33:5f:67:bf:b9:7c:9a:37: 89:9c:27:0b:b5:e9:23:86:55:f1:70:56:88:ae:4c:fd:94:ae: bc:15:79:d1:87:ae:20:35:4f:7b:64:e2:c7:29:8f:38:4e:a4: 88:a7:72:4e:e3:b8:aa:d2:48:36:e5:9a:4a:28:ae:c1:0c:26: b5:5d:7e:47:14:b9:5b:3b:fb:fa:79:1f:e8:8d:50:28:00:9d: f9:50:c5:1e:70:12:20:ab:49:5b:85:35:79:dc:f5:fc:94:8a: 2a:ee:33:37:4b:68:35:f6:d0:81:73:1f:6f:53:22:ff:b5:2a: 01:63:5d:1d:02:ad:98:c6:6a:bf:56:10:48:76:1f:66:4f:98: 9d:57:17:de:6d:af:f5:30:71:2f:04:fe:6d:4f:4a:7a:39:d0: 4d:44:cb:bc:c7:d8:f0:29:67:07:e2:56:89:cd:38:03:c3:28: 76:20:ed:b4:3f:3c:e4:ff:05:1a:8b:95:75:26:14:1f:01:aa: c7:b2:52:bc:18:fa:85:b0:ac:9a:93:f1:ad:95:1c:1e:04:27: a9:26:68:35:47:37:09:f3:44:8d:ad:31:ad:6e:7f:30:d2:e7: a9:5d:03:98:6f:84:30:00:b1:45:6d:a0:9c:38:d3:46:43:93: 5f:cc:64:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFMkY1MTdDRjUzNUFE N0QyNzg1MzBCQzZGRDI1NTREOUU1RkE5OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhz1t40JjZXS/Rkqi5vksj6G9l7paalt7WtQLAfmpnyOivGICq L5ZBtN8iYfYkvGb1QhPbLuZJ5AQhcJwku6hNjtoGdxZ5KOMrPZVIZzdeYkTxY7Se KON4nmi67fr4PfoSUGaWddAK1LMsqAQ8HXtHETUjSMLY50EAC8DTIzkRNr5CijCa fZAPzCKMTlb24DKU1LlsAqXseHA71tSNCmDLB0sEbpk2s2G3MXJK+mX8BUAfSNc9 2ZyhpIsSsW7HpQMpgyvWPwUYPHMhxfmLZ0TDBV59irSsYTxStzN4WeNKNak3bccd sh43jrpSuzFMo7f8JesQE8kh59M1egGWZ5/ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUri9RfPU1rX0nhTC8b9JVTZ5fqY8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3JpOVJmUFUxclgwbmhUQzhi OUpWVFo1ZnFZOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 TYAwDQYJKoZIhvcNAQELBQADggEBAAH6iHWlFoBmgpMzX2e/uXyaN4mcJwu16SOG VfFwVoiuTP2UrrwVedGHriA1T3tk4scpjzhOpIinck7juKrSSDblmkoorsEMJrVd fkcUuVs7+/p5H+iNUCgAnflQxR5wEiCrSVuFNXnc9fyUiiruMzdLaDX20IFzH29T Iv+1KgFjXR0CrZjGar9WEEh2H2ZPmJ1XF95tr/UwcS8E/m1PSno50E1Ey7zH2PAp ZwfiVonNOAPDKHYg7bQ/POT/BRqLlXUmFB8BqseyUrwY+oWwrJqT8a2VHB4EJ6km aDVHNwnzRI2tMa1ufzDS56ldA5hvhDAAsUVtoJw400ZDk1/MZBk= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:35 2025 by rpki-client