$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rlQW84ZIIvWsl6-yyZeXWLTONds.roa File: rlQW84ZIIvWsl6-yyZeXWLTONds.roa (raw, json) Hash identifier: E3RTyKixG+1yWc1wVKwvQO7yP349lnvGhubdPYH7zzw= Subject key identifier: AE:54:16:F3:86:48:22:F5:AC:97:AF:B2:C9:97:97:58:B4:CE:35:DB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24B5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rlQW84ZIIvWsl6-yyZeXWLTONds.roa Signing time: Mon 10 Feb 2025 14:18:54 +0000 ROA not before: Mon 10 Feb 2025 14:18:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 114.198.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9397 (0x24b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AE5416F3864822F5AC97AFB2C9979758B4CE35DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:81:d9:de:e1:85:a6:c2:58:5e:e0:c6:df: 3a:e0:67:43:7b:3a:bc:45:b3:6f:2f:fc:e7:69:f5: 67:8b:fd:98:22:ba:97:21:a0:92:51:de:bf:8e:3b: c3:39:29:52:bf:bd:86:ff:9b:6d:e6:76:64:29:2a: d4:8a:82:11:2b:95:80:df:e3:d5:64:90:1c:4a:53: 37:ae:e6:72:f1:51:36:12:6d:32:74:16:03:aa:dd: 97:88:0f:81:a1:88:c1:30:ee:06:82:5d:43:aa:a4: d4:6f:8a:db:a3:ab:b6:5e:23:2c:2d:b4:78:2f:dd: 36:26:7c:f9:d0:47:e0:20:75:a1:95:b2:36:92:7f: f2:93:e6:b6:16:58:fb:c5:6e:6c:2c:b5:9a:1b:80: 4a:ce:09:57:3d:9b:37:10:07:76:d3:f5:fd:41:7c: 28:1f:67:50:3f:7f:f0:c9:94:c7:a8:5c:1d:a9:84: 37:10:28:f8:50:ba:1b:33:73:e7:40:0b:fb:48:99: 07:22:05:6f:6f:30:1e:9c:3c:b1:a3:e9:aa:98:35: 06:2a:8c:59:13:b2:cb:26:b3:2d:dd:11:ba:6b:23: cb:70:a3:3d:4b:77:35:49:f0:56:82:f2:7b:d6:89: fe:b7:53:c9:97:36:4e:dd:37:de:4b:54:59:a8:8a: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:54:16:F3:86:48:22:F5:AC:97:AF:B2:C9:97:97:58:B4:CE:35:DB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rlQW84ZIIvWsl6-yyZeXWLTONds.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.165.0/24 Signature Algorithm: sha256WithRSAEncryption 86:66:e9:e1:46:69:1c:6a:04:a8:4f:fa:e5:e8:a1:77:e3:66: 6d:4f:8f:41:7d:57:25:bd:6e:0f:e2:e2:d4:eb:1a:ea:3a:09: a4:6c:9d:e5:8b:67:62:b3:3e:34:88:9d:5f:0d:bb:51:52:cd: a1:98:37:92:bc:37:23:15:cb:2b:3a:fc:61:78:79:29:51:2a: cd:76:56:89:08:ed:2a:a0:25:a7:8d:a2:4d:a6:09:47:84:7f: 13:f3:ff:3b:e4:4e:87:c8:c2:1b:cf:62:21:c8:ac:ce:7a:8b: f5:97:75:eb:77:e9:d1:1c:d3:ce:c4:31:86:ed:bd:6c:fe:fa: b8:f8:87:c5:e3:94:cb:b3:4a:57:b5:2d:3a:fb:f4:83:58:a8: c6:3c:1f:18:1c:2d:36:25:c6:5e:77:4f:5e:ac:0a:85:9d:11: 07:c0:ff:58:1b:8c:c9:28:04:b4:8c:59:46:9c:3a:7a:af:57: 8d:eb:94:4d:71:99:6e:f2:6d:8c:14:80:5d:c7:08:da:a0:78: 7f:2f:16:13:c1:01:ca:52:06:f7:30:c3:e5:b5:65:0f:be:80: 82:94:fd:5d:b1:d5:e2:6a:29:70:50:22:85:bd:fc:e1:f9:01: d2:c8:63:2d:02:5d:72:e9:f1:92:75:88:d4:9c:7a:a3:60:98: 40:ba:30:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFNTQxNkYzODY0ODIy RjVBQzk3QUZCMkM5OTc5NzU4QjRDRTM1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi84HZ3uGFpsJYXuDG3zrgZ0N7OrxFs28v/Odp9WeL/Zgiupch oJJR3r+OO8M5KVK/vYb/m23mdmQpKtSKghErlYDf49VkkBxKUzeu5nLxUTYSbTJ0 FgOq3ZeID4GhiMEw7gaCXUOqpNRvitujq7ZeIywttHgv3TYmfPnQR+AgdaGVsjaS f/KT5rYWWPvFbmwstZobgErOCVc9mzcQB3bT9f1BfCgfZ1A/f/DJlMeoXB2phDcQ KPhQuhszc+dAC/tImQciBW9vMB6cPLGj6aqYNQYqjFkTsssmsy3dEbprI8twoz1L dzVJ8FaC8nvWif63U8mXNk7dN95LVFmoiqO3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrlQW84ZIIvWsl6+yyZeXWLTONdswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3JsUVc4NFpJSXZXc2w2LXl5 WmVYV0xUT05kcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABy xqUwDQYJKoZIhvcNAQELBQADggEBAIZm6eFGaRxqBKhP+uXooXfjZm1Pj0F9VyW9 bg/i4tTrGuo6CaRsneWLZ2KzPjSInV8Nu1FSzaGYN5K8NyMVyys6/GF4eSlRKs12 VokI7SqgJaeNok2mCUeEfxPz/zvkTofIwhvPYiHIrM56i/WXdet36dEc087EMYbt vWz++rj4h8XjlMuzSle1LTr79INYqMY8HxgcLTYlxl53T16sCoWdEQfA/1gbjMko BLSMWUacOnqvV43rlE1xmW7ybYwUgF3HCNqgeH8vFhPBAcpSBvcww+W1ZQ++gIKU /V2x1eJqKXBQIoW9/OH5AdLIYy0CXXLp8ZJ1iNSceqNgmEC6ME4= -----END CERTIFICATE-----Generated at Thu Apr 17 20:58:07 2025 by rpki-client