$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sA6atVQy2d2VHHlrU-VluiRL8nQ.roa File: sA6atVQy2d2VHHlrU-VluiRL8nQ.roa (raw, json) Hash identifier: 0S/KGuv+R+K3dp12DiBOt+z4vPGI4A50CvZtjh0G/M8= Subject key identifier: B0:0E:9A:B5:54:32:D9:DD:95:1C:79:6B:53:E5:65:BA:24:4B:F2:74 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23BA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sA6atVQy2d2VHHlrU-VluiRL8nQ.roa Signing time: Mon 10 Feb 2025 14:17:52 +0000 ROA not before: Mon 10 Feb 2025 14:17:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 61.64.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9146 (0x23ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B00E9AB55432D9DD951C796B53E565BA244BF274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:1c:e8:89:2e:94:83:fa:12:3a:44:2c:01: 58:b0:8a:f9:c9:a5:28:ea:6c:d6:42:0a:c3:49:07: e6:bf:18:ed:3b:a6:67:b3:58:7b:11:d2:fc:30:cf: f5:4b:51:fe:8d:b7:a5:11:83:c7:7d:7d:ff:98:e6: fe:fe:d5:0c:f1:25:fe:3f:a8:6e:93:5c:22:ef:76: 82:45:ea:84:4c:16:c8:cb:60:6c:ab:f1:80:7c:1d: b0:cf:6f:67:cb:1e:24:5e:29:ea:60:3b:af:35:0f: e0:2f:9d:33:7c:f1:f0:25:59:4e:1d:c0:eb:20:b9: 68:a3:98:a5:99:dc:84:ff:02:27:c6:39:d4:b8:1e: ec:ad:6f:45:65:a7:af:19:5f:f9:4c:60:7f:81:45: cc:3a:43:10:91:6b:63:12:44:8b:63:0c:20:14:57: 7c:28:ec:fa:6e:4a:63:8f:2c:d8:b6:50:50:d1:a7: 27:68:d3:82:13:05:bf:02:66:f5:e9:e9:ba:b2:90: 85:d1:0f:a5:b2:0b:8c:2b:06:1f:50:44:13:da:8a: 1c:c0:6b:e1:55:9a:79:1e:0f:fc:ec:c4:5b:52:fb: 13:64:38:9f:3c:1b:ab:fb:fb:88:fa:d5:0c:53:05: d4:8a:71:36:18:da:42:cf:f6:78:aa:9e:46:cc:9f: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0E:9A:B5:54:32:D9:DD:95:1C:79:6B:53:E5:65:BA:24:4B:F2:74 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sA6atVQy2d2VHHlrU-VluiRL8nQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.0.0/19 Signature Algorithm: sha256WithRSAEncryption 07:63:ca:0f:01:1a:12:d2:4b:6d:6b:2e:0f:7c:e9:04:a6:15: 0a:66:80:0e:77:47:14:0c:04:19:93:f3:d1:9c:c2:98:41:6e: 7b:c1:12:af:5b:f7:14:88:7c:2d:81:7d:b5:51:16:0d:dc:98: 48:30:ec:a3:e7:61:24:04:9b:cc:3d:1c:b8:48:5b:32:ad:59: d3:ac:df:b0:28:d5:70:f9:29:19:9b:63:7c:10:f3:0d:71:99: e6:ba:f7:43:77:0b:f1:ef:fb:c2:89:79:c6:a6:ec:c2:49:96: 89:ca:8a:74:ca:85:a5:01:65:76:b9:6e:e4:4c:56:d4:16:09: a4:6d:47:77:ae:d1:e7:24:19:b5:8f:11:ac:99:d6:69:f1:8c: d3:e2:94:7a:7b:f9:6c:29:b6:75:c8:ec:21:f3:a7:fd:86:d4: 3f:14:91:e2:09:d7:04:e8:1c:36:27:c6:38:b7:d0:6b:79:9e: 94:2e:60:27:7a:6b:5e:ba:cd:31:f7:fc:63:7b:17:c5:ab:6f: 72:82:a0:9a:52:b2:d6:5b:a7:0b:16:f3:d0:c7:8b:8f:a1:f0: 91:e1:25:c1:ea:97:77:b5:4f:6f:03:2e:ae:27:25:68:dd:35: 62:95:a1:9d:7d:26:9c:75:de:e8:d0:d0:d8:2f:0c:87:26:66: 02:79:7d:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIwMEU5QUI1NTQzMkQ5 REQ5NTFDNzk2QjUzRTU2NUJBMjQ0QkYyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbdxzoiS6Ug/oSOkQsAViwivnJpSjqbNZCCsNJB+a/GO07pmez WHsR0vwwz/VLUf6Nt6URg8d9ff+Y5v7+1QzxJf4/qG6TXCLvdoJF6oRMFsjLYGyr 8YB8HbDPb2fLHiReKepgO681D+AvnTN88fAlWU4dwOsguWijmKWZ3IT/AifGOdS4 Huytb0Vlp68ZX/lMYH+BRcw6QxCRa2MSRItjDCAUV3wo7PpuSmOPLNi2UFDRpydo 04ITBb8CZvXp6bqykIXRD6WyC4wrBh9QRBPaihzAa+FVmnkeD/zsxFtS+xNkOJ88 G6v7+4j61QxTBdSKcTYY2kLP9niqnkbMn0PlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsA6atVQy2d2VHHlrU+VluiRL8nQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NBNmF0VlF5MmQyVkhIbHJV LVZsdWlSTDhuUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 QAAwDQYJKoZIhvcNAQELBQADggEBAAdjyg8BGhLSS21rLg986QSmFQpmgA53RxQM BBmT89GcwphBbnvBEq9b9xSIfC2BfbVRFg3cmEgw7KPnYSQEm8w9HLhIWzKtWdOs 37Ao1XD5KRmbY3wQ8w1xmea690N3C/Hv+8KJecam7MJJlonKinTKhaUBZXa5buRM VtQWCaRtR3eu0eckGbWPEayZ1mnxjNPilHp7+WwptnXI7CHzp/2G1D8UkeIJ1wTo HDYnxji30Gt5npQuYCd6a166zTH3/GN7F8Wrb3KCoJpSstZbpwsW89DHi4+h8JHh JcHql3e1T28DLq4nJWjdNWKVoZ19Jpx13ujQ0NgvDIcmZgJ5fa0= -----END CERTIFICATE-----Generated at Fri Apr 18 16:45:08 2025 by rpki-client