$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWn0Ih4IBMaAwWxTBT0GuSUuOGc.roa File: sWn0Ih4IBMaAwWxTBT0GuSUuOGc.roa (raw, json) Hash identifier: ElUE8fKnzxsIZkhL+gDE+nXwV4QdpkPA1alrocs/mNI= Subject key identifier: B1:69:F4:22:1E:08:04:C6:80:C1:6C:53:05:3D:06:B9:25:2E:38:67 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23E2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWn0Ih4IBMaAwWxTBT0GuSUuOGc.roa Signing time: Mon 10 Feb 2025 14:18:02 +0000 ROA not before: Mon 10 Feb 2025 14:18:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 61.60.215.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9186 (0x23e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B169F4221E0804C680C16C53053D06B9252E3867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:57:49:d2:07:16:74:d3:c9:28:47:49:8e: 1c:42:ab:d0:d9:9e:c3:11:8d:23:02:e0:4b:41:fa: 02:93:88:fe:ff:47:1e:f8:3b:fe:1e:e4:64:ff:ac: f0:54:d0:1e:35:34:a5:d0:fb:d7:b3:20:d0:f8:e5: e1:09:0d:ba:f9:75:e5:b4:1d:25:0b:7f:37:b4:92: e6:92:81:95:5b:86:c9:3d:05:94:ab:68:ad:23:f8: db:7b:d8:02:c5:2e:2d:9b:69:0c:e4:de:b4:30:28: 4a:30:eb:2e:e8:40:64:30:3f:40:01:49:4a:5e:56: 42:c8:60:db:bf:06:ab:ff:e0:96:68:83:2d:cd:c2: 1c:eb:a2:9d:3d:00:53:4c:84:d1:34:8c:ca:15:ef: dc:c7:8e:d8:f0:32:5c:d0:ca:94:5d:7b:6b:68:7d: 4f:be:97:1c:33:ac:5f:d9:0c:2c:15:a4:75:1d:72: 3c:43:69:1f:0e:68:e2:97:10:c9:a1:6d:75:98:88: 0f:6f:0f:84:10:1c:cc:c6:69:45:8f:65:b7:7e:f4: da:89:a7:85:a7:42:8c:09:60:d9:46:8a:d5:8d:61: de:5d:df:1e:8e:50:21:4f:4e:8e:61:66:13:7f:d5: 5e:db:ee:30:3a:e7:b3:79:71:6e:6c:06:ef:41:1c: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:69:F4:22:1E:08:04:C6:80:C1:6C:53:05:3D:06:B9:25:2E:38:67 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWn0Ih4IBMaAwWxTBT0GuSUuOGc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.215.128/25 Signature Algorithm: sha256WithRSAEncryption 9f:21:e9:46:e3:33:a9:f0:51:a9:89:38:7f:58:59:8f:1d:37: 20:77:47:51:10:15:88:1e:4c:4f:7a:77:f2:be:51:32:8e:2d: 27:91:b0:45:e7:d2:28:33:4e:d2:17:28:ea:c6:7e:d0:a9:43: 2d:26:b9:ae:49:41:93:44:51:2d:90:2a:6e:41:14:12:e1:4c: 22:74:82:23:15:a7:ee:f4:76:be:2e:ea:66:c4:be:61:5f:3d: a7:7d:62:6c:bf:9c:73:1e:41:2f:31:fe:88:18:bb:87:88:93: 82:15:5d:4a:da:60:b0:b2:a2:e6:1f:03:24:b5:6f:d5:42:95: 3f:85:70:57:45:58:ce:31:59:03:23:bc:fd:2b:38:92:d0:f9: 0d:ed:42:f7:d4:7c:59:91:c6:cd:0a:b4:11:70:21:72:ed:c0: 13:f7:5c:92:ac:48:88:18:5a:45:ee:27:a6:75:55:44:56:9e: 63:d8:b8:8b:98:d3:b9:41:ed:49:9d:19:7e:d8:64:87:7b:1a: 50:d2:4f:f0:ec:fc:06:a1:60:50:5b:58:8f:d0:b5:18:8d:f1: a9:16:ae:27:80:99:a1:de:1e:1e:d5:82:8d:07:54:b9:cf:28: 68:e5:c5:b9:91:8a:99:ca:8f:3a:76:03:35:e5:87:a3:54:b1: a1:e2:83:bf -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICI+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxNjlGNDIyMUUwODA0 QzY4MEMxNkM1MzA1M0QwNkI5MjUyRTM4NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCiVdJ0gcWdNPJKEdJjhxCq9DZnsMRjSMC4EtB+gKTiP7/Rx74 O/4e5GT/rPBU0B41NKXQ+9ezIND45eEJDbr5deW0HSULfze0kuaSgZVbhsk9BZSr aK0j+Nt72ALFLi2baQzk3rQwKEow6y7oQGQwP0ABSUpeVkLIYNu/Bqv/4JZogy3N whzrop09AFNMhNE0jMoV79zHjtjwMlzQypRde2tofU++lxwzrF/ZDCwVpHUdcjxD aR8OaOKXEMmhbXWYiA9vD4QQHMzGaUWPZbd+9NqJp4WnQowJYNlGitWNYd5d3x6O UCFPTo5hZhN/1V7b7jA657N5cW5sBu9BHITdAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUsWn0Ih4IBMaAwWxTBT0GuSUuOGcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NXbjBJaDRJQk1hQXdXeFRC VDBHdVNVdU9HYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQc9 PNeAMA0GCSqGSIb3DQEBCwUAA4IBAQCfIelG4zOp8FGpiTh/WFmPHTcgd0dREBWI HkxPenfyvlEyji0nkbBF59IoM07SFyjqxn7QqUMtJrmuSUGTRFEtkCpuQRQS4Uwi dIIjFafu9Ha+LupmxL5hXz2nfWJsv5xzHkEvMf6IGLuHiJOCFV1K2mCwsqLmHwMk tW/VQpU/hXBXRVjOMVkDI7z9KziS0PkN7UL31HxZkcbNCrQRcCFy7cAT91ySrEiI GFpF7iemdVVEVp5j2LiLmNO5Qe1JnRl+2GSHexpQ0k/w7PwGoWBQW1iP0LUYjfGp Fq4ngJmh3h4e1YKNB1S5zyho5cW5kYqZyo86dgM15YejVLGh4oO/ -----END CERTIFICATE-----Generated at Fri Apr 18 16:33:19 2025 by rpki-client