$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yFF-NoUIqkoLwnN9PDaLI7jNcP4.roa File: yFF-NoUIqkoLwnN9PDaLI7jNcP4.roa (raw, json) Hash identifier: Viwui5Fgx7yGh9Ch8+bnX+2SLx0JbIzGfvz05L8PDLA= Subject key identifier: C8:51:7E:36:85:08:AA:4A:0B:C2:73:7D:3C:36:8B:23:B8:CD:70:FE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2460 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yFF-NoUIqkoLwnN9PDaLI7jNcP4.roa Signing time: Mon 10 Feb 2025 14:18:34 +0000 ROA not before: Mon 10 Feb 2025 14:18:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.100.80.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9312 (0x2460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8517E368508AA4A0BC2737D3C368B23B8CD70FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:e2:d0:68:5e:13:9d:27:e1:5b:84:09:61: 31:da:1e:86:0d:b9:cb:db:86:3c:2d:60:49:0b:dc: 23:22:5a:0c:0c:77:72:37:42:4d:15:5c:24:55:6c: b1:ea:60:dd:38:d0:2d:c3:82:23:0d:2d:4a:92:95: a7:3c:f8:89:d5:50:32:35:c2:21:d3:ce:e4:58:4d: b9:e5:48:27:7a:3d:47:69:ed:e9:3c:58:ee:fe:82: 47:df:f6:20:e8:2e:95:e2:66:2e:aa:c4:d1:65:c7: aa:2b:42:f6:e1:17:9b:78:58:0a:fe:a5:bb:1e:f6: fc:76:b8:f6:05:d3:ff:84:ce:6e:b2:84:68:23:d7: 2f:6a:75:a7:cc:f6:87:78:1b:ef:e8:24:e2:3d:ff: 61:3a:20:a0:ed:ec:8d:5b:5b:39:46:42:24:b0:d6: 1e:fd:18:a0:16:a6:05:5e:1a:5e:c0:6c:49:2b:4f: 81:7d:2f:bd:81:f6:bc:6b:80:1d:a4:a3:4d:06:33: df:63:b5:07:c6:ba:54:50:ec:f1:e2:d2:02:57:d0: e9:86:2b:c4:44:d8:64:27:6a:33:4b:16:2c:94:00: fe:92:ae:40:39:b8:d1:81:91:21:ff:ae:23:35:d1: e0:b5:dc:b6:71:53:7b:51:63:66:cf:8b:70:ca:7b: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:7E:36:85:08:AA:4A:0B:C2:73:7D:3C:36:8B:23:B8:CD:70:FE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yFF-NoUIqkoLwnN9PDaLI7jNcP4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.80.0/21 Signature Algorithm: sha256WithRSAEncryption 29:29:0b:da:11:c9:51:52:c5:22:17:d5:d8:1a:e7:f9:85:46: 10:f9:43:44:03:7f:10:99:46:e5:a1:79:0a:f9:4e:09:c8:19: b8:46:50:39:bc:af:ae:23:6f:72:04:01:a0:ec:17:61:47:15: f9:bd:4e:a5:43:87:69:aa:96:90:95:c6:8d:c4:2a:00:74:aa: 72:83:31:3e:3e:8c:c7:e5:3c:22:cb:69:76:fe:91:63:59:0d: ce:42:55:16:a5:be:b4:20:98:a8:77:08:53:dc:be:4c:03:a8: 5f:0a:ec:0e:c9:e5:09:1d:60:17:84:55:96:a3:4e:d0:cd:88: ee:64:03:7a:2c:0b:22:45:e6:95:fa:6e:92:16:a9:c0:2a:e3: 52:4a:4b:50:ae:67:3f:a8:7e:c2:84:1d:78:7a:50:c6:96:5e: fd:36:41:80:9b:8f:2c:45:21:21:d7:1a:92:ec:02:bd:e9:4e: 2b:eb:bb:83:26:9c:78:80:74:1e:35:c9:f1:2b:cd:75:e5:36: 09:eb:39:0d:cf:ef:f2:64:2a:eb:55:e1:24:97:1c:ba:ef:76: 72:cc:77:7c:ce:dc:81:12:10:80:2e:0b:d0:fa:24:13:e1:3c: 13:da:4d:a4:75:d2:1b:c7:e2:f3:d4:e2:df:a4:f0:49:74:6b: 60:15:e1:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4NTE3RTM2ODUwOEFB NEEwQkMyNzM3RDNDMzY4QjIzQjhDRDcwRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCczOLQaF4TnSfhW4QJYTHaHoYNucvbhjwtYEkL3CMiWgwMd3I3 Qk0VXCRVbLHqYN040C3DgiMNLUqSlac8+InVUDI1wiHTzuRYTbnlSCd6PUdp7ek8 WO7+gkff9iDoLpXiZi6qxNFlx6orQvbhF5t4WAr+pbse9vx2uPYF0/+Ezm6yhGgj 1y9qdafM9od4G+/oJOI9/2E6IKDt7I1bWzlGQiSw1h79GKAWpgVeGl7AbEkrT4F9 L72B9rxrgB2ko00GM99jtQfGulRQ7PHi0gJX0OmGK8RE2GQnajNLFiyUAP6SrkA5 uNGBkSH/riM10eC13LZxU3tRY2bPi3DKe9XrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyFF+NoUIqkoLwnN9PDaLI7jNcP4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lGRi1Ob1VJcWtvTHduTjlQ RGFMSTdqTmNQNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 ZFAwDQYJKoZIhvcNAQELBQADggEBACkpC9oRyVFSxSIX1dga5/mFRhD5Q0QDfxCZ RuWheQr5TgnIGbhGUDm8r64jb3IEAaDsF2FHFfm9TqVDh2mqlpCVxo3EKgB0qnKD MT4+jMflPCLLaXb+kWNZDc5CVRalvrQgmKh3CFPcvkwDqF8K7A7J5QkdYBeEVZaj TtDNiO5kA3osCyJF5pX6bpIWqcAq41JKS1CuZz+ofsKEHXh6UMaWXv02QYCbjyxF ISHXGpLsAr3pTivru4MmnHiAdB41yfErzXXlNgnrOQ3P7/JkKutV4SSXHLrvdnLM d3zO3IESEIAuC9D6JBPhPBPaTaR10hvH4vPU4t+k8El0a2AV4TA= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:20 2025 by rpki-client