$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QOEOL9BnSr4jivveEShnkpjRPDs.roa File: QOEOL9BnSr4jivveEShnkpjRPDs.roa (raw, json) Hash identifier: +fxBafVxXAXLVbLFnRDlW6rAhei2Mjpi/t91iM567bc= Subject key identifier: 40:E1:0E:2F:D0:67:4A:BE:23:8A:FB:DE:11:28:67:92:98:D1:3C:3B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2458 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QOEOL9BnSr4jivveEShnkpjRPDs.roa Signing time: Mon 10 Feb 2025 14:18:32 +0000 ROA not before: Mon 10 Feb 2025 14:18:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9304 (0x2458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=40E10E2FD0674ABE238AFBDE1128679298D13C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:6e:73:b9:11:5d:f4:db:6f:99:f7:29:b5: 05:5a:46:43:32:97:8b:86:6c:38:f2:69:d4:f6:df: 6b:e5:db:6d:09:65:13:0a:a4:47:3f:a4:61:e6:47: 5f:e6:b6:93:07:28:06:11:7e:c9:38:b6:00:c2:b8: 6b:34:1a:0b:80:e2:45:36:4f:dd:4f:b1:ce:2a:72: f4:1a:19:07:62:12:93:02:89:9c:37:93:d2:70:c9: a7:e8:4c:a9:7d:f8:d5:b7:0b:aa:e2:36:67:ee:26: 39:48:d0:83:19:22:72:f3:38:5f:a4:88:91:28:0d: fa:f2:ab:50:fd:2a:5a:1d:81:de:0e:5c:15:ca:06: d2:5b:60:5b:93:3f:3f:69:a8:ec:f9:d0:14:fd:58: 77:2c:82:8d:fb:0b:97:27:c2:61:b1:8b:6f:b0:34: 4d:3b:93:83:91:90:ca:ed:89:6b:12:61:37:4a:2f: 11:88:e6:05:b1:31:35:db:e2:53:f7:89:cf:f3:86: 1d:e0:ed:ef:ad:94:85:75:be:5f:cc:ff:08:53:f3: f5:36:9f:b4:ac:dd:57:52:c1:e8:82:b2:94:f5:f0: 9b:44:88:6c:dd:17:c4:c3:91:d2:12:d0:8f:94:28: b4:75:29:da:41:1f:8d:1e:54:19:06:51:c6:2d:02: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E1:0E:2F:D0:67:4A:BE:23:8A:FB:DE:11:28:67:92:98:D1:3C:3B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QOEOL9BnSr4jivveEShnkpjRPDs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.56.0/22 Signature Algorithm: sha256WithRSAEncryption 07:a0:79:a5:e0:86:a0:52:58:2e:ef:97:5a:fc:c0:3f:4b:a9: 13:87:15:ba:b3:d6:93:96:30:1e:b4:15:12:b9:70:3e:aa:b3: fd:27:cf:64:5e:fd:ca:30:90:8c:92:92:d9:ab:84:13:fc:7c: 5c:1c:a1:36:98:64:a1:66:da:4e:e4:1a:00:9d:3d:5c:67:29: 79:66:10:b3:9d:6f:59:f1:3f:d8:bb:d1:8e:4d:96:12:2a:c8: 5c:56:0d:7e:75:47:31:11:9a:ff:f7:a4:bc:ba:e9:1c:99:72: ca:00:e7:0c:3f:15:19:b0:78:32:37:10:29:36:b5:43:c0:19: b3:53:c6:3b:b2:67:4e:6d:da:12:7f:d8:8c:22:eb:aa:18:19: 2b:b4:c7:c6:b5:ff:f4:42:3f:a7:94:71:f6:f9:a2:38:53:8c: 03:e9:c4:92:91:ee:2e:f1:e3:f7:03:d1:30:a7:e0:76:f8:4b: e1:7c:6a:46:fe:99:67:3f:ad:f6:e2:de:2e:3b:63:69:04:e9: 23:2b:1c:e7:d1:05:30:ee:92:d9:73:cc:6d:03:31:02:ff:9c: 47:4d:82:5a:07:9a:2d:3f:f8:c5:97:cb:72:fa:33:79:24:ad: 2d:12:ae:b1:bf:b4:3c:60:77:bf:ff:40:8c:0a:e2:7f:26:7c: 4f:40:f4:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwRTEwRTJGRDA2NzRB QkUyMzhBRkJERTExMjg2NzkyOThEMTNDM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNT25zuRFd9NtvmfcptQVaRkMyl4uGbDjyadT232vl220JZRMK pEc/pGHmR1/mtpMHKAYRfsk4tgDCuGs0GguA4kU2T91Psc4qcvQaGQdiEpMCiZw3 k9JwyafoTKl9+NW3C6riNmfuJjlI0IMZInLzOF+kiJEoDfryq1D9Klodgd4OXBXK BtJbYFuTPz9pqOz50BT9WHcsgo37C5cnwmGxi2+wNE07k4ORkMrtiWsSYTdKLxGI 5gWxMTXb4lP3ic/zhh3g7e+tlIV1vl/M/whT8/U2n7Ss3VdSweiCspT18JtEiGzd F8TDkdIS0I+UKLR1KdpBH40eVBkGUcYtAvilAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQOEOL9BnSr4jivveEShnkpjRPDswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FPRU9MOUJuU3I0aml2dmVF U2hua3BqUlBEcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TDgwDQYJKoZIhvcNAQELBQADggEBAAegeaXghqBSWC7vl1r8wD9LqROHFbqz1pOW MB60FRK5cD6qs/0nz2Re/cowkIySktmrhBP8fFwcoTaYZKFm2k7kGgCdPVxnKXlm ELOdb1nxP9i70Y5NlhIqyFxWDX51RzERmv/3pLy66RyZcsoA5ww/FRmweDI3ECk2 tUPAGbNTxjuyZ05t2hJ/2Iwi66oYGSu0x8a1//RCP6eUcfb5ojhTjAPpxJKR7i7x 4/cD0TCn4Hb4S+F8akb+mWc/rfbi3i47Y2kE6SMrHOfRBTDuktlzzG0DMQL/nEdN gloHmi0/+MWXy3L6M3kkrS0SrrG/tDxgd7//QIwK4n8mfE9A9BA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net