$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QYDQ_beAS604188cFmUzF1Vxax8.roa File: QYDQ_beAS604188cFmUzF1Vxax8.roa (raw, json) Hash identifier: qPiV2vFfpg72FfhK/tZK3YJnMU22q7luN13l/1Mdad8= Subject key identifier: 41:80:D0:FD:B7:80:4B:AD:38:D7:CF:1C:16:65:33:17:55:71:6B:1F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 245C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QYDQ_beAS604188cFmUzF1Vxax8.roa Signing time: Mon 10 Feb 2025 14:18:33 +0000 ROA not before: Mon 10 Feb 2025 14:18:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 103.225.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9308 (0x245c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4180D0FDB7804BAD38D7CF1C1665331755716B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:fa:be:b1:96:62:d5:3d:c7:2f:e6:93:bd: ff:e4:76:76:35:d5:e4:ff:5d:0b:b0:7c:3b:68:4e: 65:00:4a:76:91:2d:0b:62:ba:ef:08:a1:ae:dd:18: 1c:61:83:fa:cd:a2:cd:67:45:01:7c:f5:80:7d:0c: ff:36:32:0a:dd:65:0e:93:a8:01:cb:7a:4f:6c:32: 27:33:b2:e5:24:d9:c9:e8:48:32:1d:c4:f6:99:b5: 48:bf:2a:38:f8:68:a9:02:ce:99:e6:53:68:06:f6: 32:fb:fa:fa:a2:00:f3:96:fc:98:fa:28:2a:86:2e: c3:13:97:c7:9a:98:d7:fc:45:ab:60:10:90:6d:d8: 8c:29:39:26:2e:90:b8:8a:ae:6a:e2:96:b2:88:87: e4:f3:f7:8b:d4:42:9d:71:3f:4f:e7:e7:c2:1a:ea: 1e:e8:37:38:e0:8c:e7:98:17:45:ee:e4:87:ee:1f: 6d:99:4f:ad:b5:c7:81:1c:7d:c4:26:87:ba:cf:28: e9:23:0b:65:e0:11:17:00:4e:10:3d:1c:dd:a4:b7: 49:7a:f4:84:55:22:5f:e0:fd:67:52:1e:2f:19:50: c6:24:b6:85:49:9c:fe:39:12:9c:88:9a:83:47:ed: dd:15:d1:a3:dd:fb:b3:db:e9:a4:7d:68:ec:70:b7: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:80:D0:FD:B7:80:4B:AD:38:D7:CF:1C:16:65:33:17:55:71:6B:1F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QYDQ_beAS604188cFmUzF1Vxax8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.225.0.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:20:88:00:51:8b:45:7a:b6:9d:09:ba:14:00:dd:e0:d1:a2: 27:71:71:c9:6d:bb:79:8c:69:fc:05:26:91:41:f7:1e:b3:97: 30:92:b6:7a:43:6c:13:36:15:05:ba:c9:dd:40:f5:b9:ad:89: 4c:3f:20:7b:45:7c:d3:ac:f0:bb:c8:5f:32:af:4b:36:a4:0f: 6a:77:ab:d2:e8:23:81:87:d2:b2:75:c0:90:c5:74:16:44:4b: 34:2e:5c:f3:68:8c:a5:2d:cb:f2:50:9c:49:9f:24:8d:88:3b: bf:1a:85:1b:85:1c:44:a1:df:61:b0:4c:49:ea:43:7d:1d:4b: bd:9d:49:87:46:81:7b:c5:1d:72:de:cf:a7:bc:f7:82:a7:4e: 3a:8a:87:38:a1:b0:eb:a7:19:72:01:06:34:3f:d4:99:28:08: 86:df:21:fb:5e:4e:f3:ab:41:d0:de:83:05:14:8e:10:9b:1c: 4d:cf:8b:50:f6:e9:e8:5f:8f:77:2d:ec:92:31:4f:d8:e5:0c: d4:26:ac:b5:4f:cd:e2:c6:f4:ec:f1:c9:5f:f9:73:80:5f:a0: 48:d7:48:c1:3c:7c:4e:83:f7:2a:2c:bd:0a:22:b0:8f:77:04: fb:88:4b:df:05:63:4f:9e:68:da:d8:86:c3:d1:30:7b:08:af: 0a:b8:ba:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxODBEMEZEQjc4MDRC QUQzOEQ3Q0YxQzE2NjUzMzE3NTU3MTZCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSpvq+sZZi1T3HL+aTvf/kdnY11eT/XQuwfDtoTmUASnaRLQti uu8Ioa7dGBxhg/rNos1nRQF89YB9DP82MgrdZQ6TqAHLek9sMiczsuUk2cnoSDId xPaZtUi/Kjj4aKkCzpnmU2gG9jL7+vqiAPOW/Jj6KCqGLsMTl8eamNf8RatgEJBt 2IwpOSYukLiKrmrilrKIh+Tz94vUQp1xP0/n58Ia6h7oNzjgjOeYF0Xu5IfuH22Z T621x4EcfcQmh7rPKOkjC2XgERcAThA9HN2kt0l69IRVIl/g/WdSHi8ZUMYktoVJ nP45EpyImoNH7d0V0aPd+7Pb6aR9aOxwt817AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQYDQ/beAS604188cFmUzF1Vxax8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FZRFFfYmVBUzYwNDE4OGNG bVV6RjFWeGF4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn 4QAwDQYJKoZIhvcNAQELBQADggEBAJ4giABRi0V6tp0JuhQA3eDRoidxccltu3mM afwFJpFB9x6zlzCStnpDbBM2FQW6yd1A9bmtiUw/IHtFfNOs8LvIXzKvSzakD2p3 q9LoI4GH0rJ1wJDFdBZESzQuXPNojKUty/JQnEmfJI2IO78ahRuFHESh32GwTEnq Q30dS72dSYdGgXvFHXLez6e894KnTjqKhzihsOunGXIBBjQ/1JkoCIbfIfteTvOr QdDegwUUjhCbHE3Pi1D26ehfj3ct7JIxT9jlDNQmrLVPzeLG9OzxyV/5c4BfoEjX SME8fE6D9yosvQoisI93BPuIS98FY0+eaNrYhsPRMHsIrwq4ukE= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net