$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XP2zTyhhIQHbQ7CU1-zytGUIhrY.roa File: XP2zTyhhIQHbQ7CU1-zytGUIhrY.roa (raw, json) Hash identifier: AUcz/ZRQ+eJdLbiW7kRLqehM6Zu2ne0faziutaCmMfI= Subject key identifier: 5C:FD:B3:4F:28:61:21:01:DB:43:B0:94:D7:EC:F2:B4:65:08:86:B6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23B7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XP2zTyhhIQHbQ7CU1-zytGUIhrY.roa Signing time: Mon 10 Feb 2025 14:17:51 +0000 ROA not before: Mon 10 Feb 2025 14:17:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.58.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9143 (0x23b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CFDB34F28612101DB43B094D7ECF2B4650886B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:ca:0d:a9:34:11:21:21:7a:7b:70:20:95: ec:12:64:b0:86:fa:bb:c0:39:e7:54:e0:f7:33:8f: b3:49:1f:e9:43:3a:2b:73:59:fe:68:75:ed:f3:c0: e8:8d:b5:72:7e:99:ce:58:b1:9a:18:1b:44:f7:4b: 32:5b:2f:b9:2b:aa:4c:54:69:5e:42:07:72:60:34: 43:00:73:ef:32:37:82:f8:be:64:09:98:ef:14:01: 56:d6:34:1e:9f:82:19:46:5f:a1:04:9a:f8:28:59: 35:9c:fd:e3:69:51:01:01:4e:bb:a7:d0:ef:f5:79: d0:3e:22:2c:b1:20:19:ed:1a:f4:97:89:07:ad:f7: 5e:dd:59:08:df:7b:4b:28:61:b8:3f:f1:7b:da:53: 5e:4e:6f:b9:f7:bb:d6:5d:27:f8:26:f1:2f:2f:70: 4d:cb:51:96:94:b0:b1:e5:0b:45:65:ac:4b:30:ad: 6b:7a:04:22:5e:07:44:ac:2e:5e:97:a6:67:fd:f9: 69:2f:4c:29:95:91:5d:f5:fc:59:6b:d4:f7:d5:66: 63:df:7f:d0:3e:35:01:81:9a:5f:88:99:2f:7b:28: 03:d3:1e:59:c3:7d:7e:2b:c5:f7:67:8d:14:8e:fa: 0d:f7:27:f2:fe:32:b2:5d:74:66:21:d6:2e:35:8e: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FD:B3:4F:28:61:21:01:DB:43:B0:94:D7:EC:F2:B4:65:08:86:B6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XP2zTyhhIQHbQ7CU1-zytGUIhrY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.120.0/23 Signature Algorithm: sha256WithRSAEncryption 40:10:bf:77:3a:60:06:d9:0d:b4:7e:8e:e7:b7:6a:13:f9:ed: aa:f8:0b:b3:1b:ba:e4:aa:30:d3:cd:24:4b:f5:17:01:3e:c0: c1:39:f6:fc:10:8a:19:d4:fb:87:8a:b7:fb:fb:35:bd:43:26: 37:aa:c4:c8:2c:c9:47:5a:33:83:2c:84:eb:c2:d4:c2:b6:3e: f0:18:0a:a4:de:fc:91:a6:cc:42:29:bf:36:38:3f:86:f6:9a: a0:15:d1:cd:dd:e0:bf:41:ef:93:57:d4:ba:16:5b:7d:ba:2a: e3:6b:e7:b9:08:93:b1:18:cf:cd:86:2b:ea:38:2b:41:49:3d: bb:84:72:5e:77:f4:c2:f8:d5:a6:ad:92:a5:ac:f1:ef:f6:7a: 8a:be:37:7c:11:36:e8:49:9e:68:72:a7:b2:e8:b8:a6:5d:5c: 08:3c:1f:b9:cf:18:a8:0a:d0:3e:4b:3e:09:55:da:0c:f7:90: ca:d3:47:7f:5d:02:ef:ad:2d:c5:7b:2b:fd:b8:db:08:bc:7b: 96:da:ee:8b:56:01:d5:fd:17:29:9e:18:82:57:20:eb:7c:5e: e7:9c:1b:4c:6b:b3:32:c6:51:57:59:10:ef:0e:31:27:e8:c9: b9:dc:3c:7a:f6:22:a2:d3:4d:c7:30:1a:22:cd:f7:db:27:25: 39:79:3e:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDRkRCMzRGMjg2MTIx MDFEQjQzQjA5NEQ3RUNGMkI0NjUwODg2QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPGcoNqTQRISF6e3AglewSZLCG+rvAOedU4Pczj7NJH+lDOitz Wf5ode3zwOiNtXJ+mc5YsZoYG0T3SzJbL7krqkxUaV5CB3JgNEMAc+8yN4L4vmQJ mO8UAVbWNB6fghlGX6EEmvgoWTWc/eNpUQEBTrun0O/1edA+IiyxIBntGvSXiQet 917dWQjfe0soYbg/8XvaU15Ob7n3u9ZdJ/gm8S8vcE3LUZaUsLHlC0VlrEswrWt6 BCJeB0SsLl6Xpmf9+WkvTCmVkV31/Flr1PfVZmPff9A+NQGBml+ImS97KAPTHlnD fX4rxfdnjRSO+g33J/L+MrJddGYh1i41jlSZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXP2zTyhhIQHbQ7CU1+zytGUIhrYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1hQMnpUeWhoSVFIYlE3Q1Ux LXp5dEdVSWhyWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE9 OngwDQYJKoZIhvcNAQELBQADggEBAEAQv3c6YAbZDbR+jue3ahP57ar4C7MbuuSq MNPNJEv1FwE+wME59vwQihnU+4eKt/v7Nb1DJjeqxMgsyUdaM4MshOvC1MK2PvAY CqTe/JGmzEIpvzY4P4b2mqAV0c3d4L9B75NX1LoWW326KuNr57kIk7EYz82GK+o4 K0FJPbuEcl539ML41aatkqWs8e/2eoq+N3wRNuhJnmhyp7LouKZdXAg8H7nPGKgK 0D5LPglV2gz3kMrTR39dAu+tLcV7K/242wi8e5ba7otWAdX9FymeGIJXIOt8Xuec G0xrszLGUVdZEO8OMSfoybncPHr2IqLTTccwGiLN99snJTl5Pto= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net