$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4SXvxC90P6u6H6n7kvs2YCVwuKg.roa File: 4SXvxC90P6u6H6n7kvs2YCVwuKg.roa (raw, json) Hash identifier: WB1cSl5SqGjQY8z52S8HW/uiSgyfxKpJDV0TwDHn2K8= Subject key identifier: E1:25:EF:C4:2F:74:3F:AB:BA:1F:A9:FB:92:FB:36:60:25:70:B8:A8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 236D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4SXvxC90P6u6H6n7kvs2YCVwuKg.roa Signing time: Mon 10 Feb 2025 14:17:35 +0000 ROA not before: Mon 10 Feb 2025 14:17:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9069 (0x236d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E125EFC42F743FABBA1FA9FB92FB36602570B8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:94:2d:b7:5e:6a:66:77:5b:99:fc:54:8f: 8a:72:8a:7b:dc:b0:e8:3b:68:2d:0a:b6:db:5c:13: 72:65:94:91:fa:9b:07:92:0c:07:c7:ec:0a:f9:1b: 1f:97:ec:7d:1f:27:a7:a7:86:92:0d:61:f3:f6:a0: 6b:b4:7e:de:d3:5b:3b:77:ea:2a:bf:5a:19:38:c8: c4:25:4a:f8:ca:ad:d0:e9:7c:69:ef:90:c4:c6:d6: 26:2d:d1:5a:17:98:3c:45:dc:93:fd:f3:3d:71:bf: aa:c4:db:2e:dc:1a:40:ee:05:46:e3:74:c1:c1:ce: ab:05:7f:3f:03:09:f3:2c:30:d7:2e:f2:32:1b:c7: 15:c3:4a:d8:78:1e:cb:bb:79:a5:32:82:03:ad:71: b3:09:0e:a5:cc:ee:10:42:ff:31:48:97:d9:48:4e: a0:98:b0:5e:99:2a:03:e3:2e:8b:29:8f:36:c0:16: 57:a8:81:04:4e:d3:6e:7d:60:c2:e9:f5:0b:59:68: 32:1f:89:b3:97:ba:a8:9e:85:3e:a5:7c:f2:da:05: ce:43:d5:04:9b:8c:26:a8:a5:ab:87:44:46:23:07: 46:4c:f5:63:01:7e:f1:6d:bf:5b:cc:1d:4b:7c:e8: 65:f2:c2:66:05:ae:69:28:af:bc:eb:db:94:79:71: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:25:EF:C4:2F:74:3F:AB:BA:1F:A9:FB:92:FB:36:60:25:70:B8:A8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4SXvxC90P6u6H6n7kvs2YCVwuKg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.0.0/20 Signature Algorithm: sha256WithRSAEncryption 41:bd:c5:2a:0b:cc:4d:af:e9:6f:a6:c4:72:df:af:f9:1d:d6: 01:ef:9a:f3:5c:a0:cc:f7:00:00:91:4f:e1:ab:3a:4e:41:a8: 81:63:00:ae:6f:08:ba:4b:2f:5e:06:87:4c:e2:5b:51:d0:2f: 97:29:89:57:5a:01:2c:ad:9e:85:e4:85:de:41:bc:e4:e6:27: 48:10:1e:ee:92:7d:bd:22:42:84:35:3e:17:ae:89:24:72:c0: 3a:4e:4f:33:ac:d8:5a:f2:60:72:a2:9f:2d:78:7b:85:c0:5c: f8:a9:f5:c2:9f:95:42:ff:7a:91:94:7a:90:03:02:80:ed:68: cc:d7:a5:7e:78:a9:97:e8:a6:ed:86:eb:7c:d2:6b:2d:20:95: c6:32:f2:cd:69:dd:61:99:89:2e:63:79:3a:2b:82:32:99:cf: 46:88:b8:ca:9d:44:f3:b1:c9:c4:d0:00:dd:d0:dc:a5:2a:f5: eb:23:9c:13:14:38:18:25:2c:fa:f0:fa:09:6a:47:43:73:8e: 57:e9:76:7c:55:3e:15:82:c1:b5:be:b8:07:b9:84:4e:8f:30: ce:3a:39:78:6a:02:88:e2:85:7c:5b:7b:5f:22:b2:72:91:b8: 3e:15:fe:ac:10:69:9f:e2:71:97:1d:72:d5:05:9b:ed:43:ff: e9:46:67:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxMjVFRkM0MkY3NDNG QUJCQTFGQTlGQjkyRkIzNjYwMjU3MEI4QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF/JQtt15qZndbmfxUj4pyinvcsOg7aC0KtttcE3JllJH6mweS DAfH7Ar5Gx+X7H0fJ6enhpINYfP2oGu0ft7TWzt36iq/Whk4yMQlSvjKrdDpfGnv kMTG1iYt0VoXmDxF3JP98z1xv6rE2y7cGkDuBUbjdMHBzqsFfz8DCfMsMNcu8jIb xxXDSth4Hsu7eaUyggOtcbMJDqXM7hBC/zFIl9lITqCYsF6ZKgPjLospjzbAFleo gQRO0259YMLp9QtZaDIfibOXuqiehT6lfPLaBc5D1QSbjCaopauHREYjB0ZM9WMB fvFtv1vMHUt86GXywmYFrmkor7zr25R5cV6PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4SXvxC90P6u6H6n7kvs2YCVwuKgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRTWHZ4QzkwUDZ1Nkg2bjdr dnMyWUNWd3VLZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 2gAwDQYJKoZIhvcNAQELBQADggEBAEG9xSoLzE2v6W+mxHLfr/kd1gHvmvNcoMz3 AACRT+GrOk5BqIFjAK5vCLpLL14Gh0ziW1HQL5cpiVdaASytnoXkhd5BvOTmJ0gQ Hu6Sfb0iQoQ1PheuiSRywDpOTzOs2FryYHKiny14e4XAXPip9cKflUL/epGUepAD AoDtaMzXpX54qZfopu2G63zSay0glcYy8s1p3WGZiS5jeTorgjKZz0aIuMqdRPOx ycTQAN3Q3KUq9esjnBMUOBglLPrw+glqR0NzjlfpdnxVPhWCwbW+uAe5hE6PMM46 OXhqAojihXxbe18isnKRuD4V/qwQaZ/icZcdctUFm+1D/+lGZzk= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:39 2025 by rpki-client