$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5arP0FTwnMWP-o52Os3rLB4XWPU.roa File: 5arP0FTwnMWP-o52Os3rLB4XWPU.roa (raw, json) Hash identifier: BHTytfFQtC1Ir/Vp/xWKReNw+2cQ6aaBhxhdw4URjM0= Subject key identifier: E5:AA:CF:D0:54:F0:9C:C5:8F:FA:8E:76:3A:CD:EB:2C:1E:17:58:F5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2393 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5arP0FTwnMWP-o52Os3rLB4XWPU.roa Signing time: Mon 10 Feb 2025 14:17:42 +0000 ROA not before: Mon 10 Feb 2025 14:17:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9107 (0x2393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E5AACFD054F09CC58FFA8E763ACDEB2C1E1758F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:64:9a:ad:17:72:e6:21:7b:ad:d6:cd:02: a7:50:85:e7:b1:16:62:9c:ba:46:7f:24:ed:c2:6d: 42:6e:9e:0d:c0:59:fd:00:d5:84:c4:12:3f:15:f8: 41:67:43:54:03:9c:05:89:f2:2e:7c:26:e0:45:a7: 0e:ab:1a:1e:a5:65:64:c1:03:cc:f2:3c:dc:a6:46: 32:e4:f4:5b:a3:c2:19:56:8f:b0:73:bd:4d:88:49: 48:cb:e6:01:1e:79:89:3f:82:3d:e7:61:fa:60:32: 62:19:db:bb:73:ea:3d:da:d5:4d:39:53:22:a8:ed: b5:6d:95:00:5e:cd:99:13:b1:75:34:ce:20:03:06: 26:2e:49:ec:07:b1:1c:4f:ee:58:10:91:b1:ce:05: 00:85:dc:3e:4e:26:00:7a:80:e7:93:67:03:6a:93: 94:16:29:7d:bf:6a:ca:80:2c:86:90:a5:62:0d:ea: 11:88:c0:c0:04:a9:4b:5d:84:9c:dc:0e:99:dd:3b: 4f:de:c8:f0:cc:19:83:5c:91:e5:90:8a:57:8c:aa: aa:b7:25:a7:e6:be:b3:ef:47:d7:27:a1:8a:2b:bc: 29:97:4d:46:8a:67:3b:35:2d:75:8f:77:23:61:3f: ee:d6:62:5b:80:bf:03:14:54:99:77:16:30:80:c0: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:CF:D0:54:F0:9C:C5:8F:FA:8E:76:3A:CD:EB:2C:1E:17:58:F5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5arP0FTwnMWP-o52Os3rLB4XWPU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/23 Signature Algorithm: sha256WithRSAEncryption 33:56:6b:a1:c3:e8:1a:22:d9:a4:46:56:89:de:5f:69:81:49: 85:53:02:91:6c:5d:64:53:d8:30:0a:52:fa:17:52:be:a2:32: 8a:33:c2:0c:18:d7:2b:57:d4:af:82:6f:8d:b7:19:eb:48:29: 05:a0:50:c7:6d:05:ab:52:5f:78:27:07:9a:8f:f4:b8:b6:4b: 85:44:12:0e:1f:de:26:96:cc:fb:8f:a2:b4:48:7a:d2:b9:85: d9:3c:3d:bc:51:5c:86:2e:cb:46:90:a5:47:7d:08:ae:17:e1: fe:bc:2b:9e:65:79:9c:69:3c:09:2f:c4:b0:47:5a:d5:6b:13: b2:04:31:66:f7:ee:3f:e5:0f:0d:f4:c8:fc:72:28:49:83:b5: d4:2d:54:18:ca:06:79:84:f3:31:8f:f8:81:e7:8a:d6:df:a6: 7a:f7:ae:22:c7:f1:38:7e:ef:50:69:3d:c2:22:33:f3:dc:8c: 74:65:c8:a0:72:3a:9c:7b:94:a1:82:55:f1:88:d4:25:be:da: f1:83:47:96:fb:90:c5:eb:d7:63:73:90:af:06:6e:03:2b:ed: c6:d4:17:3d:f3:36:06:58:47:fc:aa:00:4c:42:5c:b4:f5:76: 1c:d1:60:cb:c0:ee:85:57:e7:63:0b:b2:1d:fa:a4:a1:38:22: bd:e2:3e:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1QUFDRkQwNTRGMDlD QzU4RkZBOEU3NjNBQ0RFQjJDMUUxNzU4RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVeWSarRdy5iF7rdbNAqdQheexFmKcukZ/JO3CbUJung3AWf0A 1YTEEj8V+EFnQ1QDnAWJ8i58JuBFpw6rGh6lZWTBA8zyPNymRjLk9FujwhlWj7Bz vU2ISUjL5gEeeYk/gj3nYfpgMmIZ27tz6j3a1U05UyKo7bVtlQBezZkTsXU0ziAD BiYuSewHsRxP7lgQkbHOBQCF3D5OJgB6gOeTZwNqk5QWKX2/asqALIaQpWIN6hGI wMAEqUtdhJzcDpndO0/eyPDMGYNckeWQileMqqq3JafmvrPvR9cnoYorvCmXTUaK Zzs1LXWPdyNhP+7WYluAvwMUVJl3FjCAwIalAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5arP0FTwnMWP+o52Os3rLB4XWPUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVhclAwRlR3bk1XUC1vNTJP czNyTEI0WFdQVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2pAwDQYJKoZIhvcNAQELBQADggEBADNWa6HD6Boi2aRGVoneX2mBSYVTApFsXWRT 2DAKUvoXUr6iMoozwgwY1ytX1K+Cb423GetIKQWgUMdtBatSX3gnB5qP9Li2S4VE Eg4f3iaWzPuPorRIetK5hdk8PbxRXIYuy0aQpUd9CK4X4f68K55leZxpPAkvxLBH WtVrE7IEMWb37j/lDw30yPxyKEmDtdQtVBjKBnmE8zGP+IHnitbfpnr3riLH8Th+ 71BpPcIiM/PcjHRlyKByOpx7lKGCVfGI1CW+2vGDR5b7kMXr12NzkK8GbgMr7cbU Fz3zNgZYR/yqAExCXLT1dhzRYMvA7oVX52MLsh36pKE4Ir3iPgc= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:41 2025 by rpki-client