$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AsKnHkaq840H3dPF9w2h3DdWb8I.roa File: AsKnHkaq840H3dPF9w2h3DdWb8I.roa (raw, json) Hash identifier: J/NXgb/hop/vRNMdQo5NXV0FPz3+OWwy3b7dA/9HT+k= Subject key identifier: 02:C2:A7:1E:46:AA:F3:8D:07:DD:D3:C5:F7:0D:A1:DC:37:56:6F:C2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24C6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AsKnHkaq840H3dPF9w2h3DdWb8I.roa Signing time: Mon 10 Feb 2025 14:19:00 +0000 ROA not before: Mon 10 Feb 2025 14:19:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 180.218.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9414 (0x24c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:19:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=02C2A71E46AAF38D07DDD3C5F70DA1DC37566FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:66:96:23:50:f8:7c:91:09:ae:6d:0b:84: 3d:dc:18:59:59:af:b9:d9:4b:37:ae:5d:f9:61:3f: f2:06:be:f2:53:ff:85:67:4b:b7:2f:2b:49:18:86: e5:47:c4:65:61:7e:fd:d1:45:7f:ce:2d:ff:43:c5: ba:5a:74:f5:5c:81:d0:55:5e:06:14:63:5d:a1:3b: a2:8c:21:8f:39:ce:58:37:d6:71:60:7e:c4:2c:8e: 97:1b:76:17:c6:de:67:d4:da:c9:39:64:05:f5:cc: 3c:8d:6d:d3:75:8e:fa:28:3d:21:8f:17:71:99:8f: fa:22:4f:51:42:73:90:c5:0b:5e:6b:0e:47:9d:96: f9:36:85:ea:d4:b7:30:eb:0b:16:aa:fe:2d:80:41: c3:fe:c5:f7:2c:40:9e:9b:08:da:a2:ae:84:e7:d0: 15:5c:d2:05:c7:3c:0a:ee:1e:e8:7f:90:0e:1a:0e: 31:d7:4b:71:4b:c3:c9:4e:15:f9:3c:5d:e9:84:e3: 8e:82:fb:d7:49:c6:f8:17:96:ec:43:c4:ad:67:ea: d8:22:f3:56:87:79:16:3f:de:af:d9:9a:bb:29:82: 34:3a:75:ba:d6:b5:a2:d9:ff:b3:5c:d5:b6:49:0e: be:71:21:89:28:e7:6e:3c:5a:3f:6c:05:45:9e:15: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C2:A7:1E:46:AA:F3:8D:07:DD:D3:C5:F7:0D:A1:DC:37:56:6F:C2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AsKnHkaq840H3dPF9w2h3DdWb8I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.112.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:c2:21:34:e0:87:5c:3d:a1:4d:e8:3b:03:2d:85:84:43:ca: 40:b6:8f:bd:e4:d7:3b:b6:dc:5f:b4:e1:c0:34:38:8d:7f:c8: 11:95:eb:5f:12:1f:9d:12:0b:70:16:70:04:ab:d0:bb:f3:fb: bf:30:34:fd:cf:93:46:1f:fc:ea:7f:25:05:72:07:27:ab:dc: cb:6f:64:82:80:da:5c:8a:78:dc:98:1f:47:e5:61:7f:cd:3d: 89:98:ca:00:8a:d4:0c:dc:02:e7:11:36:62:74:b8:39:4e:fb: 04:bf:71:fc:10:ed:3c:69:f0:b9:3e:38:52:f2:56:5a:16:24: 55:70:f9:45:b0:ab:c6:e0:a7:9a:87:eb:30:58:99:30:2b:71: 1f:95:68:0c:88:e7:34:aa:66:4d:c9:c0:96:35:8f:93:33:7f: 4a:55:fa:ee:cc:47:b1:ae:86:8f:e8:30:44:97:dc:d5:5c:f5: 28:8d:bf:17:13:61:b3:ee:90:db:21:fe:22:85:90:81:cb:79: 11:87:42:d7:88:2d:25:2b:d6:09:a2:fe:ce:a3:19:c2:01:e2: e2:95:a3:6b:c3:fb:c5:13:df:10:1f:54:ab:4f:2e:24:d6:0d: 3b:e6:ad:58:f9:18:e7:4b:2d:59:b8:b8:4c:4a:75:18:3d:07: b8:fe:89:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE5MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyQzJBNzFFNDZBQUYz OEQwN0RERDNDNUY3MERBMURDMzc1NjZGQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE8GaWI1D4fJEJrm0LhD3cGFlZr7nZSzeuXflhP/IGvvJT/4Vn S7cvK0kYhuVHxGVhfv3RRX/OLf9DxbpadPVcgdBVXgYUY12hO6KMIY85zlg31nFg fsQsjpcbdhfG3mfU2sk5ZAX1zDyNbdN1jvooPSGPF3GZj/oiT1FCc5DFC15rDked lvk2herUtzDrCxaq/i2AQcP+xfcsQJ6bCNqiroTn0BVc0gXHPAruHuh/kA4aDjHX S3FLw8lOFfk8XemE446C+9dJxvgXluxDxK1n6tgi81aHeRY/3q/ZmrspgjQ6dbrW taLZ/7Nc1bZJDr5xIYko5248Wj9sBUWeFRjVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAsKnHkaq840H3dPF9w2h3DdWb8IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FzS25Ia2FxODQwSDNkUEY5 dzJoM0RkV2I4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2nAwDQYJKoZIhvcNAQELBQADggEBAJ/CITTgh1w9oU3oOwMthYRDykC2j73k1zu2 3F+04cA0OI1/yBGV618SH50SC3AWcASr0Lvz+78wNP3Pk0Yf/Op/JQVyByer3Mtv ZIKA2lyKeNyYH0flYX/NPYmYygCK1AzcAucRNmJ0uDlO+wS/cfwQ7Txp8Lk+OFLy VloWJFVw+UWwq8bgp5qH6zBYmTArcR+VaAyI5zSqZk3JwJY1j5Mzf0pV+u7MR7Gu ho/oMESX3NVc9SiNvxcTYbPukNsh/iKFkIHLeRGHQteILSUr1gmi/s6jGcIB4uKV o2vD+8UT3xAfVKtPLiTWDTvmrVj5GOdLLVm4uExKdRg9B7j+iaU= -----END CERTIFICATE-----Generated at Fri Apr 18 16:33:52 2025 by rpki-client