$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa File: G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa (raw, json) Hash identifier: sXIcs3hLZg6cf52F7tNtS1jDf8/3UG+nwACVKwF0pt8= Subject key identifier: 1B:B1:C3:A7:14:B1:C8:8D:1C:59:1A:3C:89:F1:B9:F9:CC:57:64:79 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24B8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa Signing time: Mon 10 Feb 2025 14:18:55 +0000 ROA not before: Mon 10 Feb 2025 14:18:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 122.254.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9400 (0x24b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1BB1C3A714B1C88D1C591A3C89F1B9F9CC576479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:2f:bb:b1:12:38:ae:16:79:83:8f:14:f1: ea:63:29:54:a6:78:54:7a:b1:27:cd:95:76:9e:5d: 7d:4b:7d:88:f5:4f:55:e2:f0:f7:f6:70:12:08:63: 6f:96:d8:ad:3b:f1:18:ae:03:6f:19:34:1f:55:4d: fe:94:a2:1c:24:42:db:ba:b5:ef:2b:9f:95:8e:e9: 85:74:f6:ed:41:c3:71:28:09:04:0c:8f:e3:16:52: 77:5d:4f:ed:d4:65:c0:0b:6d:30:d8:24:42:b7:e0: e6:39:90:ee:7d:13:cb:02:8b:28:d8:cc:3a:5d:9a: 54:77:e3:05:28:d5:a9:a9:7c:d9:80:ca:a0:20:b3: 40:18:c9:d3:f6:33:44:89:ed:60:b3:5f:a2:ab:ca: 02:ae:46:f0:d7:17:42:21:43:77:2f:c5:49:99:46: e9:a1:a3:d9:ff:c5:ff:4b:a6:ab:cc:a1:ea:02:57: ae:d3:49:9d:92:62:ce:d8:4f:d5:c7:3c:f8:e7:60: 54:51:54:f8:e4:6e:f2:b7:78:2f:22:c9:64:05:4a: 18:c0:27:79:f9:ef:08:13:4a:b1:92:c6:35:21:cd: f0:62:cd:43:a1:2a:c4:16:47:5d:86:f7:99:1f:f2: aa:90:1c:bf:9f:1d:4f:90:eb:ba:7d:ab:2d:88:3a: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B1:C3:A7:14:B1:C8:8D:1C:59:1A:3C:89:F1:B9:F9:CC:57:64:79 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.24.0/21 Signature Algorithm: sha256WithRSAEncryption 60:d1:f0:a8:8e:2c:6c:bb:09:db:9a:42:6f:61:4c:a3:56:a3: 4a:7a:08:da:c7:95:18:7c:ed:cb:2f:c2:46:33:c7:f1:de:df: a5:8a:00:26:03:6a:9e:34:84:26:73:6c:81:36:8c:ac:84:54: b0:d0:79:a0:78:f9:a2:88:03:d7:91:c0:4c:4b:fd:ac:fc:72: 3c:2d:1a:fa:40:e1:38:67:b6:8a:45:01:b7:f9:28:5d:ab:a5: ed:4f:d1:fc:a0:b0:49:d4:ac:1d:db:de:c3:e7:da:91:ce:3f: f8:7d:66:7b:b9:84:69:2b:63:49:06:71:7f:07:50:ce:16:f8: a7:5f:a7:01:80:20:76:d9:09:cc:5b:e1:eb:ec:bc:d3:af:0c: 10:cb:4d:b4:df:e2:14:cf:c7:04:a5:42:54:05:f1:48:2e:6e: 98:a7:38:e7:e2:de:fd:b6:42:83:1f:0e:cf:6e:89:32:60:40: 33:ed:01:f0:7b:5d:a2:4a:e4:ec:f7:35:5e:c3:3a:a5:a2:de: 22:b7:0e:c9:61:72:0b:de:9f:c7:85:3e:a4:72:c5:5b:e4:95: 0a:68:67:e0:fd:ce:e7:eb:98:f2:9a:a0:5a:6c:15:1b:70:66: 2b:de:cc:b5:f1:79:27:18:a7:63:fc:6b:7e:0d:40:15:3a:f9: 18:f3:03:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCQjFDM0E3MTRCMUM4 OEQxQzU5MUEzQzg5RjFCOUY5Q0M1NzY0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtAS+7sRI4rhZ5g48U8epjKVSmeFR6sSfNlXaeXX1LfYj1T1Xi 8Pf2cBIIY2+W2K078RiuA28ZNB9VTf6UohwkQtu6te8rn5WO6YV09u1Bw3EoCQQM j+MWUnddT+3UZcALbTDYJEK34OY5kO59E8sCiyjYzDpdmlR34wUo1ampfNmAyqAg s0AYydP2M0SJ7WCzX6KrygKuRvDXF0IhQ3cvxUmZRumho9n/xf9LpqvMoeoCV67T SZ2SYs7YT9XHPPjnYFRRVPjkbvK3eC8iyWQFShjAJ3n57wgTSrGSxjUhzfBizUOh KsQWR12G95kf8qqQHL+fHU+Q67p9qy2IOhqjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUG7HDpxSxyI0cWRo8ifG5+cxXZHkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0c3SERweFN4eUkwY1dSbzhp Zkc1LWN4WFpIay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /hgwDQYJKoZIhvcNAQELBQADggEBAGDR8KiOLGy7CduaQm9hTKNWo0p6CNrHlRh8 7csvwkYzx/He36WKACYDap40hCZzbIE2jKyEVLDQeaB4+aKIA9eRwExL/az8cjwt GvpA4ThntopFAbf5KF2rpe1P0fygsEnUrB3b3sPn2pHOP/h9Znu5hGkrY0kGcX8H UM4W+KdfpwGAIHbZCcxb4evsvNOvDBDLTbTf4hTPxwSlQlQF8UgubpinOOfi3v22 QoMfDs9uiTJgQDPtAfB7XaJK5Oz3NV7DOqWi3iK3Dslhcgven8eFPqRyxVvklQpo Z+D9zufrmPKaoFpsFRtwZivezLXxeScYp2P8a34NQBU6+RjzA9M= -----END CERTIFICATE-----Generated at Fri Apr 18 16:42:41 2025 by rpki-client