$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GL2IyIj0V3Fppve4842Z1LyoAVs.roa File: GL2IyIj0V3Fppve4842Z1LyoAVs.roa (raw, json) Hash identifier: C6Sdz9WgPwflxmiJ/h1rMHF6CufvEusrkQ3D/0y5EsQ= Subject key identifier: 18:BD:88:C8:88:F4:57:71:69:A6:F7:B8:F3:8D:99:D4:BC:A8:01:5B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 238E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GL2IyIj0V3Fppve4842Z1LyoAVs.roa Signing time: Mon 10 Feb 2025 14:17:41 +0000 ROA not before: Mon 10 Feb 2025 14:17:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 180.218.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9102 (0x238e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=18BD88C888F4577169A6F7B8F38D99D4BCA8015B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:eb:39:98:4f:f9:3c:d7:ad:1e:dd:50:3c:89: a5:dd:9f:6b:93:11:69:31:88:af:6f:b7:b9:58:e3: cb:06:94:bc:4b:ab:e3:eb:43:4b:39:b9:8d:35:26: 00:6e:4c:74:05:f6:ca:1e:31:b1:ad:53:ef:e0:c3: 82:52:df:c5:bf:ab:ff:24:e0:d8:e1:77:3d:bb:f4: 2b:3c:42:d3:f0:ce:a5:21:9d:7e:4a:35:ec:8b:b4: 70:94:cd:c9:5e:9c:9d:91:44:a5:21:f1:7d:66:85: 01:fb:12:63:6c:cc:7b:bf:4b:42:e1:3a:fb:8b:9f: 71:7f:1c:63:ca:2f:89:bf:b5:2f:0b:33:0f:fa:2b: e5:44:de:62:73:6f:41:44:ff:6a:d0:b3:ba:d9:db: 9a:cb:39:d6:6e:87:2f:85:3d:60:4a:e8:1f:b2:31: 2f:91:3c:d8:6c:4a:ed:43:3c:54:a4:73:ee:e6:27: 82:02:ca:90:37:97:c9:82:be:ba:72:9b:e3:14:37: a7:c2:59:dd:f7:ba:49:f6:0a:fa:a5:e8:df:f4:7f: 4e:79:b8:13:6a:32:0f:ad:86:f1:fb:b9:27:f2:92: f7:8a:8d:be:09:8b:9b:be:0f:46:9a:cf:eb:4a:fb: b1:09:8e:53:d9:5d:4f:e5:41:ee:15:9e:a8:ff:74: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:88:C8:88:F4:57:71:69:A6:F7:B8:F3:8D:99:D4:BC:A8:01:5B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GL2IyIj0V3Fppve4842Z1LyoAVs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.104.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:e2:65:3d:19:f9:6d:f8:ca:ae:c3:3f:56:91:0b:0e:ae:f7: d2:4c:bb:6d:33:a8:1f:18:c9:2d:d6:3b:91:a1:d3:da:59:d5: 2d:fe:43:14:c0:2e:d5:4e:76:1a:6a:c3:b3:3c:a2:74:33:61: 55:bb:f5:48:6d:f7:03:6c:1e:67:3f:53:52:29:57:a9:ce:77: 92:ea:7e:32:10:52:e4:8a:db:47:c1:b9:1a:7f:b4:8a:b8:62: e3:db:33:75:73:a7:ee:69:1e:f6:b0:ac:05:f3:60:65:e6:4d: 53:b0:68:bf:20:76:9c:b7:ac:85:93:f4:86:7e:03:de:ff:79: 11:2a:3a:aa:92:65:a3:6d:29:c9:23:a3:39:d6:ea:d7:88:ad: 09:70:9a:e2:6b:00:fb:42:01:ca:b5:86:7c:00:8a:be:d4:f1: f8:b9:80:74:f6:cc:dd:e1:d9:50:00:e0:15:e9:fd:0e:c7:ff: 76:20:65:dc:a0:fb:4d:57:48:69:f8:74:aa:fb:09:8e:c5:1a: cc:b2:4f:99:bb:c4:24:d4:4b:4d:3f:8e:0d:87:d3:e6:d1:8b: 22:1a:2a:c4:e9:50:58:09:1c:09:df:92:29:21:d2:b5:05:a2: 74:cf:5e:fb:8b:f9:4d:4e:38:b5:69:54:bf:ab:f8:d0:8f:78: 19:fb:19:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4QkQ4OEM4ODhGNDU3 NzE2OUE2RjdCOEYzOEQ5OUQ0QkNBODAxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL6zmYT/k8160e3VA8iaXdn2uTEWkxiK9vt7lY48sGlLxLq+Pr Q0s5uY01JgBuTHQF9soeMbGtU+/gw4JS38W/q/8k4Njhdz279Cs8QtPwzqUhnX5K NeyLtHCUzclenJ2RRKUh8X1mhQH7EmNszHu/S0LhOvuLn3F/HGPKL4m/tS8LMw/6 K+VE3mJzb0FE/2rQs7rZ25rLOdZuhy+FPWBK6B+yMS+RPNhsSu1DPFSkc+7mJ4IC ypA3l8mCvrpym+MUN6fCWd33ukn2Cvql6N/0f055uBNqMg+thvH7uSfykveKjb4J i5u+D0aaz+tK+7EJjlPZXU/lQe4Vnqj/dLH9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGL2IyIj0V3Fppve4842Z1LyoAVswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0dMMkl5SWowVjNGcHB2ZTQ4 NDJaMUx5b0FWcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2mgwDQYJKoZIhvcNAQELBQADggEBAJviZT0Z+W34yq7DP1aRCw6u99JMu20zqB8Y yS3WO5Gh09pZ1S3+QxTALtVOdhpqw7M8onQzYVW79Uht9wNsHmc/U1IpV6nOd5Lq fjIQUuSK20fBuRp/tIq4YuPbM3Vzp+5pHvawrAXzYGXmTVOwaL8gdpy3rIWT9IZ+ A97/eREqOqqSZaNtKckjoznW6teIrQlwmuJrAPtCAcq1hnwAir7U8fi5gHT2zN3h 2VAA4BXp/Q7H/3YgZdyg+01XSGn4dKr7CY7FGsyyT5m7xCTUS00/jg2H0+bRiyIa KsTpUFgJHAnfkikh0rUFonTPXvuL+U1OOLVpVL+r+NCPeBn7Gek= -----END CERTIFICATE-----Generated at Fri Apr 18 16:40:25 2025 by rpki-client