$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H8TZhCU0S30AyYJAePVTXi2ZTg4.roa File: H8TZhCU0S30AyYJAePVTXi2ZTg4.roa (raw, json) Hash identifier: Mc7J14DgV3ZWqGRjeqJJYtXZBO9E7Pp2/DKiwL4Kw8U= Subject key identifier: 1F:C4:D9:84:25:34:4B:7D:00:C9:82:40:78:F5:53:5E:2D:99:4E:0E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2359 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H8TZhCU0S30AyYJAePVTXi2ZTg4.roa Signing time: Mon 10 Feb 2025 14:17:29 +0000 ROA not before: Mon 10 Feb 2025 14:17:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 122.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9049 (0x2359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1FC4D98425344B7D00C9824078F5535E2D994E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:75:6c:fb:22:b9:78:bc:a5:2d:c1:7e:a9: 2b:5d:3c:54:27:6b:38:8c:98:83:5f:20:17:70:c5: 33:4d:20:1a:a0:93:19:5d:db:12:1e:f9:26:6b:2a: 78:de:44:57:a7:06:f7:af:e8:f1:24:30:db:c0:2d: 6a:fb:6e:f1:b1:74:d5:d3:0a:53:33:64:94:b1:48: 7b:37:42:5f:75:05:a0:72:9c:dd:ef:b9:68:7d:ce: 42:b4:20:d2:15:8e:22:c9:81:d4:26:a7:0f:b1:bd: 51:44:c8:d0:4c:78:98:f8:53:cc:02:92:35:99:e7: c1:1a:dc:bc:27:4d:8d:6c:41:b2:38:a3:74:cd:96: 7f:c6:74:37:de:1a:a1:d1:cf:7f:d7:df:35:0f:34: 61:c4:47:4e:bb:c3:fb:25:47:a6:11:17:ca:4c:45: eb:8e:b5:f5:4f:2d:67:83:43:97:77:0e:17:75:94: 77:e1:4f:8c:10:b1:ca:bb:5b:66:dd:13:47:62:a8: 14:f1:23:49:57:22:0a:03:96:6f:57:57:bb:a9:12: cf:b3:1c:65:7c:f7:d2:2a:98:a6:36:62:59:30:9d: a5:87:ca:cc:cd:12:b8:c7:92:90:3c:94:09:38:61: b9:ac:53:b3:f4:68:13:d8:25:03:01:0a:d8:f8:44: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:D9:84:25:34:4B:7D:00:C9:82:40:78:F5:53:5E:2D:99:4E:0E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H8TZhCU0S30AyYJAePVTXi2ZTg4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 41:55:05:af:14:f9:e6:01:e3:b8:72:24:75:a3:9e:1c:81:1a: 6e:2e:91:b7:8f:c6:93:7d:7f:c1:25:bb:e1:08:5f:22:9a:27: b2:fb:a9:96:dc:d1:c9:c2:ba:99:e7:71:9d:95:32:5d:d0:bc: da:d4:05:c5:b1:f5:5e:f3:08:53:e8:85:dd:20:9e:84:a1:c5: 1b:4b:ae:00:19:f4:cf:09:be:20:18:12:b9:2f:ac:18:7f:91: 12:2b:18:76:b9:78:12:71:43:52:13:34:b4:20:85:84:07:b7: 96:69:a3:de:2d:cc:c2:de:e4:96:4d:71:6b:ad:51:fd:26:30: c0:fa:e6:f2:31:4c:30:89:4c:5a:2d:90:7a:2e:28:ff:a3:e7: 21:ee:44:66:8c:26:90:c2:b6:3c:e6:c7:f4:33:16:10:09:c6: a5:f7:ee:81:cf:b9:cf:e3:17:64:b7:99:d7:ce:08:e5:87:be: 89:5d:b2:55:ba:d4:8e:f8:98:c9:26:db:a1:64:b6:14:72:47: 59:72:43:c7:aa:0c:0d:a3:2e:96:20:5e:ef:70:af:a7:c0:b2: 8b:ea:64:73:ee:4e:35:5b:d4:aa:96:ac:ac:38:6e:08:2b:7d: cf:e5:46:fb:6b:88:ce:5e:fb:1e:0d:09:94:cb:f5:24:c0:65: 28:36:ce:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGQzREOTg0MjUzNDRC N0QwMEM5ODI0MDc4RjU1MzVFMkQ5OTRFMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7wnVs+yK5eLylLcF+qStdPFQnaziMmINfIBdwxTNNIBqgkxld 2xIe+SZrKnjeRFenBvev6PEkMNvALWr7bvGxdNXTClMzZJSxSHs3Ql91BaBynN3v uWh9zkK0INIVjiLJgdQmpw+xvVFEyNBMeJj4U8wCkjWZ58Ea3LwnTY1sQbI4o3TN ln/GdDfeGqHRz3/X3zUPNGHER067w/slR6YRF8pMReuOtfVPLWeDQ5d3Dhd1lHfh T4wQscq7W2bdE0diqBTxI0lXIgoDlm9XV7upEs+zHGV899IqmKY2YlkwnaWHyszN ErjHkpA8lAk4YbmsU7P0aBPYJQMBCtj4REtRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUH8TZhCU0S30AyYJAePVTXi2ZTg4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0g4VFpoQ1UwUzMwQXlZSkFl UFZUWGkyWlRnNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 ZEAwDQYJKoZIhvcNAQELBQADggEBAEFVBa8U+eYB47hyJHWjnhyBGm4ukbePxpN9 f8Elu+EIXyKaJ7L7qZbc0cnCupnncZ2VMl3QvNrUBcWx9V7zCFPohd0gnoShxRtL rgAZ9M8JviAYErkvrBh/kRIrGHa5eBJxQ1ITNLQghYQHt5Zpo94tzMLe5JZNcWut Uf0mMMD65vIxTDCJTFotkHouKP+j5yHuRGaMJpDCtjzmx/QzFhAJxqX37oHPuc/j F2S3mdfOCOWHvoldslW61I74mMkm26FkthRyR1lyQ8eqDA2jLpYgXu9wr6fAsovq ZHPuTjVb1KqWrKw4bggrfc/lRvtriM5e+x4NCZTL9STAZSg2zkU= -----END CERTIFICATE-----Generated at Fri Apr 18 16:37:57 2025 by rpki-client