$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HE9hwrdJ26z7xYI0JJBAWzYb250.roa File: HE9hwrdJ26z7xYI0JJBAWzYb250.roa (raw, json) Hash identifier: UlO8f3Lc8VhA9s4lb58xs9zvkjpNYEjFbbWJTOM2D2Y= Subject key identifier: 1C:4F:61:C2:B7:49:DB:AC:FB:C5:82:34:24:90:40:5B:36:1B:DB:9D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24C9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HE9hwrdJ26z7xYI0JJBAWzYb250.roa Signing time: Mon 10 Feb 2025 14:19:01 +0000 ROA not before: Mon 10 Feb 2025 14:19:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 180.218.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9417 (0x24c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:19:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1C4F61C2B749DBACFBC582342490405B361BDB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:18:c5:e3:7e:46:10:07:5c:0f:fd:1f:0e:ae: 1b:a7:6a:f2:b6:18:6a:9a:67:ef:28:56:b2:56:f1: a7:cf:48:8f:7f:18:69:d5:05:c2:f3:51:bc:7d:53: 7e:a5:c7:8a:c9:74:ce:0b:b8:87:95:2c:be:5b:51: bd:56:8c:1c:d9:79:bb:ae:07:82:83:0a:9b:51:0e: 11:8f:52:9b:74:ae:93:90:30:b9:75:eb:44:53:da: e9:ae:97:20:f4:b6:d6:6c:26:97:67:17:60:f7:c7: bf:93:74:2d:bc:27:30:14:01:46:2c:f9:c1:74:39: 5a:6a:46:6c:a9:34:b3:e4:0e:81:76:1f:a9:50:78: f8:d3:df:5e:f8:58:65:88:b0:a7:56:2a:55:33:4c: e4:1d:f1:df:9a:57:7f:3e:b1:ff:01:4f:fc:48:7e: cf:a2:0f:4b:4a:3b:3f:2e:52:d6:e7:38:d7:53:f8: 01:9c:f9:a0:05:40:cb:ee:32:36:c5:78:1d:7c:82: 70:0b:f8:0c:db:54:f2:7d:0c:32:29:9a:ec:6d:58: e3:8e:df:87:5b:bb:c6:d8:02:9e:01:d4:67:7c:c0: cb:75:ad:57:22:49:5e:a4:b5:30:a5:92:87:f5:1d: a1:b2:72:06:21:cf:03:af:64:fb:df:75:29:95:f5: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:61:C2:B7:49:DB:AC:FB:C5:82:34:24:90:40:5B:36:1B:DB:9D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HE9hwrdJ26z7xYI0JJBAWzYb250.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.80.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:d0:ff:22:a2:05:b6:4c:d5:6b:3b:84:07:ae:4e:e1:09:2e: ab:1f:21:0e:89:1e:38:0b:5f:a3:fc:86:f4:29:e4:73:74:71: 1f:06:75:07:b6:52:af:d0:02:0b:d1:81:a6:6b:5d:69:94:5e: d7:33:fc:6c:4c:84:5b:a9:7c:1c:1f:5d:dd:16:10:21:2c:49: f5:d0:1a:b0:89:7d:9f:f5:54:6d:4b:aa:9c:c0:fa:f7:fd:50: 80:e8:4a:22:44:73:59:93:bb:3b:3a:bf:39:45:e5:f8:ae:3f: 54:89:5d:29:fc:cc:4d:43:e3:94:34:a1:80:dd:6f:b2:7f:7c: 7c:f3:63:f5:9a:da:1e:c6:34:dd:82:78:c9:4a:70:72:ba:ed: 80:f7:f3:be:a4:7a:3c:83:e2:11:c2:91:cd:ca:60:ce:f4:d3: 3d:fc:6c:e5:15:d5:ed:6e:68:b9:96:f4:e8:80:68:bc:40:80: 66:4d:13:66:91:6d:88:bb:a7:ab:d8:af:c7:d2:48:03:22:ea: 23:35:8f:2a:62:35:9f:cb:ff:bb:c7:c7:7f:80:a6:48:cf:a3: 4f:63:fa:03:15:1f:15:42:78:ea:c9:ff:69:d1:ae:90:92:25: a9:07:f6:ae:72:88:08:5e:e6:00:a5:58:e4:3a:90:cd:a1:7b: 31:a3:c3:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE5MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFDNEY2MUMyQjc0OURC QUNGQkM1ODIzNDI0OTA0MDVCMzYxQkRCOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbGMXjfkYQB1wP/R8OrhunavK2GGqaZ+8oVrJW8afPSI9/GGnV BcLzUbx9U36lx4rJdM4LuIeVLL5bUb1WjBzZebuuB4KDCptRDhGPUpt0rpOQMLl1 60RT2umulyD0ttZsJpdnF2D3x7+TdC28JzAUAUYs+cF0OVpqRmypNLPkDoF2H6lQ ePjT3174WGWIsKdWKlUzTOQd8d+aV38+sf8BT/xIfs+iD0tKOz8uUtbnONdT+AGc +aAFQMvuMjbFeB18gnAL+AzbVPJ9DDIpmuxtWOOO34dbu8bYAp4B1Gd8wMt1rVci SV6ktTClkof1HaGycgYhzwOvZPvfdSmV9eFNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHE9hwrdJ26z7xYI0JJBAWzYb250wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0hFOWh3cmRKMjZ6N3hZSTBK SkJBV3pZYjI1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2lAwDQYJKoZIhvcNAQELBQADggEBACzQ/yKiBbZM1Ws7hAeuTuEJLqsfIQ6JHjgL X6P8hvQp5HN0cR8GdQe2Uq/QAgvRgaZrXWmUXtcz/GxMhFupfBwfXd0WECEsSfXQ GrCJfZ/1VG1LqpzA+vf9UIDoSiJEc1mTuzs6vzlF5fiuP1SJXSn8zE1D45Q0oYDd b7J/fHzzY/Wa2h7GNN2CeMlKcHK67YD3876kejyD4hHCkc3KYM700z38bOUV1e1u aLmW9OiAaLxAgGZNE2aRbYi7p6vYr8fSSAMi6iM1jypiNZ/L/7vHx3+ApkjPo09j +gMVHxVCeOrJ/2nRrpCSJakH9q5yiAhe5gClWOQ6kM2hezGjw3E= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:42 2025 by rpki-client