$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JAZL3zYfFo7YdckY8ZKPg9bkSfM.roa File: JAZL3zYfFo7YdckY8ZKPg9bkSfM.roa (raw, json) Hash identifier: SkNvq3CdfIbxqUXk/OHB9FXXJwCBcHBf/ivIFbJofdM= Subject key identifier: 24:06:4B:DF:36:1F:16:8E:D8:75:C9:18:F1:92:8F:83:D6:E4:49:F3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23AD Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JAZL3zYfFo7YdckY8ZKPg9bkSfM.roa Signing time: Mon 10 Feb 2025 14:17:48 +0000 ROA not before: Mon 10 Feb 2025 14:17:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9133 (0x23ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=24064BDF361F168ED875C918F1928F83D6E449F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:c2:e9:b4:61:bd:15:71:64:b8:da:54:e8: 97:ef:9a:e8:05:19:47:24:72:e7:1d:4a:d7:b8:2c: a8:38:52:e5:d1:ec:b2:b1:1b:c4:df:8a:25:89:d6: 5d:4e:ef:56:c8:5b:9a:05:29:e2:fb:92:7e:72:db: 1a:80:30:0a:cd:58:e2:48:e5:5b:91:fd:ad:66:1e: b4:f3:65:18:58:01:a4:8a:13:78:83:f1:0e:ab:69: 69:cb:07:7a:2c:c7:75:bd:c3:4b:1e:a4:80:85:21: 9c:60:01:2d:d4:9f:f1:cd:e4:36:eb:b0:c9:51:a0: 48:f6:1b:63:7a:bb:26:73:ed:cd:eb:2f:26:93:ce: 7f:17:89:1f:97:e7:d4:c8:55:86:4d:ef:18:ba:d4: 8a:4a:89:8e:d1:95:e3:45:11:09:4d:0e:a4:44:e0: e6:e0:34:c7:1a:71:b5:51:8e:16:a9:44:2a:7e:66: fc:61:b5:4e:43:c9:73:d9:ce:17:f2:4a:cb:64:52: 59:c0:85:a5:bd:ad:6d:19:d0:69:e0:b4:36:74:79: a6:5d:0a:15:f6:db:44:19:a5:db:2c:9c:7c:21:4f: 06:e4:32:65:06:c8:cb:2c:82:bb:b3:3d:3e:ac:57: 22:90:ee:b9:f6:c6:72:2c:35:ba:2e:cc:0c:f8:98: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:4B:DF:36:1F:16:8E:D8:75:C9:18:F1:92:8F:83:D6:E4:49:F3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JAZL3zYfFo7YdckY8ZKPg9bkSfM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.156.0/22 Signature Algorithm: sha256WithRSAEncryption 65:dd:1f:91:cd:87:d4:5a:31:41:4d:55:d5:2e:e5:e5:e5:e4: 9b:2a:b6:c0:1f:f1:a3:9a:1a:cd:0f:a5:fe:84:30:26:e0:5e: 11:4b:74:e5:67:c2:67:f0:c4:88:f4:5d:7c:a4:1e:bc:b4:48: 2b:70:41:a8:e0:15:1f:81:82:2d:0f:31:1e:e2:b6:66:dd:d1: 81:eb:34:1c:65:ac:39:ef:9b:a2:7d:52:2a:da:46:c6:d7:54: 1f:ec:34:72:c7:68:12:fb:16:e5:97:e1:23:b2:97:51:73:75: e6:dd:5a:84:fb:fb:cb:05:16:21:2d:5a:1d:98:45:75:c4:cb: 25:b0:19:50:78:77:ea:61:ef:6e:e1:22:84:1a:9f:04:ab:11: 58:e5:d2:51:0d:e3:6c:86:97:64:c9:01:61:00:cb:6a:4f:17: ba:01:0d:4a:9c:7a:3c:6f:0f:0e:dd:5e:f8:86:2c:32:bf:41: df:f5:45:aa:1d:6e:f2:df:25:d5:7a:54:29:2a:18:65:5e:ee: 6f:45:3a:47:8a:29:34:c7:65:8b:85:bd:b1:17:3a:f0:2b:65: a8:7d:89:1c:e1:35:73:2f:fe:2a:ac:52:37:64:95:0a:a7:4c: 90:ea:a3:fd:9a:d3:85:8a:5a:3d:e2:76:1d:2e:21:6b:44:7e: d0:dc:84:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0MDY0QkRGMzYxRjE2 OEVEODc1QzkxOEYxOTI4RjgzRDZFNDQ5RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC38LptGG9FXFkuNpU6JfvmugFGUckcucdSte4LKg4UuXR7LKx G8TfiiWJ1l1O71bIW5oFKeL7kn5y2xqAMArNWOJI5VuR/a1mHrTzZRhYAaSKE3iD 8Q6raWnLB3osx3W9w0sepICFIZxgAS3Un/HN5DbrsMlRoEj2G2N6uyZz7c3rLyaT zn8XiR+X59TIVYZN7xi61IpKiY7RleNFEQlNDqRE4ObgNMcacbVRjhapRCp+Zvxh tU5DyXPZzhfySstkUlnAhaW9rW0Z0GngtDZ0eaZdChX220QZpdssnHwhTwbkMmUG yMssgruzPT6sVyKQ7rn2xnIsNbouzAz4mHWPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJAZL3zYfFo7YdckY8ZKPg9bkSfMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pBWkwzellmRm83WWRja1k4 WktQZzlia1NmTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2pwwDQYJKoZIhvcNAQELBQADggEBAGXdH5HNh9RaMUFNVdUu5eXl5JsqtsAf8aOa Gs0Ppf6EMCbgXhFLdOVnwmfwxIj0XXykHry0SCtwQajgFR+Bgi0PMR7itmbd0YHr NBxlrDnvm6J9UiraRsbXVB/sNHLHaBL7FuWX4SOyl1FzdebdWoT7+8sFFiEtWh2Y RXXEyyWwGVB4d+ph727hIoQanwSrEVjl0lEN42yGl2TJAWEAy2pPF7oBDUqcejxv Dw7dXviGLDK/Qd/1RaodbvLfJdV6VCkqGGVe7m9FOkeKKTTHZYuFvbEXOvArZah9 iRzhNXMv/iqsUjdklQqnTJDqo/2a04WKWj3idh0uIWtEftDchFQ= -----END CERTIFICATE-----Generated at Fri Apr 18 16:56:40 2025 by rpki-client