$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTxdoHkJCiaX_JfcMA4tBoet7xI.roa File: LTxdoHkJCiaX_JfcMA4tBoet7xI.roa (raw, json) Hash identifier: KICA1XJu7Xq23P4LuTEkmLSGVG+XKptJkcVx4+A1kt8= Subject key identifier: 2D:3C:5D:A0:79:09:0A:26:97:FC:97:DC:30:0E:2D:06:87:AD:EF:12 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23E6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTxdoHkJCiaX_JfcMA4tBoet7xI.roa Signing time: Mon 10 Feb 2025 14:18:03 +0000 ROA not before: Mon 10 Feb 2025 14:18:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9190 (0x23e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2D3C5DA079090A2697FC97DC300E2D0687ADEF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:62:97:72:d2:26:cd:76:70:6f:db:af:8b: 39:5b:09:40:00:67:11:81:f5:ab:4d:87:87:02:5e: 98:39:70:3c:a1:df:5c:50:4d:38:d6:b3:46:e3:8a: 65:99:fa:1e:4a:e0:b7:6f:c8:9e:72:30:1c:59:e3: 3f:a2:80:6d:5b:55:76:1a:bb:b7:e6:e2:a8:45:52: f2:74:fd:29:2f:7d:eb:84:50:af:ac:ab:d9:1a:d3: 95:d4:06:12:1f:c5:21:57:aa:57:75:bc:7d:ed:e6: fc:4e:78:f2:f1:95:c9:6b:15:da:7e:f2:ab:40:37: 46:2d:75:2b:e2:8d:7a:72:c6:5e:90:51:02:3d:08: 73:eb:c4:85:bc:b0:a2:a0:c7:e5:4e:70:40:92:54: 67:4b:7f:4b:d3:91:ff:04:87:7c:51:1e:92:f7:b6: 98:17:dc:4d:d6:a2:34:45:52:9e:f8:66:d9:c8:b9: 2c:ea:53:29:7d:9f:a3:52:35:76:9b:05:b5:dd:7f: c3:03:e7:73:b3:80:55:1e:82:86:a7:56:68:7e:b0: 21:e2:b0:bb:67:d2:62:94:63:0b:c7:1d:bf:97:f1: a5:99:d5:61:ad:b9:3d:5e:50:b4:5b:96:91:62:25: c7:3e:4d:00:3c:b1:a1:08:2c:28:3b:8f:4b:08:2c: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3C:5D:A0:79:09:0A:26:97:FC:97:DC:30:0E:2D:06:87:AD:EF:12 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTxdoHkJCiaX_JfcMA4tBoet7xI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.0.0/19 Signature Algorithm: sha256WithRSAEncryption 3b:68:f7:f1:45:79:55:90:93:5e:21:41:eb:94:ee:f0:fd:52: 46:6d:f0:06:2f:d3:9a:7e:dd:b7:4d:6b:32:7d:19:95:73:ac: 14:45:56:b7:bb:d0:5c:ea:17:82:61:41:25:c2:ca:1b:73:65: af:8f:29:96:7a:e4:d0:1a:1e:c6:bc:74:5d:c7:14:bc:07:24: ed:f7:94:d2:a7:a6:e4:ac:37:5a:17:3b:39:dd:81:ed:00:55: 4d:48:97:a0:83:ed:b5:2f:f8:45:dc:2a:68:80:7c:8b:c6:da: 77:37:49:4b:3a:61:58:fa:ba:57:da:a8:f0:86:24:9d:66:6a: ef:c0:f9:27:4c:87:10:fc:b3:70:ec:49:80:74:df:93:8e:47: 4e:ea:83:2d:e0:57:c6:f3:c0:a4:b2:1a:5f:00:be:f8:b6:ad: 1e:63:77:c3:fd:da:94:98:82:ae:6c:29:ba:52:1f:dd:f5:35: 05:8a:71:c2:01:47:f6:a6:18:03:74:fa:5b:34:b9:8d:ea:fd: 1d:3d:ea:3b:f9:44:9e:0e:bf:74:8e:a5:83:aa:4a:3c:cc:27: 19:ce:46:9c:d8:b7:77:a8:d8:50:9a:12:fd:9d:87:b3:ae:a6: 71:59:90:6a:40:ef:af:bb:53:2e:ca:57:cb:26:96:3a:0a:00: 2b:9d:f1:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJEM0M1REEwNzkwOTBB MjY5N0ZDOTdEQzMwMEUyRDA2ODdBREVGMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/EWKXctImzXZwb9uvizlbCUAAZxGB9atNh4cCXpg5cDyh31xQ TTjWs0bjimWZ+h5K4LdvyJ5yMBxZ4z+igG1bVXYau7fm4qhFUvJ0/SkvfeuEUK+s q9ka05XUBhIfxSFXqld1vH3t5vxOePLxlclrFdp+8qtAN0YtdSvijXpyxl6QUQI9 CHPrxIW8sKKgx+VOcECSVGdLf0vTkf8Eh3xRHpL3tpgX3E3WojRFUp74ZtnIuSzq Uyl9n6NSNXabBbXdf8MD53OzgFUegoanVmh+sCHisLtn0mKUYwvHHb+X8aWZ1WGt uT1eULRblpFiJcc+TQA8saEILCg7j0sILFsXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULTxdoHkJCiaX/JfcMA4tBoet7xIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xUeGRvSGtKQ2lhWF9KZmNN QTR0Qm9ldDd4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0 2gAwDQYJKoZIhvcNAQELBQADggEBADto9/FFeVWQk14hQeuU7vD9UkZt8AYv05p+ 3bdNazJ9GZVzrBRFVre70FzqF4JhQSXCyhtzZa+PKZZ65NAaHsa8dF3HFLwHJO33 lNKnpuSsN1oXOzndge0AVU1Il6CD7bUv+EXcKmiAfIvG2nc3SUs6YVj6ulfaqPCG JJ1mau/A+SdMhxD8s3DsSYB035OOR07qgy3gV8bzwKSyGl8Avvi2rR5jd8P92pSY gq5sKbpSH931NQWKccIBR/amGAN0+ls0uY3q/R096jv5RJ4Ov3SOpYOqSjzMJxnO RpzYt3eo2FCaEv2dh7OupnFZkGpA76+7Uy7KV8smljoKACud8aw= -----END CERTIFICATE-----Generated at Fri Apr 18 16:46:01 2025 by rpki-client