$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L_p1bvd1_RH_V4sItD5yHs9G6qg.roa File: L_p1bvd1_RH_V4sItD5yHs9G6qg.roa (raw, json) Hash identifier: gp82GabUIqhXYxb6F/8N5C8Rs5Y4MdIW88K6H233NxE= Subject key identifier: 2F:FA:75:6E:F7:75:FD:11:FF:57:8B:08:B4:3E:72:1E:CF:46:EA:A8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 243A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L_p1bvd1_RH_V4sItD5yHs9G6qg.roa Signing time: Mon 10 Feb 2025 14:18:25 +0000 ROA not before: Mon 10 Feb 2025 14:18:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9274 (0x243a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2FFA756EF775FD11FF578B08B43E721ECF46EAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:a4:cb:48:26:21:c5:f0:ce:80:72:68:57: 49:0c:25:23:e7:45:7d:21:c9:80:6c:55:1b:72:25: d6:6e:ad:58:6e:d8:f7:82:88:3a:03:38:fa:95:48: 9c:29:73:43:37:a6:00:e4:f2:44:8d:58:d7:af:ee: 9e:3a:62:d9:b6:68:07:3b:c3:fd:f8:20:ee:4d:67: 70:46:ea:ea:0c:68:2f:e9:50:65:2a:2e:2b:28:90: e6:7b:ba:47:79:84:bd:ae:c6:7b:81:ae:9d:bf:55: 33:4a:01:63:45:0e:0c:01:6b:ad:b2:29:32:ae:4d: 41:bb:e5:e6:c5:86:fd:0c:37:e0:35:37:f7:27:f3: 1d:d6:67:12:45:30:d1:65:ea:67:86:c9:a3:3d:01: 18:93:16:d2:0a:04:62:57:b1:6a:b5:36:47:3f:f8: a9:93:a4:db:13:80:b2:02:af:f5:55:30:85:fe:51: 7e:77:3d:65:d3:d5:ea:c5:20:ef:85:5a:06:90:66: 28:d5:0d:7c:ca:30:20:45:23:b9:08:18:95:3d:9a: dd:8a:13:3c:f3:9f:fa:8a:43:63:75:b4:05:64:1f: 87:83:6d:bd:eb:b5:08:9b:41:7c:25:18:7b:59:4c: 86:ca:2e:96:b9:a0:fa:26:17:c6:01:94:0b:74:02: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FA:75:6E:F7:75:FD:11:FF:57:8B:08:B4:3E:72:1E:CF:46:EA:A8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L_p1bvd1_RH_V4sItD5yHs9G6qg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.72.0/21 Signature Algorithm: sha256WithRSAEncryption 36:9c:d0:01:56:8a:90:5c:67:e0:92:9c:73:d5:5d:80:e7:d5: 74:95:7f:43:95:20:4f:5f:39:3e:54:57:38:51:4b:cd:9f:1e: 59:2a:f8:f3:43:85:eb:cf:3d:51:fb:1c:ac:5a:21:7c:eb:48: f6:fc:1d:12:e2:58:b9:fe:4f:80:47:5a:65:54:0f:06:73:54: c6:09:88:f2:e5:a8:61:50:b6:f0:fb:21:4d:5b:21:8b:ab:b6: ac:8a:21:fb:cb:a7:b6:05:90:e4:62:87:37:4b:91:f7:df:46: 4f:d0:c5:ba:1b:4b:49:fd:5f:15:c5:aa:63:16:b7:03:00:18: 2b:70:bf:58:18:2a:9e:7e:e9:21:9e:d8:4e:6b:cb:6d:81:f2: b3:b8:4b:06:bc:c5:ae:b3:e9:bd:7b:dc:31:0e:be:f7:36:8b: 40:95:63:34:0e:68:a0:9e:29:cb:bf:17:0f:ab:53:a0:57:b1: 14:5f:91:1f:d4:10:a3:ae:67:dc:e8:e0:9a:f7:f0:42:cc:e2: 92:2a:47:77:26:bd:ad:c0:1a:c6:e6:27:5b:e3:b8:35:ea:27: 19:42:56:41:b3:1d:9a:51:2f:69:15:12:91:18:7d:f8:82:db: 13:cf:33:81:d0:c9:94:a9:28:61:44:62:b5:9f:f4:ca:da:55: 20:be:a6:46 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGRkE3NTZFRjc3NUZE MTFGRjU3OEIwOEI0M0U3MjFFQ0Y0NkVBQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFq6TLSCYhxfDOgHJoV0kMJSPnRX0hyYBsVRtyJdZurVhu2PeC iDoDOPqVSJwpc0M3pgDk8kSNWNev7p46Ytm2aAc7w/34IO5NZ3BG6uoMaC/pUGUq LisokOZ7ukd5hL2uxnuBrp2/VTNKAWNFDgwBa62yKTKuTUG75ebFhv0MN+A1N/cn 8x3WZxJFMNFl6meGyaM9ARiTFtIKBGJXsWq1Nkc/+KmTpNsTgLICr/VVMIX+UX53 PWXT1erFIO+FWgaQZijVDXzKMCBFI7kIGJU9mt2KEzzzn/qKQ2N1tAVkH4eDbb3r tQibQXwlGHtZTIbKLpa5oPomF8YBlAt0Am15AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUL/p1bvd1/RH/V4sItD5yHs9G6qgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xfcDFidmQxX1JIX1Y0c0l0 RDV5SHM5RzZxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2kgwDQYJKoZIhvcNAQELBQADggEBADac0AFWipBcZ+CSnHPVXYDn1XSVf0OVIE9f OT5UVzhRS82fHlkq+PNDhevPPVH7HKxaIXzrSPb8HRLiWLn+T4BHWmVUDwZzVMYJ iPLlqGFQtvD7IU1bIYurtqyKIfvLp7YFkORihzdLkfffRk/QxbobS0n9XxXFqmMW twMAGCtwv1gYKp5+6SGe2E5ry22B8rO4Swa8xa6z6b173DEOvvc2i0CVYzQOaKCe Kcu/Fw+rU6BXsRRfkR/UEKOuZ9zo4Jr38ELM4pIqR3cmva3AGsbmJ1vjuDXqJxlC VkGzHZpRL2kVEpEYffiC2xPPM4HQyZSpKGFEYrWf9MraVSC+pkY= -----END CERTIFICATE-----Generated at Fri Apr 18 16:47:55 2025 by rpki-client