$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lf-Yqqux84lxoTlhHjIi9siFGQM.roa File: Lf-Yqqux84lxoTlhHjIi9siFGQM.roa (raw, json) Hash identifier: IbaZD0RJJ9W8n8N9q6ihiIdrqCVys3FHYCi0lSqX0zg= Subject key identifier: 2D:FF:98:AA:AB:B1:F3:89:71:A1:39:61:1E:32:22:F6:C8:85:19:03 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24C8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lf-Yqqux84lxoTlhHjIi9siFGQM.roa Signing time: Mon 10 Feb 2025 14:19:00 +0000 ROA not before: Mon 10 Feb 2025 14:19:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9416 (0x24c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:19:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2DFF98AAABB1F38971A139611E3222F6C8851903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8a:61:08:b6:b1:b7:c6:0d:ab:b2:9d:ff:44: 7d:42:e5:11:87:f5:46:2d:c2:97:98:69:1f:0e:a1: 9d:82:47:69:74:95:09:d0:71:77:99:08:8a:90:15: 0a:d9:f0:7f:c1:6f:07:0d:ab:f0:9f:7d:a3:be:8c: db:8d:0f:24:5d:30:c7:f9:26:b2:d9:80:16:5f:dc: 3c:d0:9d:45:ec:da:e1:4f:d9:2a:ad:28:8f:07:76: 4e:2d:8b:08:53:16:cd:f1:21:c9:37:ae:21:6b:e6: 79:d3:9f:bc:df:cf:7e:5c:55:4f:29:e0:11:5d:ef: 17:f9:ec:d4:35:09:0c:c1:8e:99:28:79:49:16:f1: a4:5a:f0:0b:e5:1e:b5:ad:d8:11:3f:1c:10:b4:8e: 0a:20:67:5a:d1:d2:30:a0:8a:f2:bc:26:ff:b1:5d: 0d:26:69:0a:f0:61:fd:27:b9:02:0a:b5:3f:a8:ed: 0a:35:be:b8:f0:0c:76:cf:59:58:38:c4:a3:58:08: 74:9a:2c:9a:22:15:6f:96:6f:de:d7:e2:35:74:08: 5b:dd:54:0f:8e:e5:95:9d:54:a8:c5:9d:00:ee:8d: c0:42:ac:20:2a:41:a6:99:b4:59:d2:62:e3:93:99: 4c:82:65:46:31:8e:57:26:3e:bc:59:dd:79:f2:a4: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FF:98:AA:AB:B1:F3:89:71:A1:39:61:1E:32:22:F6:C8:85:19:03 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lf-Yqqux84lxoTlhHjIi9siFGQM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.192.0/19 Signature Algorithm: sha256WithRSAEncryption 59:99:a6:9e:b8:0a:9b:92:86:8c:a1:41:a4:c3:da:5b:f0:1f: 9d:d2:95:fb:99:b6:ad:19:b0:d0:2e:03:3c:ff:e9:37:c5:3c: 1e:9d:a5:94:fb:a2:fa:dc:7d:24:88:9e:45:40:88:66:cf:c7: 7c:9d:26:a0:f5:4d:52:ac:26:1a:c1:5f:3a:fc:55:59:e7:ee: 16:4c:18:60:ea:9b:69:e1:b2:14:d4:3e:4c:dd:60:2f:31:d3: e4:19:84:a7:f3:63:fc:91:0f:00:91:23:4d:ca:71:4f:65:55: b8:8c:9b:10:2a:2d:fe:9a:c1:34:ef:d6:e7:fe:07:92:07:56: 3d:17:72:ae:71:24:a0:c4:1a:f3:11:22:80:95:f3:db:d0:31: 42:62:71:df:fc:c9:b8:f8:d7:ea:b5:89:7b:21:5b:eb:5c:93: 94:7e:5d:1e:fe:16:01:6b:a0:fc:79:ac:d4:69:ef:bf:6a:b7: ee:50:75:cb:48:0a:f8:ee:fe:3d:06:16:d7:4c:d1:be:c0:30: 43:a9:23:cc:bf:4a:8c:42:96:97:c5:da:9a:fd:d1:ea:ae:da: 82:40:ee:83:cd:84:51:dc:79:01:0e:97:16:2c:a6:fd:bd:9c: c7:fe:25:b3:eb:69:bf:ce:c3:91:86:a5:a0:48:ce:0f:77:a2: 47:7b:db:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE5MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJERkY5OEFBQUJCMUYz ODk3MUExMzk2MTFFMzIyMkY2Qzg4NTE5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiimEItrG3xg2rsp3/RH1C5RGH9UYtwpeYaR8OoZ2CR2l0lQnQ cXeZCIqQFQrZ8H/BbwcNq/CffaO+jNuNDyRdMMf5JrLZgBZf3DzQnUXs2uFP2Sqt KI8Hdk4tiwhTFs3xIck3riFr5nnTn7zfz35cVU8p4BFd7xf57NQ1CQzBjpkoeUkW 8aRa8AvlHrWt2BE/HBC0jgogZ1rR0jCgivK8Jv+xXQ0maQrwYf0nuQIKtT+o7Qo1 vrjwDHbPWVg4xKNYCHSaLJoiFW+Wb97X4jV0CFvdVA+O5ZWdVKjFnQDujcBCrCAq QaaZtFnSYuOTmUyCZUYxjlcmPrxZ3XnypKvNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULf+Yqqux84lxoTlhHjIi9siFGQMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xmLVlxcXV4ODRseG9UbGhI aklpOXNpRkdRTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0 2sAwDQYJKoZIhvcNAQELBQADggEBAFmZpp64CpuShoyhQaTD2lvwH53SlfuZtq0Z sNAuAzz/6TfFPB6dpZT7ovrcfSSInkVAiGbPx3ydJqD1TVKsJhrBXzr8VVnn7hZM GGDqm2nhshTUPkzdYC8x0+QZhKfzY/yRDwCRI03KcU9lVbiMmxAqLf6awTTv1uf+ B5IHVj0Xcq5xJKDEGvMRIoCV89vQMUJicd/8ybj41+q1iXshW+tck5R+XR7+FgFr oPx5rNRp779qt+5QdctICvju/j0GFtdM0b7AMEOpI8y/SoxClpfF2pr90equ2oJA 7oPNhFHceQEOlxYspv29nMf+JbPrab/Ow5GGpaBIzg93okd727w= -----END CERTIFICATE-----Generated at Thu Apr 17 21:06:58 2025 by rpki-client