$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XaUw3C_CUwUPIRcA9_9T5p1R470.roa File: XaUw3C_CUwUPIRcA9_9T5p1R470.roa (raw, json) Hash identifier: 29ieYQoqZUY99Rko2UF35z6lRsvkzJxr3zk1y2gRy1U= Subject key identifier: 5D:A5:30:DC:2F:C2:53:05:0F:21:17:00:F7:FF:53:E6:9D:51:E3:BD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23C0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XaUw3C_CUwUPIRcA9_9T5p1R470.roa Signing time: Mon 10 Feb 2025 14:17:53 +0000 ROA not before: Mon 10 Feb 2025 14:17:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9152 (0x23c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5DA530DC2FC253050F211700F7FF53E69D51E3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:6a:d0:a3:2e:28:5c:ae:17:6f:34:a4:93: fd:65:d9:a9:b9:86:d1:b9:76:60:57:45:18:3a:96: c3:b8:55:4d:cc:a4:d5:cb:eb:2c:09:86:20:c3:35: e7:4c:7d:4e:63:31:a3:cc:28:b0:11:34:46:54:3a: 80:f2:0f:d4:79:87:a7:11:89:0d:aa:f6:10:74:ae: d7:df:40:12:1b:3a:38:3a:2b:fc:f7:44:54:a2:30: 92:5f:af:82:84:48:e5:e6:09:9f:d0:0b:ed:bc:e1: 9c:76:e7:6b:f2:5b:8f:2d:bb:47:f7:21:e7:75:5b: 80:fb:58:dd:e9:f2:d0:e3:1d:80:48:8d:d6:e2:b9: fd:5a:62:77:b1:2c:8c:01:e1:0f:91:28:71:f2:dc: 81:88:df:28:52:09:12:58:ac:c7:05:74:6a:1e:7d: 17:81:6a:d2:4e:8e:09:99:6f:09:6b:aa:92:c2:39: b7:62:fd:67:67:73:ea:15:24:a9:58:ca:68:94:62: 75:e6:a4:0f:7b:5b:07:e7:e7:de:72:fc:58:c9:0e: 62:d6:9a:ba:3b:b4:bb:b0:66:59:05:e0:f3:53:8c: f6:70:74:89:59:22:4e:40:d4:a6:fe:96:96:d1:0c: f0:68:09:6b:9e:32:af:19:c2:94:33:cd:38:64:40: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:30:DC:2F:C2:53:05:0F:21:17:00:F7:FF:53:E6:9D:51:E3:BD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XaUw3C_CUwUPIRcA9_9T5p1R470.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.184.0/21 Signature Algorithm: sha256WithRSAEncryption 11:cc:a4:5e:39:b7:c7:aa:cb:e1:c7:7d:e6:f0:fe:c2:cb:9a: 2d:c3:95:8f:fb:c6:7d:6f:01:48:d6:38:53:39:5c:1c:f6:f8: 55:1a:8b:d3:f9:23:79:02:c3:4d:9c:87:ec:86:46:60:65:c7: 0d:ed:b0:88:2e:4d:bd:25:6e:7a:ec:e4:e3:4a:f3:e3:7a:58: 0d:a9:a7:9c:25:16:38:70:16:a9:a3:05:00:3d:b3:06:05:69: e4:82:fb:f6:a8:e0:e0:b8:b4:01:be:8a:f4:ce:9d:84:3b:03: bb:1c:ef:08:65:50:04:25:00:ed:80:2f:41:38:2f:15:12:77: 43:71:0f:cc:9c:71:fb:3a:91:f8:cd:e9:15:0a:43:bd:78:5b: 07:2d:37:2f:66:76:e3:b1:c6:b4:c9:04:32:46:89:80:e6:66: f2:64:06:3e:be:c9:31:80:a6:b9:cb:46:c7:a3:03:cb:8f:23: 7d:9d:25:1d:07:79:29:71:d7:91:4e:45:b8:7a:e9:3b:8b:ea: 70:da:c7:d0:23:67:b2:f1:d2:ee:62:7c:79:31:57:a9:5c:83: 9a:ae:39:81:37:e7:32:f1:8b:66:ad:b4:46:36:49:1a:fd:6e: ca:c7:d7:5d:78:f3:55:20:be:2f:12:5f:cf:3c:8e:6a:56:14: 0f:44:87:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVEQTUzMERDMkZDMjUz MDUwRjIxMTcwMEY3RkY1M0U2OUQ1MUUzQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+2mrQoy4oXK4XbzSkk/1l2am5htG5dmBXRRg6lsO4VU3MpNXL 6ywJhiDDNedMfU5jMaPMKLARNEZUOoDyD9R5h6cRiQ2q9hB0rtffQBIbOjg6K/z3 RFSiMJJfr4KESOXmCZ/QC+284Zx252vyW48tu0f3Ied1W4D7WN3p8tDjHYBIjdbi uf1aYnexLIwB4Q+RKHHy3IGI3yhSCRJYrMcFdGoefReBatJOjgmZbwlrqpLCObdi /Wdnc+oVJKlYymiUYnXmpA97Wwfn595y/FjJDmLWmro7tLuwZlkF4PNTjPZwdIlZ Ik5A1Kb+lpbRDPBoCWueMq8ZwpQzzThkQAqDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXaUw3C/CUwUPIRcA9/9T5p1R470wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1hhVXczQ19DVXdVUElSY0E5 XzlUNXAxUjQ3MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2rgwDQYJKoZIhvcNAQELBQADggEBABHMpF45t8eqy+HHfebw/sLLmi3DlY/7xn1v AUjWOFM5XBz2+FUai9P5I3kCw02ch+yGRmBlxw3tsIguTb0lbnrs5ONK8+N6WA2p p5wlFjhwFqmjBQA9swYFaeSC+/ao4OC4tAG+ivTOnYQ7A7sc7whlUAQlAO2AL0E4 LxUSd0NxD8yccfs6kfjN6RUKQ714WwctNy9mduOxxrTJBDJGiYDmZvJkBj6+yTGA prnLRsejA8uPI32dJR0HeSlx15FORbh66TuL6nDax9AjZ7Lx0u5ifHkxV6lcg5qu OYE35zLxi2attEY2SRr9bsrH111481Ugvi8SX888jmpWFA9Eh7g= -----END CERTIFICATE-----Generated at Fri Apr 18 16:45:30 2025 by rpki-client