$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eRLHJR4oU9tvjZEFGqei7vPxpp0.roa File: eRLHJR4oU9tvjZEFGqei7vPxpp0.roa (raw, json) Hash identifier: IE9p0hwNaX8PVNLtelF6z/YoKejB/s2cdkRNyDr/COY= Subject key identifier: 79:12:C7:25:1E:28:53:DB:6F:8D:91:05:1A:A7:A2:EE:F3:F1:A6:9D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23BF Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eRLHJR4oU9tvjZEFGqei7vPxpp0.roa Signing time: Mon 10 Feb 2025 14:17:53 +0000 ROA not before: Mon 10 Feb 2025 14:17:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9151 (0x23bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7912C7251E2853DB6F8D91051AA7A2EEF3F1A69D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:56:7b:2e:20:ef:33:70:9f:ae:e7:5d:0f: 33:e6:f2:66:a3:a9:12:90:70:0b:b8:21:12:be:35: a5:a2:9e:a0:4d:8a:29:fa:16:b8:68:eb:27:d2:0f: 37:07:ab:d5:4d:63:d3:d7:39:8a:d9:4a:4f:39:e7: 36:0a:a0:56:19:72:96:9a:dc:b3:1e:1d:0f:18:fb: 1b:33:f7:c6:72:94:2f:cb:0a:ce:35:46:96:50:32: 97:87:8b:d2:af:f4:1f:95:8a:d0:d6:83:d1:3f:34: 28:8b:f1:4e:ec:51:00:11:be:c8:f1:18:6f:94:86: 9e:77:e1:23:78:ce:c8:4e:ac:70:3b:13:a0:fd:92: a1:f3:f6:13:81:ff:1d:7e:65:ff:ce:25:8f:ff:88: 2d:47:ef:a2:f9:a3:dd:30:f0:69:3d:5f:82:ae:d8: 24:7a:bd:7e:c9:3b:b1:37:b9:89:36:54:11:3a:13: 22:a3:02:4b:53:42:ce:d3:a0:76:f8:4c:69:2a:0d: 69:0d:41:46:3f:50:a4:26:94:03:01:af:82:ca:fc: 3e:d0:4e:26:fa:87:0c:7c:54:2e:db:9e:1e:63:2a: 73:a2:19:5c:5e:78:7f:19:66:29:96:9f:37:dd:31: 3e:0f:79:18:52:a6:f6:ba:c1:56:36:be:90:71:71: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:12:C7:25:1E:28:53:DB:6F:8D:91:05:1A:A7:A2:EE:F3:F1:A6:9D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eRLHJR4oU9tvjZEFGqei7vPxpp0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.192.0/21 Signature Algorithm: sha256WithRSAEncryption 48:25:f1:2b:f0:09:c6:17:42:92:50:0f:a2:06:8c:e7:64:39: 08:e0:6b:3d:d2:21:cd:b1:c6:f0:7d:22:53:4a:55:17:7b:e0: 7d:04:8a:a3:83:ea:d1:15:e9:6c:93:d1:34:bc:90:2e:a2:30: 53:c3:45:fe:13:35:cd:b6:98:f3:e2:f9:51:70:ff:eb:c5:15: 5b:ee:a8:2f:d4:e5:88:6d:be:bc:24:6b:21:32:e8:a6:8e:ad: 3b:40:7b:e4:29:ad:49:17:56:35:19:8f:f4:0f:9d:81:fd:37: bd:7a:0f:a4:21:00:42:79:02:7e:a1:87:72:f9:f8:3d:96:3a: 84:49:46:aa:fa:48:bd:11:6a:31:00:af:1d:bb:52:0b:18:39: 74:5a:35:61:8e:75:c9:23:10:3e:e4:b4:c9:9f:eb:fe:71:8e: e3:92:59:d8:a3:f1:f8:fa:f3:fe:ea:f6:42:44:f2:ab:41:b2: 27:91:28:0d:ff:ea:fb:c2:5a:70:ec:1d:47:99:43:e9:88:c6: 83:52:9d:12:0c:98:7d:6a:97:14:a1:c9:81:46:39:8c:be:af: 66:20:59:4b:49:d3:32:f6:1e:81:17:9a:b5:9b:b4:ad:ce:3c: e1:84:4f:c7:a9:0c:7e:a3:ce:98:72:bc:9b:83:37:b8:0d:f4: b2:32:bc:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5MTJDNzI1MUUyODUz REI2RjhEOTEwNTFBQTdBMkVFRjNGMUE2OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKFVZ7LiDvM3CfruddDzPm8majqRKQcAu4IRK+NaWinqBNiin6 Frho6yfSDzcHq9VNY9PXOYrZSk855zYKoFYZcpaa3LMeHQ8Y+xsz98ZylC/LCs41 RpZQMpeHi9Kv9B+VitDWg9E/NCiL8U7sUQARvsjxGG+Uhp534SN4zshOrHA7E6D9 kqHz9hOB/x1+Zf/OJY//iC1H76L5o90w8Gk9X4Ku2CR6vX7JO7E3uYk2VBE6EyKj AktTQs7ToHb4TGkqDWkNQUY/UKQmlAMBr4LK/D7QTib6hwx8VC7bnh5jKnOiGVxe eH8ZZimWnzfdMT4PeRhSpva6wVY2vpBxcZZtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeRLHJR4oU9tvjZEFGqei7vPxpp0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2VSTEhKUjRvVTl0dmpaRUZH cWVpN3ZQeHBwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2sAwDQYJKoZIhvcNAQELBQADggEBAEgl8SvwCcYXQpJQD6IGjOdkOQjgaz3SIc2x xvB9IlNKVRd74H0EiqOD6tEV6WyT0TS8kC6iMFPDRf4TNc22mPPi+VFw/+vFFVvu qC/U5YhtvrwkayEy6KaOrTtAe+QprUkXVjUZj/QPnYH9N716D6QhAEJ5An6hh3L5 +D2WOoRJRqr6SL0RajEArx27UgsYOXRaNWGOdckjED7ktMmf6/5xjuOSWdij8fj6 8/7q9kJE8qtBsieRKA3/6vvCWnDsHUeZQ+mIxoNSnRIMmH1qlxShyYFGOYy+r2Yg WUtJ0zL2HoEXmrWbtK3OPOGET8epDH6jzphyvJuDN7gN9LIyvBw= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:19 2025 by rpki-client