$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f84-xoZgpdAq6HjoO8IAFQzftLM.roa File: f84-xoZgpdAq6HjoO8IAFQzftLM.roa (raw, json) Hash identifier: o+x+5MmtHIfhQGpMa6VkTMsXBW7e1Jc3hIZob0IKAHs= Subject key identifier: 7F:CE:3E:C6:86:60:A5:D0:2A:E8:78:E8:3B:C2:00:15:0C:DF:B4:B3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23DE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f84-xoZgpdAq6HjoO8IAFQzftLM.roa Signing time: Mon 10 Feb 2025 14:18:01 +0000 ROA not before: Mon 10 Feb 2025 14:18:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9182 (0x23de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7FCE3EC68660A5D02AE878E83BC200150CDFB4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:0e:0f:27:c3:dd:6a:6a:21:44:8c:54:e4: f4:10:37:6f:3c:df:97:6c:2e:d8:fd:f4:36:b6:02: 3d:ea:f5:32:1a:37:67:97:2b:cb:2b:0b:61:b6:2f: 6c:11:12:f5:1e:ab:2c:29:49:9a:0e:06:7c:80:4b: 0d:aa:21:90:7b:6f:6b:a6:9e:e3:36:70:20:9f:e2: 84:5f:bf:7f:8d:7d:48:2d:f0:b0:09:57:d8:2f:ad: af:8e:47:77:d2:55:a7:09:9f:64:f4:ef:13:0c:dc: 6b:8f:dd:52:a2:16:44:fb:5b:e2:70:54:30:30:17: ae:49:08:67:66:a4:3a:80:67:46:7f:38:d9:dc:f0: fa:41:d9:a6:16:59:b8:04:88:75:6a:79:f0:b2:6c: 0c:88:cd:da:fd:20:8d:9a:e8:58:3d:18:39:b7:2b: 2a:ce:5e:52:75:ac:79:85:1e:b9:c8:ab:ad:eb:f9: 3f:18:c4:70:1e:47:aa:78:0d:a6:69:10:8b:fe:7a: d8:31:2c:e5:f6:58:28:55:1d:d5:a1:d2:b2:d4:1e: 63:0b:5c:0f:50:05:b3:82:40:46:d5:d8:2b:ab:ab: 5f:a5:bf:50:2e:b1:dd:11:2f:f5:8d:8f:40:6a:bb: 4f:69:b8:f6:94:62:ad:e8:98:61:eb:85:95:a2:c2: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CE:3E:C6:86:60:A5:D0:2A:E8:78:E8:3B:C2:00:15:0C:DF:B4:B3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f84-xoZgpdAq6HjoO8IAFQzftLM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.32.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:d7:ff:04:76:10:a2:2e:34:ee:66:85:fc:3f:97:a5:3c:b5: 0f:49:97:c7:eb:7b:9c:de:f4:5f:07:25:37:57:18:bf:05:fc: 5f:3d:ae:14:ab:b6:ea:e3:53:d8:d8:a7:41:89:fa:8a:02:7f: 89:20:06:49:78:4d:80:5e:5b:4a:17:33:2d:0c:d6:a1:c3:eb: 47:59:f1:e7:d7:6d:d9:4f:a3:58:09:80:b6:02:c6:5b:14:ab: 7b:2e:ce:14:01:5f:a3:af:d2:73:7b:bf:2b:35:d3:cf:12:11: 88:9a:96:1b:ff:30:6f:2b:4d:bd:d5:be:40:67:1a:fc:5f:05: 92:d6:b7:1d:57:7e:69:06:a7:73:23:30:28:f0:61:1c:18:d3: 71:be:80:96:7f:58:06:77:0a:1c:34:a3:fd:d5:7b:d6:56:b6: 3f:30:e7:78:b7:de:2f:6d:af:66:39:08:d0:0b:0f:12:d6:c7: b8:65:38:09:5c:07:ff:ab:75:13:c4:41:7e:5c:c5:8a:b1:81: 44:cc:6c:32:d4:60:db:b7:8b:69:84:53:85:51:96:2c:af:bf: e6:8d:35:67:80:c9:78:b7:4f:ed:a0:51:d4:42:66:e7:e8:9a: 8b:3e:7b:48:3b:ba:5f:09:51:b1:2a:29:c6:56:ab:d5:83:c2: ba:9b:35:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdGQ0UzRUM2ODY2MEE1 RDAyQUU4NzhFODNCQzIwMDE1MENERkI0QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNRw4PJ8PdamohRIxU5PQQN28835dsLtj99Da2Aj3q9TIaN2eX K8srC2G2L2wREvUeqywpSZoOBnyASw2qIZB7b2umnuM2cCCf4oRfv3+NfUgt8LAJ V9gvra+OR3fSVacJn2T07xMM3GuP3VKiFkT7W+JwVDAwF65JCGdmpDqAZ0Z/ONnc 8PpB2aYWWbgEiHVqefCybAyIzdr9II2a6Fg9GDm3KyrOXlJ1rHmFHrnIq63r+T8Y xHAeR6p4DaZpEIv+etgxLOX2WChVHdWh0rLUHmMLXA9QBbOCQEbV2Curq1+lv1Au sd0RL/WNj0Bqu09puPaUYq3omGHrhZWiwsvpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUf84+xoZgpdAq6HjoO8IAFQzftLMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2Y4NC14b1pncGRBcTZIam9P OElBRlF6ZnRMTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2iAwDQYJKoZIhvcNAQELBQADggEBAFzX/wR2EKIuNO5mhfw/l6U8tQ9Jl8fre5ze 9F8HJTdXGL8F/F89rhSrturjU9jYp0GJ+ooCf4kgBkl4TYBeW0oXMy0M1qHD60dZ 8efXbdlPo1gJgLYCxlsUq3suzhQBX6Ov0nN7vys1088SEYialhv/MG8rTb3VvkBn GvxfBZLWtx1XfmkGp3MjMCjwYRwY03G+gJZ/WAZ3Chw0o/3Ve9ZWtj8w53i33i9t r2Y5CNALDxLWx7hlOAlcB/+rdRPEQX5cxYqxgUTMbDLUYNu3i2mEU4VRliyvv+aN NWeAyXi3T+2gUdRCZufomos+e0g7ul8JUbEqKcZWq9WDwrqbNVI= -----END CERTIFICATE-----Generated at Fri Apr 18 16:48:03 2025 by rpki-client