$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igsvXnIntS0X0D_HhV3cH_hEw8A.roa File: igsvXnIntS0X0D_HhV3cH_hEw8A.roa (raw, json) Hash identifier: yI4N2AnrLDWVwgMaodkvOREY/oZPNXc5e1eUWHpvcmU= Subject key identifier: 8A:0B:2F:5E:72:27:B5:2D:17:D0:3F:C7:85:5D:DC:1F:F8:44:C3:C0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2474 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igsvXnIntS0X0D_HhV3cH_hEw8A.roa Signing time: Mon 10 Feb 2025 14:18:39 +0000 ROA not before: Mon 10 Feb 2025 14:18:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.216.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9332 (0x2474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8A0B2F5E7227B52D17D03FC7855DDC1FF844C3C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:f5:8a:99:08:e0:19:e8:3d:c9:58:d7:f8: ea:41:71:df:25:5c:27:91:0b:9c:72:0c:2b:23:fe: b4:2e:f8:3e:e0:7c:f6:f7:b2:e1:35:46:82:ba:7b: d7:23:51:27:91:b9:53:82:83:eb:1f:01:d6:64:ec: 65:54:65:e0:cb:58:75:ab:fd:b9:c6:7b:c4:ef:c7: 39:3f:42:5c:c3:b6:9b:0d:88:d6:19:5b:c7:93:9b: b0:24:ef:4e:3c:c1:7d:fb:f2:9f:2e:67:22:7f:d5: a0:47:fa:74:6e:f8:de:d4:63:a8:88:5d:3a:e1:ac: e9:61:ea:a1:2d:79:34:a0:8a:fb:13:8c:64:ee:45: f4:09:53:23:67:dd:8e:da:49:de:4e:47:ff:37:62: b6:db:66:b2:d8:ff:cf:9e:f7:00:db:1c:f9:a7:c8: 28:5e:9e:d9:4c:25:5a:8d:9a:f9:c5:f9:52:bb:7c: fc:5c:b4:41:09:4d:de:93:84:4b:d0:55:2a:d6:d6: 14:77:9f:bc:5f:b6:e3:47:c2:9c:48:63:a2:fb:9e: 0e:29:41:42:5c:92:39:18:da:f4:b2:4e:ee:79:58: 8d:a2:c4:15:8b:ea:22:f7:50:f6:83:70:8b:11:47: b1:cc:ca:90:1e:86:95:93:f5:38:46:be:e7:ae:f1: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0B:2F:5E:72:27:B5:2D:17:D0:3F:C7:85:5D:DC:1F:F8:44:C3:C0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igsvXnIntS0X0D_HhV3cH_hEw8A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.216.0/21 Signature Algorithm: sha256WithRSAEncryption 27:71:06:10:fd:cc:27:34:a5:88:be:f0:01:c1:c3:b7:67:6d: 37:c7:c3:9f:8c:21:27:0d:19:97:35:70:39:94:cb:d1:33:da: 0d:75:7f:f0:bd:3d:66:09:ab:01:f9:1a:9e:c0:78:6c:1c:af: 71:65:ef:37:6a:92:c6:2c:55:5d:70:9f:20:53:99:86:31:d5: 41:98:be:55:73:19:af:9d:7c:67:9c:05:d8:d4:6a:e1:ea:62: 16:43:ae:08:b8:ce:28:6c:df:5f:7a:58:3f:3c:3f:3a:7c:01: 70:a6:5f:ea:ba:d2:e4:ab:7f:4b:79:16:3b:4c:24:39:da:09: 98:7c:ab:1b:46:6c:bf:33:7c:35:b6:88:1f:7c:4c:99:30:85: 62:6d:b6:46:a1:70:92:a7:73:73:41:71:fd:01:be:23:a9:f4: d1:d6:4d:db:86:94:ae:a1:f9:ab:43:b3:5b:bb:ea:70:a0:00: 9e:27:81:ba:66:53:6c:6a:8d:9f:ff:58:f1:75:33:2b:d8:a6: 1b:28:22:2d:f9:d2:dc:dd:f7:b4:64:dc:30:39:d2:4c:d9:dd: c9:06:21:ef:53:55:67:0b:e3:59:27:ce:e5:b4:2f:65:08:1c: be:c9:3d:c6:ed:f8:a4:ab:0a:a6:ce:fb:18:5f:01:b9:24:fc: f3:38:7e:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhBMEIyRjVFNzIyN0I1 MkQxN0QwM0ZDNzg1NUREQzFGRjg0NEMzQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnMfWKmQjgGeg9yVjX+OpBcd8lXCeRC5xyDCsj/rQu+D7gfPb3 suE1RoK6e9cjUSeRuVOCg+sfAdZk7GVUZeDLWHWr/bnGe8Tvxzk/QlzDtpsNiNYZ W8eTm7Ak7048wX378p8uZyJ/1aBH+nRu+N7UY6iIXTrhrOlh6qEteTSgivsTjGTu RfQJUyNn3Y7aSd5OR/83YrbbZrLY/8+e9wDbHPmnyChentlMJVqNmvnF+VK7fPxc tEEJTd6ThEvQVSrW1hR3n7xftuNHwpxIY6L7ng4pQUJckjkY2vSyTu55WI2ixBWL 6iL3UPaDcIsRR7HMypAehpWT9ThGvueu8ejDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUigsvXnIntS0X0D/HhV3cH/hEw8AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2lnc3ZYbkludFMwWDBEX0ho VjNjSF9oRXc4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2tgwDQYJKoZIhvcNAQELBQADggEBACdxBhD9zCc0pYi+8AHBw7dnbTfHw5+MIScN GZc1cDmUy9Ez2g11f/C9PWYJqwH5Gp7AeGwcr3Fl7zdqksYsVV1wnyBTmYYx1UGY vlVzGa+dfGecBdjUauHqYhZDrgi4zihs3196WD88Pzp8AXCmX+q60uSrf0t5FjtM JDnaCZh8qxtGbL8zfDW2iB98TJkwhWJttkahcJKnc3NBcf0BviOp9NHWTduGlK6h +atDs1u76nCgAJ4ngbpmU2xqjZ//WPF1MyvYphsoIi350tzd97Rk3DA50kzZ3ckG Ie9TVWcL41knzuW0L2UIHL7JPcbt+KSrCqbO+xhfAbkk/PM4fnk= -----END CERTIFICATE-----Generated at Fri Apr 18 16:48:05 2025 by rpki-client