$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ioGVJ40cZmJpOFP5FVGAQz92ZfI.roa File: ioGVJ40cZmJpOFP5FVGAQz92ZfI.roa (raw, json) Hash identifier: 4kUvLuIvELL+4EViiOlqSXfIpDYQ/je6NhkTRkp8ZM0= Subject key identifier: 8A:81:95:27:8D:1C:66:62:69:38:53:F9:15:51:80:43:3F:76:65:F2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23EB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ioGVJ40cZmJpOFP5FVGAQz92ZfI.roa Signing time: Mon 10 Feb 2025 14:18:05 +0000 ROA not before: Mon 10 Feb 2025 14:18:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9195 (0x23eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8A8195278D1C6662693853F9155180433F7665F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:bd:4a:2d:83:7a:ca:37:9b:54:1e:5b:b4: 21:46:2f:53:a4:13:a4:f8:9e:30:e9:fb:3d:63:d8: 4c:8d:b7:af:c7:45:ab:98:99:d5:02:85:a4:7a:3e: 7e:7d:3e:d6:d1:57:3f:f1:49:bf:95:25:9f:f6:90: 9f:93:60:8b:37:02:45:24:11:d8:9f:b5:b5:a2:9a: 79:b8:ad:7f:9b:af:30:1b:8c:10:bd:99:7c:1b:4c: a3:57:ee:b5:75:38:e6:8b:3e:99:26:12:d6:8f:70: a3:43:b0:0b:b1:00:13:7a:06:a0:cc:51:6f:56:69: 49:f8:68:00:56:5d:d2:0e:b3:65:24:14:1c:45:18: f4:58:fb:00:b7:5c:6b:93:0c:7b:1f:43:3e:69:4e: 4d:54:af:61:cb:a4:6f:e9:7a:cd:5f:b0:1d:af:f7: 28:dc:d9:48:08:10:c2:d7:7e:5e:b9:f2:7c:4e:19: e3:10:70:c4:dc:86:77:eb:11:d5:98:2f:10:df:56: 36:b7:24:90:36:55:73:c9:b8:7e:49:67:22:64:ba: 4f:b6:fe:85:3c:70:a0:6c:1d:35:d0:06:91:3a:97: 3d:48:68:de:9b:f8:25:56:b0:6e:89:d3:1a:26:0d: 0f:85:17:d8:1f:c2:b6:64:09:e8:6e:e1:48:eb:c4: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:81:95:27:8D:1C:66:62:69:38:53:F9:15:51:80:43:3F:76:65:F2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ioGVJ40cZmJpOFP5FVGAQz92ZfI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.208.0/21 Signature Algorithm: sha256WithRSAEncryption 75:2d:48:29:98:3e:bd:77:eb:9e:48:6c:99:3f:a6:17:64:3d: 74:02:cf:7b:57:6a:1f:c9:60:68:a2:c1:9b:7f:85:37:de:83: 7e:7e:7c:65:1b:98:69:26:09:25:45:a3:97:58:b2:87:11:ad: b1:52:31:7a:cf:f2:f6:c1:95:6c:c7:82:d4:3a:ad:8d:8e:42: 45:75:f6:c9:e6:c1:61:58:2a:d0:ad:42:b6:0a:e4:0a:79:38: c4:35:d7:06:e6:c1:75:af:0a:c2:08:87:0f:a1:7b:d4:a3:c0: b0:22:12:b1:eb:81:3f:03:98:a7:78:6f:f4:8f:97:55:30:62: 7f:37:bc:f0:54:96:1f:d6:f3:15:4d:04:15:38:13:25:0b:19: 52:20:70:93:30:01:c2:23:1f:6f:79:52:b2:41:d7:40:90:80: cb:cb:87:ec:dc:a0:35:c7:7f:d3:22:80:94:77:0a:5b:38:93: 78:c1:e8:6d:50:23:56:2d:8c:23:91:76:fc:c1:21:fd:79:f2: 60:8f:9b:40:45:67:b1:d9:69:a9:ea:11:93:99:4f:ae:64:bc: 09:50:1c:06:46:58:39:b9:f6:13:50:b1:2b:e9:b3:5b:8a:03: dd:4f:59:18:b3:db:fc:b1:f3:b0:b4:6f:04:9b:0c:99:68:78: f4:90:a9:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhBODE5NTI3OEQxQzY2 NjI2OTM4NTNGOTE1NTE4MDQzM0Y3NjY1RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc1L1KLYN6yjebVB5btCFGL1OkE6T4njDp+z1j2EyNt6/HRauY mdUChaR6Pn59PtbRVz/xSb+VJZ/2kJ+TYIs3AkUkEdiftbWimnm4rX+brzAbjBC9 mXwbTKNX7rV1OOaLPpkmEtaPcKNDsAuxABN6BqDMUW9WaUn4aABWXdIOs2UkFBxF GPRY+wC3XGuTDHsfQz5pTk1Ur2HLpG/pes1fsB2v9yjc2UgIEMLXfl658nxOGeMQ cMTchnfrEdWYLxDfVja3JJA2VXPJuH5JZyJkuk+2/oU8cKBsHTXQBpE6lz1IaN6b +CVWsG6J0xomDQ+FF9gfwrZkCehu4UjrxJKjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUioGVJ40cZmJpOFP5FVGAQz92ZfIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2lvR1ZKNDBjWm1KcE9GUDVG VkdBUXo5MlpmSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2tAwDQYJKoZIhvcNAQELBQADggEBAHUtSCmYPr13655IbJk/phdkPXQCz3tXah/J YGiiwZt/hTfeg35+fGUbmGkmCSVFo5dYsocRrbFSMXrP8vbBlWzHgtQ6rY2OQkV1 9snmwWFYKtCtQrYK5Ap5OMQ11wbmwXWvCsIIhw+he9SjwLAiErHrgT8DmKd4b/SP l1UwYn83vPBUlh/W8xVNBBU4EyULGVIgcJMwAcIjH295UrJB10CQgMvLh+zcoDXH f9MigJR3Cls4k3jB6G1QI1YtjCORdvzBIf158mCPm0BFZ7HZaanqEZOZT65kvAlQ HAZGWDm59hNQsSvps1uKA91PWRiz2/yx87C0bwSbDJloePSQqbU= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:21 2025 by rpki-client