$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jImIXo5VkgqBrIw8kuatpdgYySw.roa File: jImIXo5VkgqBrIw8kuatpdgYySw.roa (raw, json) Hash identifier: AIQLKEY4ss8W+OvEo5iQi76diHXVqgNLnCKbgKZoFO0= Subject key identifier: 8C:89:88:5E:8E:55:92:0A:81:AC:8C:3C:92:E6:AD:A5:D8:18:C9:2C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24A5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jImIXo5VkgqBrIw8kuatpdgYySw.roa Signing time: Mon 10 Feb 2025 14:18:51 +0000 ROA not before: Mon 10 Feb 2025 14:18:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 180.218.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9381 (0x24a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8C89885E8E55920A81AC8C3C92E6ADA5D818C92C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:7a:c7:b0:9b:27:e5:ad:25:2c:01:d9:55: ac:67:66:92:2a:4c:d5:e9:35:ea:12:2e:be:74:41: 82:3f:36:3f:96:23:35:06:95:15:49:09:1e:4c:c3: 8d:fc:e4:0f:8b:f6:60:ac:0d:16:ab:f5:86:61:9f: 08:fe:b0:c2:0f:18:b2:17:0c:53:8a:73:3b:2b:c7: c1:36:d0:65:61:f2:65:25:29:19:5b:c3:f2:bc:48: bb:ab:be:ca:f4:ef:62:8a:c6:b8:70:11:04:14:44: a4:6e:6b:9a:f8:dd:e2:67:38:e3:21:a7:f8:36:e3: bc:a1:60:e6:57:21:2a:07:74:03:28:7a:fa:a8:4a: fb:18:94:84:f1:0c:2d:5d:75:35:bf:83:8e:c7:2f: 11:aa:fd:5b:a7:b0:83:ec:49:33:c1:ea:06:33:21: ec:0e:b1:45:1a:1c:21:d9:a1:be:96:00:03:d2:27: 1e:cc:f6:a3:35:58:00:64:41:72:12:67:86:d7:cb: df:df:59:58:0e:83:43:6e:7e:d8:35:17:d0:51:ba: 23:97:6d:28:db:c8:2e:94:ca:64:36:7d:a4:67:14: 3b:59:62:ee:ce:e0:18:cd:d3:a1:bd:0b:c4:38:f2: cd:9c:a5:d7:dd:30:e5:49:ee:96:50:84:49:8b:55: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:88:5E:8E:55:92:0A:81:AC:8C:3C:92:E6:AD:A5:D8:18:C9:2C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jImIXo5VkgqBrIw8kuatpdgYySw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption 56:f7:75:25:22:e5:13:0c:ce:bf:2d:75:94:bb:b3:bb:eb:6d: 45:d8:2d:14:1f:25:d9:d9:f9:a4:a5:04:c1:18:ee:2b:88:7d: d8:4f:6c:cf:8e:cd:f7:72:d5:c4:c9:86:0c:8b:35:eb:b3:64: 47:0c:e9:b8:d9:dd:f7:6e:39:34:25:dc:e0:83:94:bc:f6:27: ff:5c:43:d4:c8:43:5b:e5:59:23:b4:32:96:b1:96:d3:a0:c5: 99:dc:ef:4f:f2:7d:a2:4f:96:f3:34:08:b2:50:f1:88:74:ce: b7:27:bd:37:7d:64:f9:6a:ff:0b:d9:12:d9:97:20:3c:c8:5c: 74:2b:83:28:99:32:b7:62:7f:a9:41:cc:c2:c6:25:fd:9a:01: 21:e0:82:4b:8e:1a:f5:ef:eb:61:6a:1a:06:0c:c6:85:71:e0: 0b:a3:af:ad:89:8f:db:97:4e:0f:a3:57:34:80:8a:f0:44:ee: 16:10:e3:9f:b4:ad:e3:50:34:84:25:49:52:57:90:3c:d0:a5: f6:79:81:69:e8:6b:5d:f2:2f:93:e1:34:c3:dd:67:3b:7d:7a: 9c:e2:fc:66:62:08:fa:d3:a4:09:ec:aa:83:cd:8c:0e:b4:52: a1:7c:f2:f2:9e:93:11:23:3a:67:2e:41:d4:73:09:e8:27:46: b2:5c:61:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDODk4ODVFOEU1NTky MEE4MUFDOEMzQzkyRTZBREE1RDgxOEM5MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIh3rHsJsn5a0lLAHZVaxnZpIqTNXpNeoSLr50QYI/Nj+WIzUG lRVJCR5Mw4385A+L9mCsDRar9YZhnwj+sMIPGLIXDFOKczsrx8E20GVh8mUlKRlb w/K8SLurvsr072KKxrhwEQQURKRua5r43eJnOOMhp/g247yhYOZXISoHdAMoevqo SvsYlITxDC1ddTW/g47HLxGq/VunsIPsSTPB6gYzIewOsUUaHCHZob6WAAPSJx7M 9qM1WABkQXISZ4bXy9/fWVgOg0Nuftg1F9BRuiOXbSjbyC6UymQ2faRnFDtZYu7O 4BjN06G9C8Q48s2cpdfdMOVJ7pZQhEmLVfPHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjImIXo5VkgqBrIw8kuatpdgYySwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pJbUlYbzVWa2dxQnJJdzhr dWF0cGRnWXlTdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2mAwDQYJKoZIhvcNAQELBQADggEBAFb3dSUi5RMMzr8tdZS7s7vrbUXYLRQfJdnZ +aSlBMEY7iuIfdhPbM+Ozfdy1cTJhgyLNeuzZEcM6bjZ3fduOTQl3OCDlLz2J/9c Q9TIQ1vlWSO0MpaxltOgxZnc70/yfaJPlvM0CLJQ8Yh0zrcnvTd9ZPlq/wvZEtmX IDzIXHQrgyiZMrdif6lBzMLGJf2aASHggkuOGvXv62FqGgYMxoVx4Aujr62Jj9uX Tg+jVzSAivBE7hYQ45+0reNQNIQlSVJXkDzQpfZ5gWnoa13yL5PhNMPdZzt9epzi /GZiCPrTpAnsqoPNjA60UqF88vKekxEjOmcuQdRzCegnRrJcYfo= -----END CERTIFICATE-----Generated at Fri Apr 18 16:54:17 2025 by rpki-client