$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vM7s3nXqoWcM2cFE3V25Kyqjc0Q.roa File: vM7s3nXqoWcM2cFE3V25Kyqjc0Q.roa (raw, json) Hash identifier: n16DGBM7FwIP+hgeJm6UV0sqO/pjouW8h5oTMH/p3sA= Subject key identifier: BC:CE:EC:DE:75:EA:A1:67:0C:D9:C1:44:DD:5D:B9:2B:2A:A3:73:44 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2376 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vM7s3nXqoWcM2cFE3V25Kyqjc0Q.roa Signing time: Mon 10 Feb 2025 14:17:37 +0000 ROA not before: Mon 10 Feb 2025 14:17:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9078 (0x2376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BCCEECDE75EAA1670CD9C144DD5DB92B2AA37344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:ae:25:4d:15:04:9a:b5:aa:5f:d2:69:f0: b7:2c:6f:53:6f:19:13:57:5a:a0:c4:16:2f:c9:9a: a7:73:97:14:2d:cf:f7:8a:66:6b:e2:54:24:ed:8b: 3a:fc:73:bc:4b:7e:b5:4f:71:c8:bd:79:2b:ea:2a: 39:a0:c4:92:eb:de:cd:d7:12:39:7e:0b:59:96:85: 11:ea:fd:c5:1b:87:e8:e5:60:d7:14:27:14:42:f5: 95:e8:33:69:15:a5:36:3a:1e:11:99:a1:5e:dd:d2: 8a:a6:fe:20:5e:69:1c:d3:f4:31:68:ba:e6:bf:b7: b8:0c:06:f4:72:bc:ff:31:85:64:15:3e:3d:23:30: 9c:69:9a:3e:78:49:f1:ec:23:06:81:01:03:f1:87: bc:6f:bd:74:62:f0:ff:72:d5:e0:ec:b5:55:86:8c: 64:b1:ee:bd:e2:fa:36:33:bc:16:c2:e1:15:8b:65: bc:15:1e:29:46:79:2f:b2:47:c3:16:70:ff:c7:c0: f2:af:db:86:0f:03:7f:5c:f6:9f:b5:2e:6d:1f:01: 2b:5d:a5:f9:ef:70:e6:2a:04:a8:cf:81:c6:32:eb: 72:b4:51:cd:9a:d5:82:c5:f7:d1:1f:3c:c2:e6:3a: 70:05:0b:04:22:d4:1f:62:ea:da:f2:69:73:94:29: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:EC:DE:75:EA:A1:67:0C:D9:C1:44:DD:5D:B9:2B:2A:A3:73:44 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vM7s3nXqoWcM2cFE3V25Kyqjc0Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/22 Signature Algorithm: sha256WithRSAEncryption 80:a2:03:db:ea:56:1c:6c:24:08:37:3e:67:a9:01:3a:23:e0: c7:a4:0d:d9:8f:74:6e:ed:0d:de:5b:51:94:c3:b3:c9:3c:37: bc:e3:db:b7:17:c1:10:19:9c:ca:aa:86:6b:8a:e6:ac:7a:6e: 7c:45:5c:77:8d:55:c0:8b:e2:4c:b1:6c:27:e8:59:06:f5:d6: 11:56:2d:23:1c:f8:7b:1b:ba:fc:99:59:fc:b1:a7:f0:fe:f9: 47:6b:0f:f9:bd:ec:98:33:f3:2d:49:1b:56:3d:ae:21:28:0c: 1c:24:93:89:f2:75:52:4a:53:70:1c:f1:fe:02:61:13:d7:4d: 00:21:29:c5:8a:19:e0:f4:cd:4e:1f:34:82:d3:41:ad:72:bd: 7a:50:56:31:c4:f9:ea:b6:2a:5c:95:c7:4f:bd:db:44:68:4d: 7d:be:1b:b3:86:0d:58:e2:b5:b0:60:25:f6:37:93:f3:b4:5f: ed:f8:0b:60:83:83:7d:57:2d:af:6f:7b:d8:5b:32:a8:3e:5f: 69:9f:a9:d1:aa:f8:4e:81:ba:2a:62:d1:03:55:e3:e6:e1:64: 1a:f8:fd:9c:5c:cf:5f:f8:d5:d0:63:b7:ae:f6:0a:43:87:80: a4:a3:b4:f5:56:7e:f6:e5:cc:6f:42:cc:dd:49:95:75:94:54: 2e:76:81:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDQ0VFQ0RFNzVFQUEx NjcwQ0Q5QzE0NERENURCOTJCMkFBMzczNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVSK4lTRUEmrWqX9Jp8Lcsb1NvGRNXWqDEFi/JmqdzlxQtz/eK ZmviVCTtizr8c7xLfrVPcci9eSvqKjmgxJLr3s3XEjl+C1mWhRHq/cUbh+jlYNcU JxRC9ZXoM2kVpTY6HhGZoV7d0oqm/iBeaRzT9DFouua/t7gMBvRyvP8xhWQVPj0j MJxpmj54SfHsIwaBAQPxh7xvvXRi8P9y1eDstVWGjGSx7r3i+jYzvBbC4RWLZbwV HilGeS+yR8MWcP/HwPKv24YPA39c9p+1Lm0fAStdpfnvcOYqBKjPgcYy63K0Uc2a 1YLF99EfPMLmOnAFCwQi1B9i6tryaXOUKU9jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvM7s3nXqoWcM2cFE3V25Kyqjc0QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ZNN3Mzblhxb1djTTJjRkUz VjI1S3lxamMwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2pAwDQYJKoZIhvcNAQELBQADggEBAICiA9vqVhxsJAg3PmepAToj4MekDdmPdG7t Dd5bUZTDs8k8N7zj27cXwRAZnMqqhmuK5qx6bnxFXHeNVcCL4kyxbCfoWQb11hFW LSMc+HsbuvyZWfyxp/D++UdrD/m97Jgz8y1JG1Y9riEoDBwkk4nydVJKU3Ac8f4C YRPXTQAhKcWKGeD0zU4fNILTQa1yvXpQVjHE+eq2KlyVx0+920RoTX2+G7OGDVji tbBgJfY3k/O0X+34C2CDg31XLa9ve9hbMqg+X2mfqdGq+E6Buipi0QNV4+bhZBr4 /Zxcz1/41dBjt672CkOHgKSjtPVWfvblzG9CzN1JlXWUVC52gWY= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:19 2025 by rpki-client