$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yWUVJQP2ZAyJwvT8-N1WIlpULJI.roa File: yWUVJQP2ZAyJwvT8-N1WIlpULJI.roa (raw, json) Hash identifier: 23TQI0FY4NQWzG0sc1wtuRv9L0cpOyN5FSlNKIlFbo8= Subject key identifier: C9:65:15:25:03:F6:64:0C:89:C2:F4:FC:F8:DD:56:22:5A:54:2C:92 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24CC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yWUVJQP2ZAyJwvT8-N1WIlpULJI.roa Signing time: Mon 10 Feb 2025 14:19:02 +0000 ROA not before: Mon 10 Feb 2025 14:19:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9420 (0x24cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:19:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C965152503F6640C89C2F4FCF8DD56225A542C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:e0:d6:bf:12:e4:93:e7:77:9f:75:96:ef: af:98:e8:ea:fd:96:c7:de:f5:02:a6:2d:6f:8f:ba: da:dd:3e:05:c3:df:37:bd:42:23:f0:89:88:81:6f: aa:14:c5:ec:36:83:2d:7f:53:fe:08:4a:04:32:4a: b2:17:ee:2e:e8:5d:22:5a:9d:bd:ae:69:68:62:7d: 43:db:e2:e5:90:e2:f2:67:da:7c:94:23:6e:1f:01: 58:cb:dd:b4:15:28:58:67:0a:1e:09:07:fd:37:b5: b8:20:15:91:f9:0a:9d:5c:df:26:38:54:b2:b3:8c: fb:a4:34:ff:01:61:05:08:b8:c2:45:76:d6:36:f1: ce:7c:79:eb:68:73:ed:28:c9:21:b5:ed:1b:0d:67: e4:d6:78:30:84:4b:ed:e8:76:1e:5f:50:4f:6b:ec: 25:5d:0a:f4:a4:2e:fe:c2:52:5d:91:0f:9b:bf:1a: fe:b4:74:c7:b6:ad:23:2b:a1:5c:b7:dd:94:fe:69: 34:59:13:07:f4:eb:35:6f:bd:5a:82:4d:18:fc:a4: 5d:7a:13:8b:86:76:59:90:3a:dd:45:89:5e:c0:e8: 3f:bf:af:87:f3:3a:e0:d9:27:02:42:05:46:41:27: ad:b9:f0:2c:92:b7:8b:b5:34:f5:44:88:dc:48:55: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:65:15:25:03:F6:64:0C:89:C2:F4:FC:F8:DD:56:22:5A:54:2C:92 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yWUVJQP2ZAyJwvT8-N1WIlpULJI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.64.0/20 Signature Algorithm: sha256WithRSAEncryption 67:b0:70:11:b3:da:db:b9:e7:4a:54:24:9f:60:22:b3:13:2e: b9:78:a6:2b:cd:fe:6f:c3:9f:a9:ea:f2:b2:97:34:0a:31:4f: 7c:d4:2a:c1:14:42:ef:b8:c6:fe:6c:0a:9a:0f:81:25:93:2c: 03:a2:d9:ce:6e:83:ee:d8:e8:98:b8:15:84:6b:0b:8a:f6:c0: c0:d7:56:ce:5a:02:01:46:a8:d2:65:0b:01:50:ac:81:66:b9: b9:9b:3e:3f:c1:20:a8:68:33:d0:7a:ec:c1:b9:a2:67:1c:da: aa:6f:2f:6c:8e:21:c4:d6:e7:e0:c3:f4:e6:de:ac:16:dd:3d: ff:5c:2b:c3:1a:f0:40:ba:bb:f9:79:d1:b9:88:c8:83:ec:52: 49:f4:5b:24:9b:7c:a4:d2:6a:ea:db:62:e6:51:4f:30:b6:69: c7:d2:7f:e7:ca:36:08:19:e1:c3:20:7f:d7:78:79:69:36:06: 93:4e:d6:f2:8f:64:29:99:c9:e2:b9:d0:e6:45:63:c2:1d:f1: b7:00:97:f0:53:c7:c8:32:29:2e:79:0c:5b:ab:16:ec:52:56: 0c:60:1a:34:29:d9:19:2b:ce:c4:9b:e7:9f:f0:9b:f1:55:33: f3:bc:ea:8f:b3:c2:ec:9b:0f:8b:1a:45:f0:b7:4c:dc:04:f4: e2:54:d4:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM5NjUxNTI1MDNGNjY0 MEM4OUMyRjRGQ0Y4REQ1NjIyNUE1NDJDOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHcuDWvxLkk+d3n3WW76+Y6Or9lsfe9QKmLW+PutrdPgXD3ze9 QiPwiYiBb6oUxew2gy1/U/4ISgQySrIX7i7oXSJanb2uaWhifUPb4uWQ4vJn2nyU I24fAVjL3bQVKFhnCh4JB/03tbggFZH5Cp1c3yY4VLKzjPukNP8BYQUIuMJFdtY2 8c58eetoc+0oySG17RsNZ+TWeDCES+3odh5fUE9r7CVdCvSkLv7CUl2RD5u/Gv60 dMe2rSMroVy33ZT+aTRZEwf06zVvvVqCTRj8pF16E4uGdlmQOt1FiV7A6D+/r4fz OuDZJwJCBUZBJ6258CySt4u1NPVEiNxIVdxtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyWUVJQP2ZAyJwvT8+N1WIlpULJIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lXVVZKUVAyWkF5Snd2VDgt TjFXSWxwVUxKSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 2kAwDQYJKoZIhvcNAQELBQADggEBAGewcBGz2tu550pUJJ9gIrMTLrl4pivN/m/D n6nq8rKXNAoxT3zUKsEUQu+4xv5sCpoPgSWTLAOi2c5ug+7Y6Ji4FYRrC4r2wMDX Vs5aAgFGqNJlCwFQrIFmubmbPj/BIKhoM9B67MG5omcc2qpvL2yOIcTW5+DD9Obe rBbdPf9cK8Ma8EC6u/l50bmIyIPsUkn0WySbfKTSaurbYuZRTzC2acfSf+fKNggZ 4cMgf9d4eWk2BpNO1vKPZCmZyeK50OZFY8Id8bcAl/BTx8gyKS55DFurFuxSVgxg GjQp2RkrzsSb55/wm/FVM/O86o+zwuybD4saRfC3TNwE9OJU1GY= -----END CERTIFICATE-----Generated at Fri Apr 18 16:51:36 2025 by rpki-client