$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zZSsUlS8RcfJjnipy3zJPrVgZzA.roa File: zZSsUlS8RcfJjnipy3zJPrVgZzA.roa (raw, json) Hash identifier: +qhy/JxWKh2Pz1d4eyEE6bJNkbMR00lJYdTkhutpXUo= Subject key identifier: CD:94:AC:52:54:BC:45:C7:C9:8E:78:A9:CB:7C:C9:3E:B5:60:67:30 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23A2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zZSsUlS8RcfJjnipy3zJPrVgZzA.roa Signing time: Mon 10 Feb 2025 14:17:45 +0000 ROA not before: Mon 10 Feb 2025 14:17:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9122 (0x23a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CD94AC5254BC45C7C98E78A9CB7CC93EB5606730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:8c:62:08:0f:11:ac:49:e6:a7:9a:5b:6e: 9a:1d:74:33:09:d5:71:49:db:93:0a:95:3b:7f:6d: fd:e0:b7:a0:e0:1c:a4:74:f6:8a:a2:0f:10:0d:31: 04:e2:15:2f:d2:08:42:08:ca:8c:a9:23:54:f2:af: ed:46:12:d7:da:c0:b4:02:7a:e2:03:dd:b3:4a:46: ac:dc:5a:a0:f9:0f:87:16:a4:1d:7d:b6:d0:17:a1: ca:af:a6:ec:87:06:e4:eb:08:93:f5:6c:a1:03:1d: af:b2:76:49:dc:58:4f:88:90:0a:90:ef:55:0b:93: b6:80:cd:a5:1c:e2:c5:55:61:1c:33:29:c4:ab:be: ec:7e:6d:a4:63:89:bd:27:53:d0:bd:98:18:24:19: 82:a2:4e:3c:0d:0e:5a:a6:60:90:93:cd:40:a2:ef: 92:65:d5:d9:59:6f:a4:76:07:9d:87:f6:c8:fa:d3: b0:de:c5:a8:6c:6e:d8:50:ad:d9:a5:ca:e5:c3:aa: 50:07:69:ba:fd:d7:21:8d:9f:ea:da:c5:92:c0:21: 80:00:12:a9:c8:44:70:7e:4f:73:de:4c:43:80:77: 92:af:f7:23:2e:44:d5:3b:33:53:b4:82:ae:e1:16: 99:34:bc:60:f3:ef:75:ee:54:2a:0c:34:f9:fd:c8: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:94:AC:52:54:BC:45:C7:C9:8E:78:A9:CB:7C:C9:3E:B5:60:67:30 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zZSsUlS8RcfJjnipy3zJPrVgZzA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.128.0/22 Signature Algorithm: sha256WithRSAEncryption 26:fd:cb:df:b2:12:69:60:34:91:c8:0f:ae:18:02:20:00:f2: 40:04:74:56:36:29:67:cc:ab:31:31:6f:17:b1:06:de:5d:7d: 2e:b7:66:70:07:b8:d2:52:8f:07:96:e1:7d:c9:ac:54:e5:eb: bb:95:c4:63:b2:ee:4e:46:aa:c6:c8:cf:db:8c:25:1b:67:1c: f8:2f:10:bf:84:c4:b0:5c:0d:c8:d7:d0:c9:eb:3c:5a:e5:56: 18:c0:73:78:14:f9:ee:9e:33:c4:f3:a3:05:4a:59:2a:6a:a7: 1f:4c:86:5a:0c:fd:b8:37:77:9e:f4:06:fb:af:34:50:02:2b: cd:37:59:b8:9f:b0:6a:9e:8e:7f:b9:a5:f4:0b:f5:d2:8b:d3: 02:dd:c2:14:90:4b:be:77:b5:d0:a8:f0:7c:4d:07:8a:1e:c6: 7b:5e:90:87:91:d6:34:3d:11:9a:b8:da:36:4e:78:71:58:19: 8b:83:63:68:f6:0e:3a:7e:2d:3f:8f:2a:1c:10:35:69:7f:0b: 9d:81:73:a0:f6:f3:07:68:72:9f:69:8b:ed:6a:c5:ba:43:60: 27:e0:dd:38:1a:81:e3:c6:9a:77:9a:06:11:d3:f2:1c:70:e4: 7a:10:77:88:b8:2f:2b:5b:7b:a0:82:8e:03:ed:4c:b7:ab:05: 4e:e4:18:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENEOTRBQzUyNTRCQzQ1 QzdDOThFNzhBOUNCN0NDOTNFQjU2MDY3MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCynIxiCA8RrEnmp5pbbpoddDMJ1XFJ25MKlTt/bf3gt6DgHKR0 9oqiDxANMQTiFS/SCEIIyoypI1Tyr+1GEtfawLQCeuID3bNKRqzcWqD5D4cWpB19 ttAXocqvpuyHBuTrCJP1bKEDHa+ydkncWE+IkAqQ71ULk7aAzaUc4sVVYRwzKcSr vux+baRjib0nU9C9mBgkGYKiTjwNDlqmYJCTzUCi75Jl1dlZb6R2B52H9sj607De xahsbthQrdmlyuXDqlAHabr91yGNn+raxZLAIYAAEqnIRHB+T3PeTEOAd5Kv9yMu RNU7M1O0gq7hFpk0vGDz73XuVCoMNPn9yPJZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzZSsUlS8RcfJjnipy3zJPrVgZzAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3paU3NVbFM4UmNmSmpuaXB5 M3pKUHJWZ1p6QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2oAwDQYJKoZIhvcNAQELBQADggEBACb9y9+yEmlgNJHID64YAiAA8kAEdFY2KWfM qzExbxexBt5dfS63ZnAHuNJSjweW4X3JrFTl67uVxGOy7k5GqsbIz9uMJRtnHPgv EL+ExLBcDcjX0MnrPFrlVhjAc3gU+e6eM8TzowVKWSpqpx9MhloM/bg3d570Bvuv NFACK803WbifsGqejn+5pfQL9dKL0wLdwhSQS753tdCo8HxNB4oexntekIeR1jQ9 EZq42jZOeHFYGYuDY2j2Djp+LT+PKhwQNWl/C52Bc6D28wdocp9pi+1qxbpDYCfg 3TgagePGmneaBhHT8hxw5HoQd4i4Lytbe6CCjgPtTLerBU7kGC8= -----END CERTIFICATE-----Generated at Fri Apr 18 16:15:48 2025 by rpki-client