$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KgYZj0yciAnsIFOzp5OTqwdcM2c.roa File: KgYZj0yciAnsIFOzp5OTqwdcM2c.roa (raw, json) Hash identifier: ryEkzIlOcqCehMXeU6jSAZyrDu8yZmG+7jW8Mlv6/fY= Subject key identifier: 2A:06:19:8F:4C:9C:88:09:EC:20:53:B3:A7:93:93:AB:07:5C:33:67 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 236C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KgYZj0yciAnsIFOzp5OTqwdcM2c.roa Signing time: Mon 10 Feb 2025 14:17:35 +0000 ROA not before: Mon 10 Feb 2025 14:17:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9068 (0x236c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A06198F4C9C8809EC2053B3A79393AB075C3367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:e2:f7:f2:ed:ea:35:e0:4e:ff:e7:63:e4: e3:a5:0b:00:c7:65:dd:69:9a:be:04:50:ab:e4:f1: 8b:cf:95:14:3b:ab:54:cd:01:70:5a:cb:6c:1a:0f: 7e:4c:32:b4:5a:e2:a7:d5:3a:8c:28:a7:50:31:89: 21:ef:35:7f:14:a5:6e:23:58:48:fc:79:5e:15:76: 15:01:38:5e:1b:7d:82:c0:5b:54:5b:fa:90:26:17: d3:15:0d:33:0d:78:ad:5d:e7:72:ed:f6:64:06:89: 2f:bb:dc:86:dd:ef:f6:49:bb:db:95:ad:f0:00:4b: 61:8c:47:dd:fb:ec:14:f7:4c:42:33:27:c1:a1:18: ae:a1:72:39:17:97:50:fc:a9:ef:a9:ec:07:22:39: d0:e7:5f:11:e7:21:f2:a1:a9:43:ed:b4:db:a3:13: b5:61:f6:0a:17:d3:80:cf:b6:a1:27:30:66:e7:73: b5:ef:6c:f7:6c:da:97:d3:fa:66:3f:b4:1d:30:2f: fd:19:48:50:a4:d5:c3:8e:9d:90:d2:9c:1d:ac:e1: e3:7b:82:4e:82:d5:1a:bc:13:2c:52:e6:5e:a3:72: bd:b7:29:6a:b9:71:7c:ac:7e:e8:a2:56:4d:e1:b0: 21:fc:ed:5b:17:e7:db:f0:b1:ee:72:54:12:09:4b: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:19:8F:4C:9C:88:09:EC:20:53:B3:A7:93:93:AB:07:5C:33:67 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KgYZj0yciAnsIFOzp5OTqwdcM2c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.222.0/23 Signature Algorithm: sha256WithRSAEncryption 51:77:64:36:cc:03:45:76:c6:b3:1b:e1:ba:23:bf:82:37:8e: 19:6d:21:c1:d2:7c:5a:43:cb:84:59:de:ef:5e:0f:e8:00:74: 22:f3:ed:7d:1a:5b:bf:ce:42:08:5d:75:7d:2c:f6:20:82:9e: df:64:86:40:de:ac:43:52:a0:bf:6e:b5:a4:34:5b:7e:68:2d: 95:f4:83:a1:8a:d4:12:71:0e:ab:31:4c:8a:8c:1d:3f:8f:52: e4:e4:30:ff:b0:71:9d:11:ec:ea:37:ca:b0:f0:54:54:34:9c: b1:17:21:fb:10:50:d0:f1:3e:1f:90:8d:2b:3d:e3:62:7c:f1: 7b:5d:68:9b:5a:14:70:8d:28:3f:62:63:27:1e:d6:3c:01:b7: 51:02:6b:00:35:2b:9d:80:b3:aa:d1:f2:ff:5d:53:18:d3:b0: e0:39:dc:0e:47:4a:78:45:c2:c3:a1:f8:f3:75:3f:ee:ed:a2: a3:88:2a:65:d2:ea:e6:d5:12:bb:27:5e:e4:01:1d:d1:69:e5: b8:47:75:97:47:be:e7:04:7b:46:0f:c9:e4:02:ea:a2:7c:f8: 1c:a1:81:33:b2:99:7b:54:83:01:87:b5:46:b0:43:d8:00:65: 16:0d:94:68:f9:6c:36:30:d2:23:91:ae:ce:f4:07:9b:ee:21: 5f:19:7e:e5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBMDYxOThGNEM5Qzg4 MDlFQzIwNTNCM0E3OTM5M0FCMDc1QzMzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXseL38u3qNeBO/+dj5OOlCwDHZd1pmr4EUKvk8YvPlRQ7q1TN AXBay2waD35MMrRa4qfVOowop1AxiSHvNX8UpW4jWEj8eV4VdhUBOF4bfYLAW1Rb +pAmF9MVDTMNeK1d53Lt9mQGiS+73Ibd7/ZJu9uVrfAAS2GMR9377BT3TEIzJ8Gh GK6hcjkXl1D8qe+p7AciOdDnXxHnIfKhqUPttNujE7Vh9goX04DPtqEnMGbnc7Xv bPds2pfT+mY/tB0wL/0ZSFCk1cOOnZDSnB2s4eN7gk6C1Rq8EyxS5l6jcr23KWq5 cXysfuiiVk3hsCH87VsX59vwse5yVBIJS+SRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKgYZj0yciAnsIFOzp5OTqwdcM2cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tnWVpqMHljaUFuc0lGT3pw NU9UcXdkY00yYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2t4wDQYJKoZIhvcNAQELBQADggEBAFF3ZDbMA0V2xrMb4bojv4I3jhltIcHSfFpD y4RZ3u9eD+gAdCLz7X0aW7/OQghddX0s9iCCnt9khkDerENSoL9utaQ0W35oLZX0 g6GK1BJxDqsxTIqMHT+PUuTkMP+wcZ0R7Oo3yrDwVFQ0nLEXIfsQUNDxPh+QjSs9 42J88XtdaJtaFHCNKD9iYyce1jwBt1ECawA1K52As6rR8v9dUxjTsOA53A5HSnhF wsOh+PN1P+7toqOIKmXS6ubVErsnXuQBHdFp5bhHdZdHvucEe0YPyeQC6qJ8+Byh gTOymXtUgwGHtUawQ9gAZRYNlGj5bDYw0iORrs70B5vuIV8ZfuU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net