$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QHEjaaEHzK1ziRsKtuFXNWBtdZ8.roa File: QHEjaaEHzK1ziRsKtuFXNWBtdZ8.roa (raw, json) Hash identifier: 5XIAMmaxagJJqlDJrmHJDV53/vRw152NZmxtlXlnDus= Subject key identifier: 40:71:23:69:A1:07:CC:AD:73:89:1B:0A:B6:E1:57:35:60:6D:75:9F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2444 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QHEjaaEHzK1ziRsKtuFXNWBtdZ8.roa Signing time: Mon 10 Feb 2025 14:18:27 +0000 ROA not before: Mon 10 Feb 2025 14:18:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9284 (0x2444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=40712369A107CCAD73891B0AB6E15735606D759F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:f6:85:57:50:47:5d:63:ab:36:9f:41:ba: 24:88:f1:99:f3:fe:b1:55:69:7e:cd:3e:03:89:fc: fe:f3:b1:ea:a4:03:a3:6a:61:89:92:48:c0:16:6b: 64:65:14:26:73:8a:17:9b:49:07:dc:09:59:16:c9: 05:da:57:ce:2f:29:8a:bf:4d:7d:d4:87:90:61:4a: 30:1c:18:58:c7:87:82:2e:08:cc:2d:1c:54:38:18: 3d:e3:7f:0f:ec:13:fd:80:05:a3:4c:88:71:f2:a0: 57:61:73:54:5d:d9:17:61:0b:62:98:60:50:34:c3: da:fe:d2:9c:f9:03:f6:6c:13:f8:15:cb:3c:f2:c3: 1e:2c:d1:9c:6d:f1:16:b5:e5:03:68:18:72:8e:3a: e0:86:d0:68:1e:a3:ff:1b:d5:eb:f8:ad:c5:c4:28: 51:13:13:23:af:c2:0a:7a:e4:17:6c:53:c1:f4:b3: 4e:e2:f7:b9:05:68:e6:35:be:68:5f:d6:82:48:41: c4:9f:e3:96:86:f8:1b:d3:d4:c6:14:ae:f6:bf:e7: 95:17:54:34:21:57:80:e7:b4:06:dc:1e:ac:32:c8: 0e:94:c4:04:1a:24:b1:b4:b0:77:db:99:7c:db:4b: 62:73:a7:89:6a:84:b9:a8:37:8d:a7:ca:66:d1:60: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:71:23:69:A1:07:CC:AD:73:89:1B:0A:B6:E1:57:35:60:6D:75:9F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QHEjaaEHzK1ziRsKtuFXNWBtdZ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.206.0/23 Signature Algorithm: sha256WithRSAEncryption 27:c4:aa:19:2d:ec:83:8a:a9:fa:61:f6:20:84:4a:89:ef:2e: b3:31:08:a6:0b:53:ca:c9:46:04:e9:43:69:6c:25:c8:ab:af: c3:32:af:8a:2a:fe:ca:6c:0a:7c:fb:55:3f:85:7c:ef:ac:77: 19:22:48:97:84:09:45:88:ff:c1:85:d1:e1:30:49:cb:dd:f2: 2c:18:e7:55:b8:ff:6e:3d:f4:a9:9b:1f:c0:c6:5b:f4:99:2a: ff:f6:ba:6f:34:5c:8e:e6:a0:f8:5d:6a:0c:b2:b4:f3:9a:b2: 67:59:f2:fe:fc:eb:b8:50:d0:1f:ca:52:cc:91:98:d0:f1:a1: eb:b9:e7:0f:af:4c:23:d1:a4:97:b0:78:a5:9f:8d:c1:b2:0d: ff:5e:e3:3e:47:a5:33:38:ba:d2:8d:8c:3a:e2:e4:d4:b6:81: 8f:d2:08:d2:62:02:ae:47:48:19:92:7e:e4:a1:5e:4e:38:24: f9:27:cf:56:8e:6a:a9:5c:3b:66:6b:3f:0a:aa:d7:65:c3:ce: a7:05:b9:1b:6e:96:2a:16:d5:42:76:5d:62:a7:c5:5b:ce:ef: a4:5f:e1:28:b1:3a:5a:a0:df:b5:af:ca:20:4e:f3:a8:7e:9f: dc:41:29:77:53:3d:ed:e6:4d:9c:b7:df:0a:8e:da:2e:e1:a1: 30:74:16:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwNzEyMzY5QTEwN0ND QUQ3Mzg5MUIwQUI2RTE1NzM1NjA2RDc1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy0PaFV1BHXWOrNp9BuiSI8Znz/rFVaX7NPgOJ/P7zseqkA6Nq YYmSSMAWa2RlFCZzihebSQfcCVkWyQXaV84vKYq/TX3Uh5BhSjAcGFjHh4IuCMwt HFQ4GD3jfw/sE/2ABaNMiHHyoFdhc1Rd2RdhC2KYYFA0w9r+0pz5A/ZsE/gVyzzy wx4s0Zxt8Ra15QNoGHKOOuCG0Ggeo/8b1ev4rcXEKFETEyOvwgp65BdsU8H0s07i 97kFaOY1vmhf1oJIQcSf45aG+BvT1MYUrva/55UXVDQhV4DntAbcHqwyyA6UxAQa JLG0sHfbmXzbS2Jzp4lqhLmoN42nymbRYDOpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQHEjaaEHzK1ziRsKtuFXNWBtdZ8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FIRWphYUVIeksxemlSc0t0 dUZYTldCdGRaOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2s4wDQYJKoZIhvcNAQELBQADggEBACfEqhkt7IOKqfph9iCESonvLrMxCKYLU8rJ RgTpQ2lsJcirr8Myr4oq/spsCnz7VT+FfO+sdxkiSJeECUWI/8GF0eEwScvd8iwY 51W4/2499KmbH8DGW/SZKv/2um80XI7moPhdagyytPOasmdZ8v7867hQ0B/KUsyR mNDxoeu55w+vTCPRpJeweKWfjcGyDf9e4z5HpTM4utKNjDri5NS2gY/SCNJiAq5H SBmSfuShXk44JPknz1aOaqlcO2ZrPwqq12XDzqcFuRtulioW1UJ2XWKnxVvO76Rf 4SixOlqg37WvyiBO86h+n9xBKXdTPe3mTZy33wqO2i7hoTB0FrA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net