$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cN-afACkmy0SvRCXTmfcBaNIOkE.roa File: cN-afACkmy0SvRCXTmfcBaNIOkE.roa (raw, json) Hash identifier: zMiUUAgUCZG3cburZ6r2Jrz2Mo1xc2BKFCEMsjg0S4I= Subject key identifier: 70:DF:9A:7C:00:A4:9B:2D:12:BD:10:97:4E:67:DC:05:A3:48:3A:41 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 244E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cN-afACkmy0SvRCXTmfcBaNIOkE.roa Signing time: Mon 10 Feb 2025 14:18:29 +0000 ROA not before: Mon 10 Feb 2025 14:18:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9294 (0x244e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=70DF9A7C00A49B2D12BD10974E67DC05A3483A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:2c:6e:19:05:60:e1:4b:1f:eb:a1:e8:78: 64:aa:89:53:b8:0f:34:da:01:7f:3f:6d:7b:d8:1e: c9:d4:0c:21:8d:85:d8:95:a2:ac:8e:d8:c8:10:03: bc:e4:a7:99:1a:96:56:49:f1:dc:5c:56:49:bd:19: ed:ee:1d:f3:77:5b:35:7c:93:1a:da:d7:c9:93:f8: df:ae:f0:59:a1:7a:53:a8:ab:bc:d0:6c:21:e6:c5: ca:97:1e:28:c2:42:39:92:1a:fc:82:ba:62:1c:71: 18:60:79:58:bf:a6:3b:c5:c7:97:b4:b7:5b:92:d6: 6e:0a:76:23:5d:cb:3f:47:d4:e5:fc:d2:65:b1:d0: f7:66:13:76:e3:55:d0:e9:92:09:6d:e5:b0:52:bd: 17:98:36:df:58:db:ae:72:75:d4:1f:8a:1d:8d:99: e8:4b:f4:c9:ac:60:78:c3:59:ef:8f:f9:d4:00:72: b7:89:83:69:19:7c:37:25:a8:b4:c1:41:91:59:4e: 46:ec:a7:b2:f9:e8:ec:ab:d9:a8:8a:69:52:e6:a6: 18:ef:6f:71:61:a9:62:70:14:53:5b:07:2d:30:4f: 90:c0:a1:af:9b:8f:9c:45:cd:af:e6:be:7a:b9:1a: fa:de:37:17:92:60:bb:72:b3:8b:f4:b6:b0:3f:e6: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DF:9A:7C:00:A4:9B:2D:12:BD:10:97:4E:67:DC:05:A3:48:3A:41 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cN-afACkmy0SvRCXTmfcBaNIOkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.189.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:0d:54:3a:17:25:d4:c4:0b:6a:f9:5c:1d:ca:02:01:cd:b5: 04:9e:6b:5c:32:ff:8e:dd:34:b7:ce:35:d5:69:35:b8:e7:2e: c8:89:89:a1:f6:35:4b:1a:ee:95:d2:a6:e9:c1:fc:39:11:ef: a3:0e:ea:e7:7d:9c:e3:2b:f8:9c:5d:28:2e:ff:6c:43:a6:4f: 43:2b:90:bd:bc:55:25:96:4a:88:2a:cb:f0:4f:c2:4a:f5:c4: ab:f6:12:25:dc:aa:ce:52:c9:74:df:35:73:29:67:f9:69:cc: 0e:fd:61:38:5b:0f:45:78:ed:5d:28:da:f0:fe:ba:18:97:7f: 4a:54:01:20:32:1e:01:6e:b7:48:b3:d9:7c:9d:b2:07:f8:d7: 68:a7:93:5d:f9:0d:ba:bf:d5:74:90:10:c1:15:0d:23:5e:68: 37:11:2b:9f:90:d5:a2:03:84:0b:ec:af:8e:32:8f:79:01:70: 06:2c:99:71:35:6e:b9:fb:5a:0e:a9:ea:09:94:2e:11:17:d4: bb:81:13:ac:b1:d6:91:c3:89:a8:f0:56:b1:ce:dd:ff:1e:99: 1d:5d:22:ed:e0:3b:39:3c:15:77:da:14:67:81:9f:63:59:26: 3b:99:e7:af:97:65:99:a7:23:ee:cc:ca:50:c0:1a:cb:9f:5b: d2:d4:e3:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwREY5QTdDMDBBNDlC MkQxMkJEMTA5NzRFNjdEQzA1QTM0ODNBNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpWCxuGQVg4Usf66HoeGSqiVO4DzTaAX8/bXvYHsnUDCGNhdiV oqyO2MgQA7zkp5kallZJ8dxcVkm9Ge3uHfN3WzV8kxra18mT+N+u8FmhelOoq7zQ bCHmxcqXHijCQjmSGvyCumIccRhgeVi/pjvFx5e0t1uS1m4KdiNdyz9H1OX80mWx 0PdmE3bjVdDpkglt5bBSvReYNt9Y265yddQfih2NmehL9MmsYHjDWe+P+dQAcreJ g2kZfDclqLTBQZFZTkbsp7L56Oyr2aiKaVLmphjvb3FhqWJwFFNbBy0wT5DAoa+b j5xFza/mvnq5GvreNxeSYLtys4v0trA/5hBVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcN+afACkmy0SvRCXTmfcBaNIOkEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NOLWFmQUNrbXkwU3ZSQ1hU bWZjQmFOSU9rRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2r0wDQYJKoZIhvcNAQELBQADggEBAH4NVDoXJdTEC2r5XB3KAgHNtQSea1wy/47d NLfONdVpNbjnLsiJiaH2NUsa7pXSpunB/DkR76MO6ud9nOMr+JxdKC7/bEOmT0Mr kL28VSWWSogqy/BPwkr1xKv2EiXcqs5SyXTfNXMpZ/lpzA79YThbD0V47V0o2vD+ uhiXf0pUASAyHgFut0iz2Xydsgf412ink135Dbq/1XSQEMEVDSNeaDcRK5+Q1aID hAvsr44yj3kBcAYsmXE1brn7Wg6p6gmULhEX1LuBE6yx1pHDiajwVrHO3f8emR1d Iu3gOzk8FXfaFGeBn2NZJjuZ56+XZZmnI+7MylDAGsufW9LU46k= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net