$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/llhZnmMbHsTnA1iyQowjZhSh9dM.roa File: llhZnmMbHsTnA1iyQowjZhSh9dM.roa (raw, json) Hash identifier: 1tCNH4rjerjV4vIHbZrAKZZStz02Z179eBICNqqADuw= Subject key identifier: 96:58:59:9E:63:1B:1E:C4:E7:03:58:B2:42:8C:23:66:14:A1:F5:D3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2471 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/llhZnmMbHsTnA1iyQowjZhSh9dM.roa Signing time: Mon 10 Feb 2025 14:18:38 +0000 ROA not before: Mon 10 Feb 2025 14:18:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.160.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9329 (0x2471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9658599E631B1EC4E70358B2428C236614A1F5D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:6f:17:33:96:c1:f8:ef:9d:1b:0a:16:e6: ac:e7:80:08:1e:1f:e5:4e:a3:b3:18:72:41:a7:17: 83:3f:df:15:22:1a:51:d0:04:eb:7f:f1:f3:cd:ca: bb:c8:b8:14:1b:37:fd:b8:27:ee:e9:db:a2:90:73: 59:8b:70:ca:67:7a:a1:ae:f1:cb:4a:2c:af:48:71: 3a:b0:96:18:fb:50:42:3c:ac:4f:f7:17:25:d3:06: 5d:92:02:b0:bc:68:ea:c0:48:b5:8a:58:c3:ed:31: b3:8c:67:e3:90:bb:7e:79:a0:5f:3d:da:28:44:1b: 95:0a:e1:f3:1d:77:e1:fb:6a:8a:9f:da:3f:76:a4: 05:61:8f:af:d9:f2:8d:08:42:48:7d:d5:3d:14:f1: 41:85:75:69:14:f3:67:b2:85:e7:d2:c7:0a:14:b3: ac:52:7b:e1:6a:56:9c:86:10:17:26:b7:48:4d:b2: 66:45:c2:83:bf:64:a5:4a:f7:43:10:a9:ff:e0:55: b8:a7:63:e0:90:6e:61:3c:a0:7a:29:1b:d3:b1:d8: 16:f6:2a:d0:1a:ca:ba:8a:59:67:8d:34:f5:96:d5: fb:e1:28:f8:79:6c:85:43:a5:69:fd:a3:20:d9:a3: ac:c6:91:61:06:eb:e0:5b:68:dd:45:76:16:eb:8a: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:58:59:9E:63:1B:1E:C4:E7:03:58:B2:42:8C:23:66:14:A1:F5:D3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/llhZnmMbHsTnA1iyQowjZhSh9dM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.160.0/21 Signature Algorithm: sha256WithRSAEncryption 86:ee:9e:48:28:59:d5:f7:de:08:ef:0d:f9:04:80:9e:55:38: 63:18:1c:98:83:fc:90:36:7a:47:2b:3b:b4:ea:97:f8:32:25: 9a:35:d8:d7:6d:33:16:8a:d5:ad:a5:35:61:0c:7b:9b:a3:4c: e6:4a:07:1a:0c:ac:b7:b6:10:0b:8c:56:19:f0:1e:35:f4:15: c6:e9:38:85:4c:5b:67:dd:b1:2a:64:09:33:bb:48:6a:44:a3: 0a:30:ed:fb:31:d4:7d:80:21:59:be:b4:40:c1:c9:8f:4c:a7: fa:41:05:46:e4:1f:0b:31:e6:01:9f:de:cf:73:1d:49:65:c8: 9c:c9:ca:42:c2:be:90:3d:e0:bb:53:5a:dc:c1:cc:32:c8:d4: 30:25:15:77:b0:a6:03:31:17:32:f7:33:41:67:bd:76:37:9d: 23:32:25:85:e5:c9:c7:f4:90:23:c9:5d:d2:ee:e1:ef:61:60: d6:29:04:3b:1d:fd:2a:60:b7:ba:56:a8:37:b3:55:81:6f:d2: eb:bb:36:52:39:66:2c:2d:88:41:94:21:af:bf:7d:6a:4f:cb: af:38:71:d7:a1:d6:50:07:9d:bb:fb:f9:08:f2:5f:6f:83:91: 8f:d7:ca:b9:34:56:77:63:67:0b:f4:0e:99:d5:c2:11:45:6d: eb:15:dd:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2NTg1OTlFNjMxQjFF QzRFNzAzNThCMjQyOEMyMzY2MTRBMUY1RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkCG8XM5bB+O+dGwoW5qzngAgeH+VOo7MYckGnF4M/3xUiGlHQ BOt/8fPNyrvIuBQbN/24J+7p26KQc1mLcMpneqGu8ctKLK9IcTqwlhj7UEI8rE/3 FyXTBl2SArC8aOrASLWKWMPtMbOMZ+OQu355oF892ihEG5UK4fMdd+H7aoqf2j92 pAVhj6/Z8o0IQkh91T0U8UGFdWkU82eyhefSxwoUs6xSe+FqVpyGEBcmt0hNsmZF woO/ZKVK90MQqf/gVbinY+CQbmE8oHopG9Ox2Bb2KtAayrqKWWeNNPWW1fvhKPh5 bIVDpWn9oyDZo6zGkWEG6+BbaN1FdhbrihvhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUllhZnmMbHsTnA1iyQowjZhSh9dMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xsaFpubU1iSHNUbkExaXlR b3dqWmhTaDlkTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2qAwDQYJKoZIhvcNAQELBQADggEBAIbunkgoWdX33gjvDfkEgJ5VOGMYHJiD/JA2 ekcrO7Tql/gyJZo12NdtMxaK1a2lNWEMe5ujTOZKBxoMrLe2EAuMVhnwHjX0Fcbp OIVMW2fdsSpkCTO7SGpEowow7fsx1H2AIVm+tEDByY9Mp/pBBUbkHwsx5gGf3s9z HUllyJzJykLCvpA94LtTWtzBzDLI1DAlFXewpgMxFzL3M0FnvXY3nSMyJYXlycf0 kCPJXdLu4e9hYNYpBDsd/Spgt7pWqDezVYFv0uu7NlI5ZiwtiEGUIa+/fWpPy684 cdeh1lAHnbv7+QjyX2+DkY/Xyrk0VndjZwv0DpnVwhFFbesV3Vo= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net