$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcONK6glXhETNiAYjdD1umATnZ0.roa File: CcONK6glXhETNiAYjdD1umATnZ0.roa (raw, json) Hash identifier: qDUuCCmlPYtiZJi1wEt1+D2AgUdtBl/u/KP+bqhW2CY= Subject key identifier: 09:C3:8D:2B:A8:25:5E:11:13:36:20:18:8D:D0:F5:BA:60:13:9D:9D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24B6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcONK6glXhETNiAYjdD1umATnZ0.roa Signing time: Mon 10 Feb 2025 14:18:54 +0000 ROA not before: Mon 10 Feb 2025 14:18:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 180.218.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9398 (0x24b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=09C38D2BA8255E11133620188DD0F5BA60139D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:09:5d:87:dc:11:46:83:04:2c:4a:3e:75: 9c:a2:86:ea:e9:c8:56:22:e5:bf:50:6f:92:bb:8c: df:71:b2:bd:e0:44:69:0c:bc:b1:22:d3:0a:7c:5a: 38:44:cc:61:60:d5:77:45:34:2a:cb:cb:2e:10:9d: 9b:08:d4:14:7c:6a:32:37:a2:2b:ca:ca:ae:9e:75: 4e:0f:86:4c:b4:2e:15:9a:bb:63:e9:54:75:5a:f6: 56:d4:04:d4:34:e0:d5:e3:40:5b:9a:4a:54:5e:dd: 7e:0b:31:bc:aa:26:17:c3:a0:21:4a:7e:20:6a:c1: c0:e9:d8:75:ea:1c:e2:3f:27:fc:15:49:f8:d9:d6: 3c:f4:f1:2b:cf:cf:ae:e8:4e:72:24:a7:be:a2:18: 46:62:93:b2:a4:61:d7:cb:d3:d3:19:9d:b3:58:81: 26:84:e4:bd:8c:3a:bc:2b:99:7f:78:db:f5:c5:7e: d7:65:d4:d2:73:42:76:19:f1:71:7a:af:b4:7f:78: c3:ca:22:fc:55:de:0c:be:45:80:16:ef:dd:fe:41: 12:39:a7:9a:2d:76:1c:db:3d:d4:c6:50:61:66:8a: 79:1d:80:d2:50:6e:1d:50:80:b2:98:bd:26:d9:65: fc:91:6e:05:dc:fc:4f:7b:0b:26:9f:1e:85:20:10: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C3:8D:2B:A8:25:5E:11:13:36:20:18:8D:D0:F5:BA:60:13:9D:9D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcONK6glXhETNiAYjdD1umATnZ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.40.0/22 Signature Algorithm: sha256WithRSAEncryption 70:1b:25:ee:05:83:e7:5a:a1:c0:8f:4e:28:1c:7a:64:b2:09: 83:f8:0d:1e:f3:5f:cc:fb:5c:c7:68:d3:0b:c7:64:5c:9d:5c: f0:d7:71:4b:98:08:56:de:f1:f8:a3:3c:9a:2d:0c:0e:2d:00: 99:52:26:14:48:2e:b8:a0:6a:74:00:b3:db:81:28:cd:e9:75: 48:f0:83:24:04:cb:ba:32:c9:51:c5:51:50:c4:23:2a:75:8f: ed:c9:f2:20:54:36:c5:ce:05:42:b8:3c:7a:1f:2f:cd:d9:9d: ff:41:ae:d2:d4:93:27:5f:70:d7:a1:c9:46:7c:8e:45:8e:d6: 8c:c8:41:b1:73:50:53:33:16:21:b0:c4:eb:1a:13:4c:c8:1a: 67:86:d2:12:a9:81:16:ea:fb:31:d5:d5:5e:c8:8c:c2:ce:75: 83:44:40:d2:22:74:76:97:ba:85:6d:c5:19:5b:e1:72:cb:d2: c2:a6:bd:32:c1:e9:a9:10:56:36:e2:1a:82:a6:41:eb:fb:50: c5:8d:bb:03:7e:7e:13:7b:99:8d:b9:3c:43:23:fe:fb:13:64: 84:39:a8:06:d5:3e:d1:6d:7f:07:d2:d0:b6:81:d9:63:95:7a: a8:90:57:a9:28:14:9f:36:9a:88:53:17:ed:bf:59:b8:66:21: 6f:a7:f1:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5QzM4RDJCQTgyNTVF MTExMzM2MjAxODhERDBGNUJBNjAxMzlEOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDToAldh9wRRoMELEo+dZyihurpyFYi5b9Qb5K7jN9xsr3gRGkM vLEi0wp8WjhEzGFg1XdFNCrLyy4QnZsI1BR8ajI3oivKyq6edU4Phky0LhWau2Pp VHVa9lbUBNQ04NXjQFuaSlRe3X4LMbyqJhfDoCFKfiBqwcDp2HXqHOI/J/wVSfjZ 1jz08SvPz67oTnIkp76iGEZik7KkYdfL09MZnbNYgSaE5L2MOrwrmX942/XFftdl 1NJzQnYZ8XF6r7R/eMPKIvxV3gy+RYAW793+QRI5p5otdhzbPdTGUGFminkdgNJQ bh1QgLKYvSbZZfyRbgXc/E97CyafHoUgEJcrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCcONK6glXhETNiAYjdD1umATnZ0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NjT05LNmdsWGhFVE5pQVlq ZEQxdW1BVG5aMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2igwDQYJKoZIhvcNAQELBQADggEBAHAbJe4Fg+daocCPTigcemSyCYP4DR7zX8z7 XMdo0wvHZFydXPDXcUuYCFbe8fijPJotDA4tAJlSJhRILriganQAs9uBKM3pdUjw gyQEy7oyyVHFUVDEIyp1j+3J8iBUNsXOBUK4PHofL83Znf9BrtLUkydfcNehyUZ8 jkWO1ozIQbFzUFMzFiGwxOsaE0zIGmeG0hKpgRbq+zHV1V7IjMLOdYNEQNIidHaX uoVtxRlb4XLL0sKmvTLB6akQVjbiGoKmQev7UMWNuwN+fhN7mY25PEMj/vsTZIQ5 qAbVPtFtfwfS0LaB2WOVeqiQV6koFJ82mohTF+2/WbhmIW+n8dM= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:17 2025 by rpki-client