$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MqRPkYm_EXm5VyOuEQEjRonpsEA.roa File: MqRPkYm_EXm5VyOuEQEjRonpsEA.roa (raw, json) Hash identifier: gAUYByee9VuLF2y3SKT+ZHvL/KIUlOOfx/MW6sbDeRE= Subject key identifier: 32:A4:4F:91:89:BF:11:79:B9:57:23:AE:11:01:23:46:89:E9:B0:40 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 244C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MqRPkYm_EXm5VyOuEQEjRonpsEA.roa Signing time: Mon 10 Feb 2025 14:18:29 +0000 ROA not before: Mon 10 Feb 2025 14:18:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9292 (0x244c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=32A44F9189BF1179B95723AE1101234689E9B040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:4f:20:a0:43:29:93:ef:10:a1:99:93:4b: c8:c7:24:26:e1:f4:4b:31:6a:96:ef:bf:34:15:1c: f2:fb:12:1e:1e:65:64:53:d2:24:14:d8:b7:d7:66: 92:f8:a3:ec:c9:a7:1c:b4:0f:df:c2:27:38:ca:0c: c7:85:93:44:ea:48:4c:17:f8:8e:00:4d:b6:a0:be: c7:a6:a9:bb:59:9b:6b:e5:9f:f9:0c:f7:e2:8c:67: 31:78:ea:6a:7a:51:e9:70:70:a6:53:06:48:11:61: 06:d2:02:7f:58:50:07:6e:0c:24:c8:8c:06:52:75: 01:e7:22:da:49:f7:48:df:04:a6:f2:49:58:f6:f0: 1a:7b:96:89:57:e1:b2:91:6b:24:64:ae:2d:64:d1: 6e:69:1a:af:55:71:4d:b7:af:45:c0:4b:e2:7d:57: 6a:95:01:e5:b8:72:8c:05:88:37:9c:a2:81:90:f3: 4d:59:7c:f6:db:84:50:d3:92:ea:d9:5d:96:35:10: 47:1a:57:99:60:5a:ff:71:9f:10:7a:c6:6b:50:52: bf:a0:9d:8c:55:78:66:ce:39:ab:fc:aa:c2:1a:03: 83:97:12:b5:86:80:02:95:8d:80:9c:19:f1:0a:7c: 4e:8e:d3:4d:ba:ab:ba:d3:1b:05:20:47:e1:c6:01: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A4:4F:91:89:BF:11:79:B9:57:23:AE:11:01:23:46:89:E9:B0:40 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MqRPkYm_EXm5VyOuEQEjRonpsEA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.190.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:8d:a1:34:27:10:dc:a9:36:f1:43:a4:17:17:04:bc:13:37: 7c:b0:00:9d:5d:91:f7:51:aa:36:6c:69:11:b8:cf:9e:ea:18: 9b:61:27:02:15:4b:d5:f6:06:81:6b:ff:76:13:39:87:37:03: 7d:46:76:45:93:ba:11:c5:a8:bb:9c:a3:a8:32:3a:57:a2:f7: 26:61:f1:f1:c3:30:c5:0e:a4:34:19:37:b5:d6:a4:3f:8c:6d: a7:1d:4f:fc:83:27:5b:85:d7:cd:69:1c:38:f3:89:94:07:e3: a6:6e:d9:79:8a:ef:b3:2f:9b:c8:50:32:3a:75:29:69:1e:b5: 37:c1:a6:d9:9d:6d:a0:3a:5a:57:87:1b:a3:2c:5f:55:17:5d: d5:8d:c1:4a:55:ea:08:62:75:de:46:a4:d4:d3:55:5d:d7:b0: d9:eb:53:fb:d4:f1:2d:d0:ff:d9:8b:14:47:c1:fc:08:32:c8: 6e:cf:f3:ba:1e:3f:df:b0:b9:64:e3:cd:eb:86:b2:4c:01:f2: c8:b6:7b:22:5d:1a:2f:a2:08:66:f3:84:bb:bb:94:c8:be:ab: 73:e5:fc:5e:54:9f:58:c9:dc:25:94:1a:15:2d:78:6d:b8:fc: 8b:18:1f:30:2f:89:8a:f1:76:be:5d:32:6b:13:a9:67:58:ec: 6b:33:f0:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyQTQ0RjkxODlCRjEx NzlCOTU3MjNBRTExMDEyMzQ2ODlFOUIwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsXU8goEMpk+8QoZmTS8jHJCbh9EsxapbvvzQVHPL7Eh4eZWRT 0iQU2LfXZpL4o+zJpxy0D9/CJzjKDMeFk0TqSEwX+I4ATbagvsemqbtZm2vln/kM 9+KMZzF46mp6UelwcKZTBkgRYQbSAn9YUAduDCTIjAZSdQHnItpJ90jfBKbySVj2 8Bp7lolX4bKRayRkri1k0W5pGq9VcU23r0XAS+J9V2qVAeW4cowFiDecooGQ801Z fPbbhFDTkurZXZY1EEcaV5lgWv9xnxB6xmtQUr+gnYxVeGbOOav8qsIaA4OXErWG gAKVjYCcGfEKfE6O0026q7rTGwUgR+HGAT6RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMqRPkYm/EXm5VyOuEQEjRonpsEAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01xUlBrWW1fRVhtNVZ5T3VF UUVqUm9ucHNFQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2r4wDQYJKoZIhvcNAQELBQADggEBAA+NoTQnENypNvFDpBcXBLwTN3ywAJ1dkfdR qjZsaRG4z57qGJthJwIVS9X2BoFr/3YTOYc3A31GdkWTuhHFqLuco6gyOlei9yZh 8fHDMMUOpDQZN7XWpD+MbacdT/yDJ1uF181pHDjziZQH46Zu2XmK77Mvm8hQMjp1 KWketTfBptmdbaA6WleHG6MsX1UXXdWNwUpV6ghidd5GpNTTVV3XsNnrU/vU8S3Q /9mLFEfB/AgyyG7P87oeP9+wuWTjzeuGskwB8si2eyJdGi+iCGbzhLu7lMi+q3Pl /F5Un1jJ3CWUGhUteG24/IsYHzAviYrxdr5dMmsTqWdY7Gsz8PQ= -----END CERTIFICATE-----Generated at Fri Apr 18 16:34:00 2025 by rpki-client