$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oAGcI0asWMyhfuseFswmB6ozk5s.roa File: oAGcI0asWMyhfuseFswmB6ozk5s.roa (raw, json) Hash identifier: b31HqdpKMQD6xvfW3g1btSNCHH9B7hVfYI5yHdc0ptQ= Subject key identifier: A0:01:9C:23:46:AC:58:CC:A1:7E:EB:1E:16:CC:26:07:AA:33:93:9B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 238B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oAGcI0asWMyhfuseFswmB6ozk5s.roa Signing time: Mon 10 Feb 2025 14:17:41 +0000 ROA not before: Mon 10 Feb 2025 14:17:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 180.218.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9099 (0x238b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0019C2346AC58CCA17EEB1E16CC2607AA33939B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:fb:fd:c3:d8:c8:08:54:db:06:79:d0:1c: d8:5d:88:fc:57:5a:3e:5b:2a:81:c4:97:b1:42:05: 1f:61:31:7e:cf:17:f8:a4:ff:01:c2:7b:80:5f:e4: e0:d6:62:dd:4a:99:2c:2b:a7:65:ff:b7:ca:ac:b9: a7:de:57:49:80:63:4b:a4:63:66:a0:d8:cc:15:74: 5c:59:96:86:d1:76:c2:19:26:29:92:a2:73:d1:51: 4a:48:9b:f1:67:57:93:b2:47:45:68:3f:71:45:34: de:fe:39:8d:80:eb:5b:ad:73:ad:ea:4e:d4:e1:f5: 74:53:48:54:ef:cb:16:cd:b8:90:7e:0c:2a:7f:67: c0:78:cb:17:ad:d1:ef:42:d8:3e:4a:af:e0:7a:33: 8c:fc:b7:e1:47:33:20:8b:8e:32:68:ec:d9:ee:ef: e2:58:b7:63:60:4a:ee:bc:99:b8:76:b2:f7:96:a6: f4:0d:17:68:8d:e8:f0:1d:9c:e8:04:51:9c:20:86: f8:f1:e1:dd:f8:13:34:de:56:f5:a6:1e:c1:d0:00: 43:51:12:fe:95:98:cf:0a:6a:34:b1:a6:73:42:bb: eb:36:c3:6b:fe:6e:05:5f:7f:11:16:23:75:33:df: a9:61:3c:30:91:b5:3b:14:62:0b:21:f1:7b:8b:3e: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:01:9C:23:46:AC:58:CC:A1:7E:EB:1E:16:CC:26:07:AA:33:93:9B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oAGcI0asWMyhfuseFswmB6ozk5s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.44.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:c5:bb:62:0d:e5:7a:2a:b3:0a:88:1b:35:62:97:f3:42:d4: 1d:9f:f7:79:94:43:5f:e3:40:6a:77:7e:d3:09:43:7c:f8:9b: 21:ad:7e:23:fb:52:11:66:a2:e0:31:e3:9b:cb:50:c0:7e:4e: 81:ce:17:c2:0f:98:11:c5:6e:d9:da:10:d4:40:57:10:be:c0: 19:55:61:79:c0:0f:d3:70:6b:17:8b:09:49:fb:7f:d4:0c:e6: e5:de:c7:0d:81:cb:13:96:ea:1f:60:05:a9:94:94:b2:06:2d: bc:00:b4:15:bc:90:1d:f6:63:8c:41:2c:12:19:ab:ae:be:6a: 32:4f:63:00:fb:bd:c4:77:dd:f7:94:da:ef:b9:a1:e5:df:6f: 59:5d:98:50:6e:ae:79:6d:ce:80:93:76:f1:f2:35:76:c4:0a: 7d:b8:2e:a2:d5:01:3f:05:88:e7:d9:58:fd:87:5d:cf:3b:30: 6e:5c:b9:ba:dc:be:11:e4:02:9d:7a:39:de:d5:e4:d6:ff:9c: 83:fc:1e:45:0d:ca:35:c5:f1:ba:b8:7c:ce:f7:c9:19:1b:57: 14:1a:3e:8b:1c:6a:f9:06:7a:8d:c0:6d:25:b4:d4:c6:e0:14: 7f:b5:69:25:fe:6b:fb:f0:11:3b:2e:fe:59:5a:df:38:64:80: e9:0a:8d:68 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwMDE5QzIzNDZBQzU4 Q0NBMTdFRUIxRTE2Q0MyNjA3QUEzMzkzOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaIPv9w9jICFTbBnnQHNhdiPxXWj5bKoHEl7FCBR9hMX7PF/ik /wHCe4Bf5ODWYt1KmSwrp2X/t8qsuafeV0mAY0ukY2ag2MwVdFxZlobRdsIZJimS onPRUUpIm/FnV5OyR0VoP3FFNN7+OY2A61utc63qTtTh9XRTSFTvyxbNuJB+DCp/ Z8B4yxet0e9C2D5Kr+B6M4z8t+FHMyCLjjJo7Nnu7+JYt2NgSu68mbh2sveWpvQN F2iN6PAdnOgEUZwghvjx4d34EzTeVvWmHsHQAENREv6VmM8KajSxpnNCu+s2w2v+ bgVffxEWI3Uz36lhPDCRtTsUYgsh8XuLPncRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoAGcI0asWMyhfuseFswmB6ozk5swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29BR2NJMGFzV015aGZ1c2VG c3dtQjZvems1cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2iwwDQYJKoZIhvcNAQELBQADggEBAIvFu2IN5XoqswqIGzVil/NC1B2f93mUQ1/j QGp3ftMJQ3z4myGtfiP7UhFmouAx45vLUMB+ToHOF8IPmBHFbtnaENRAVxC+wBlV YXnAD9NwaxeLCUn7f9QM5uXexw2ByxOW6h9gBamUlLIGLbwAtBW8kB32Y4xBLBIZ q66+ajJPYwD7vcR33feU2u+5oeXfb1ldmFBurnltzoCTdvHyNXbECn24LqLVAT8F iOfZWP2HXc87MG5cubrcvhHkAp16Od7V5Nb/nIP8HkUNyjXF8bq4fM73yRkbVxQa PoscavkGeo3AbSW01MbgFH+1aSX+a/vwETsu/lla3zhkgOkKjWg= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:18 2025 by rpki-client