$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/owgbciAEgNz0TRDwRLH_RTnVAbs.roa File: owgbciAEgNz0TRDwRLH_RTnVAbs.roa (raw, json) Hash identifier: YwU3Zc5wimCNFxr4hbmhtBSP7r2OudYPUlVcmL5pRcE= Subject key identifier: A3:08:1B:72:20:04:80:DC:F4:4D:10:F0:44:B1:FF:45:39:D5:01:BB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2369 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/owgbciAEgNz0TRDwRLH_RTnVAbs.roa Signing time: Mon 10 Feb 2025 14:17:34 +0000 ROA not before: Mon 10 Feb 2025 14:17:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9065 (0x2369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3081B72200480DCF44D10F044B1FF4539D501BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:a3:9c:c3:27:7a:65:0e:e9:04:d5:5e:74: 2e:66:1e:b6:99:a7:99:9a:39:d5:12:59:5d:92:2c: 0e:8a:4d:19:47:d6:9d:65:ed:46:b6:cb:ed:f1:48: c5:1f:ea:88:c6:85:39:38:57:0e:de:30:f4:3e:47: 0e:dc:08:4b:95:46:38:35:ee:ee:0b:e8:f3:54:7a: df:14:38:d6:69:70:32:ac:5d:68:00:6e:e4:e7:8e: 81:0c:c3:23:18:f5:4b:3d:ae:ef:ae:10:47:26:91: 93:c6:a9:a4:7b:c5:fe:4f:de:86:52:e9:a7:83:a1: af:23:d7:9c:cc:77:48:95:78:88:4a:3a:b7:88:ed: c7:ea:f6:2b:de:82:d9:83:b8:4f:b8:27:f2:3d:f2: c0:98:a9:64:91:97:62:42:0a:a8:93:31:52:fd:ee: 5e:29:af:a2:d6:05:4e:43:e2:e3:c0:62:2c:71:91: 84:75:a8:76:9b:8d:8c:3a:23:09:c6:ee:a3:27:15: b3:44:92:64:72:48:3b:88:d9:c5:70:35:87:e4:38: da:c0:a1:ce:e3:7d:20:ed:62:3d:fb:ed:73:db:ed: 1e:19:7a:4d:89:36:04:5e:e6:4f:da:02:ab:33:64: 5a:4f:bb:10:c8:1b:b3:02:72:48:83:eb:b0:b2:51: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:08:1B:72:20:04:80:DC:F4:4D:10:F0:44:B1:FF:45:39:D5:01:BB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/owgbciAEgNz0TRDwRLH_RTnVAbs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.56.0/24 Signature Algorithm: sha256WithRSAEncryption 83:86:76:f5:93:0c:ec:e7:39:53:7d:65:89:ef:cc:72:72:71: b4:ae:2b:e8:06:4f:7c:8e:2e:5b:29:c1:b9:ce:e9:ce:9a:bf: eb:6f:cf:e6:9c:a2:85:77:8c:6b:ee:e7:44:b5:dd:7e:98:5e: 6e:7b:72:dc:48:cd:91:0b:1a:87:2c:47:75:20:bc:f3:99:14: 3f:69:d5:70:19:92:67:87:3d:88:9e:0b:e4:52:70:5f:30:15: 95:cc:5f:da:87:0f:0e:2e:2d:14:98:0f:2a:79:84:71:30:e0: 66:cb:f0:bf:7e:be:e2:f3:82:40:38:37:7a:99:a3:55:b5:fd: f3:82:ec:9f:09:d2:eb:d1:76:b6:55:c2:bd:91:e7:17:bb:86: 43:c4:b0:9d:35:20:60:71:2e:63:7b:81:29:c8:e1:b7:32:5a: 11:cf:8c:5d:46:f1:11:9e:df:94:9d:25:f6:cd:6e:99:f4:ca: b1:0a:98:37:be:b7:82:f6:aa:c9:59:3d:14:db:2c:77:ee:9f: 5f:dc:96:ee:80:11:b8:d2:cd:db:18:41:35:3c:67:39:05:3c: 51:63:17:a7:4c:51:4d:c3:f1:10:16:a7:a3:51:b4:d6:45:a3: f3:24:55:8e:77:b7:57:2d:61:3b:6b:ee:a2:70:04:a2:1c:09: c2:bd:c3:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI2kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzMDgxQjcyMjAwNDgw RENGNDREMTBGMDQ0QjFGRjQ1MzlENTAxQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMZqOcwyd6ZQ7pBNVedC5mHraZp5maOdUSWV2SLA6KTRlH1p1l 7Ua2y+3xSMUf6ojGhTk4Vw7eMPQ+Rw7cCEuVRjg17u4L6PNUet8UONZpcDKsXWgA buTnjoEMwyMY9Us9ru+uEEcmkZPGqaR7xf5P3oZS6aeDoa8j15zMd0iVeIhKOreI 7cfq9ivegtmDuE+4J/I98sCYqWSRl2JCCqiTMVL97l4pr6LWBU5D4uPAYixxkYR1 qHabjYw6IwnG7qMnFbNEkmRySDuI2cVwNYfkONrAoc7jfSDtYj377XPb7R4Zek2J NgRe5k/aAqszZFpPuxDIG7MCckiD67CyUTc1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUowgbciAEgNz0TRDwRLH/RTnVAbswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL293Z2JjaUFFZ056MFRSRHdS TEhfUlRuVkFicy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2jgwDQYJKoZIhvcNAQELBQADggEBAIOGdvWTDOznOVN9ZYnvzHJycbSuK+gGT3yO LlspwbnO6c6av+tvz+acooV3jGvu50S13X6YXm57ctxIzZELGocsR3UgvPOZFD9p 1XAZkmeHPYieC+RScF8wFZXMX9qHDw4uLRSYDyp5hHEw4GbL8L9+vuLzgkA4N3qZ o1W1/fOC7J8J0uvRdrZVwr2R5xe7hkPEsJ01IGBxLmN7gSnI4bcyWhHPjF1G8RGe 35SdJfbNbpn0yrEKmDe+t4L2qslZPRTbLHfun1/clu6AEbjSzdsYQTU8ZzkFPFFj F6dMUU3D8RAWp6NRtNZFo/MkVY53t1ctYTtr7qJwBKIcCcK9w50= -----END CERTIFICATE-----Generated at Thu Apr 17 21:03:02 2025 by rpki-client