$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/voSkD2ZLAgOZouWVccT_mcQBMGM.roa File: voSkD2ZLAgOZouWVccT_mcQBMGM.roa (raw, json) Hash identifier: xsj0riTii2yw13NYmMMue0iyVgfOQYZs8Sy0m4q61tg= Subject key identifier: BE:84:A4:0F:66:4B:02:03:99:A2:E5:95:71:C4:FF:99:C4:01:30:63 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23AE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/voSkD2ZLAgOZouWVccT_mcQBMGM.roa Signing time: Mon 10 Feb 2025 14:17:48 +0000 ROA not before: Mon 10 Feb 2025 14:17:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9134 (0x23ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BE84A40F664B020399A2E59571C4FF99C4013063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:88:d3:4c:b5:ef:08:e1:f8:b9:ff:d7:26: c4:0c:be:24:8f:72:71:c9:13:52:00:49:01:ff:20: 13:09:c7:7d:4a:11:30:23:b4:68:29:b0:e4:de:a6: 44:84:17:34:2c:07:bf:32:66:f1:fd:30:7e:34:f7: 4d:36:85:cc:53:f4:0e:15:ff:ec:43:38:67:25:85: 4a:49:e1:a5:b3:d2:38:72:f9:c9:19:43:68:e8:ec: a1:49:53:31:7f:3b:84:e5:64:f7:9e:10:67:8c:03: 81:10:36:ae:e0:e4:dc:b4:00:2f:2f:79:c0:70:3b: e5:5a:e8:87:82:9e:6d:e9:1c:16:27:14:cf:a9:28: 46:ec:62:7c:88:29:99:e3:00:c5:d4:3b:9e:c2:c1: b2:38:2d:d3:b6:4e:6e:bd:06:11:4b:cd:5f:97:6b: 95:98:de:5e:6a:05:78:ba:41:71:a6:dd:fa:dd:d0: 5d:e0:19:90:bc:a3:4e:7a:b5:d3:37:5e:e8:81:1b: db:a3:0f:fb:ff:59:69:71:09:d1:30:22:eb:ec:d3: 00:9f:a6:d0:90:52:f1:b8:7d:d4:8b:92:d9:c9:81: 8e:cb:61:bb:37:92:a0:aa:59:a6:cc:e6:07:56:fc: 70:23:7f:e4:07:ab:25:13:b0:6c:7e:5d:8a:93:0d: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:A4:0F:66:4B:02:03:99:A2:E5:95:71:C4:FF:99:C4:01:30:63 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/voSkD2ZLAgOZouWVccT_mcQBMGM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.48.0/21 Signature Algorithm: sha256WithRSAEncryption 46:7d:5d:a3:2c:38:e0:8b:e4:1e:92:ab:e0:33:b7:7e:b0:17: 3d:94:c6:24:6b:d9:5e:6f:b6:d5:54:40:f8:b3:80:d7:3a:0f: 97:16:dc:d8:4b:d7:21:63:4c:a5:48:8a:2e:b0:53:4a:98:01: f1:e7:d0:2b:e8:30:01:18:61:9f:78:c9:e2:68:d2:b1:e0:ae: cd:50:b5:4e:86:cb:53:85:89:26:1c:d1:99:41:97:85:52:1f: ee:95:8f:8d:8b:de:7a:96:9c:44:66:95:ab:3b:64:8a:ed:c1: 3d:ca:90:d8:3a:df:09:62:fc:26:ca:7f:93:8e:36:c1:a8:c3: 95:16:b5:cd:9d:0a:df:17:5d:07:9f:26:61:06:c4:2f:ac:f8: 2c:19:5a:3d:95:c4:c9:77:9e:d3:4a:74:3e:ee:78:b1:9f:56: 23:0a:02:e5:22:f2:26:06:f4:06:65:16:f1:5d:0e:41:2d:ff: 68:78:c5:39:73:d4:19:2b:a0:98:09:3a:8c:2e:c8:67:f5:c2: db:71:6e:b9:80:d6:a4:7f:a7:6e:05:fe:15:77:7e:32:e4:03: 74:3f:df:2b:0f:0f:be:a2:2b:b5:0e:78:b9:ad:01:6a:fc:63: 9d:59:df:ba:99:ac:c9:5f:83:a1:48:e4:23:27:7c:31:2b:1a: 3c:f8:c3:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJFODRBNDBGNjY0QjAy MDM5OUEyRTU5NTcxQzRGRjk5QzQwMTMwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTEYjTTLXvCOH4uf/XJsQMviSPcnHJE1IASQH/IBMJx31KETAj tGgpsOTepkSEFzQsB78yZvH9MH409002hcxT9A4V/+xDOGclhUpJ4aWz0jhy+ckZ Q2jo7KFJUzF/O4TlZPeeEGeMA4EQNq7g5Ny0AC8vecBwO+Va6IeCnm3pHBYnFM+p KEbsYnyIKZnjAMXUO57CwbI4LdO2Tm69BhFLzV+Xa5WY3l5qBXi6QXGm3frd0F3g GZC8o056tdM3XuiBG9ujD/v/WWlxCdEwIuvs0wCfptCQUvG4fdSLktnJgY7LYbs3 kqCqWabM5gdW/HAjf+QHqyUTsGx+XYqTDW0DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvoSkD2ZLAgOZouWVccT/mcQBMGMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ZvU2tEMlpMQWdPWm91V1Zj Y1RfbWNRQk1HTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2jAwDQYJKoZIhvcNAQELBQADggEBAEZ9XaMsOOCL5B6Sq+Azt36wFz2UxiRr2V5v ttVUQPizgNc6D5cW3NhL1yFjTKVIii6wU0qYAfHn0CvoMAEYYZ94yeJo0rHgrs1Q tU6Gy1OFiSYc0ZlBl4VSH+6Vj42L3nqWnERmlas7ZIrtwT3KkNg63wli/CbKf5OO NsGow5UWtc2dCt8XXQefJmEGxC+s+CwZWj2VxMl3ntNKdD7ueLGfViMKAuUi8iYG 9AZlFvFdDkEt/2h4xTlz1BkroJgJOowuyGf1wttxbrmA1qR/p24F/hV3fjLkA3Q/ 3ysPD76iK7UOeLmtAWr8Y51Z37qZrMlfg6FI5CMnfDErGjz4wzU= -----END CERTIFICATE-----Generated at Thu Apr 17 21:04:40 2025 by rpki-client