$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/OUVLOAWhICb6RKIUUcLjrmm0Y34.roa File: OUVLOAWhICb6RKIUUcLjrmm0Y34.roa (raw, json) Hash identifier: I2Osetrg7fASgUaT2feWidPEOjEVokbDhIH5fn7NG7s= Subject key identifier: 39:45:4B:38:05:A1:20:26:FA:44:A2:14:51:C2:E3:AE:69:B4:63:7E Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Certificate serial: 030B Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/OUVLOAWhICb6RKIUUcLjrmm0Y34.roa Signing time: Mon 10 Feb 2025 14:04:08 +0000 ROA not before: Mon 10 Feb 2025 14:04:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.180.20.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Validity Not Before: Feb 10 14:04:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39454B3805A12026FA44A21451C2E3AE69B4637E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:01:04:19:3a:f7:3d:67:bf:de:ae:b2:9a: 4e:61:f7:db:74:06:ad:b2:01:95:a8:8b:f3:61:02: 0e:d2:f1:86:a5:fc:f5:c3:7e:0e:02:75:13:81:6a: a8:d7:46:78:12:e5:04:f1:d7:30:85:e2:97:5c:db: 78:83:9e:7b:ef:dd:43:1d:46:29:10:e8:8a:14:c8: 5c:08:8a:b4:6b:02:35:f4:f4:38:3a:89:d3:29:57: 03:9d:e7:55:0f:c8:70:c5:bc:7f:9d:f2:e8:c7:a9: 06:d9:ee:69:1c:6a:12:fb:2a:0f:b6:0e:d8:cb:db: 4c:d8:9e:2d:e3:1a:e8:6d:ee:b4:a0:0d:e8:ed:54: 39:55:34:80:c5:2a:25:aa:d9:84:69:9a:4e:5f:99: 10:59:b2:9b:97:43:ba:4b:52:ec:6a:0f:52:56:ae: d1:6c:02:eb:ce:14:b1:a6:cd:8c:e3:5c:69:be:62: 3c:e1:2f:0c:4e:30:4d:3b:6a:15:f1:c3:d2:1a:f2: 92:50:e2:86:3b:c3:13:24:cb:69:0b:0e:63:67:0a: af:c7:87:72:cd:1c:2e:7f:85:ca:8f:a3:fd:1d:7f: 78:98:99:00:cc:22:de:a7:9c:59:83:cb:87:4f:96: 96:34:d9:d1:42:57:b7:74:d2:19:24:2e:0d:1a:f3: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:45:4B:38:05:A1:20:26:FA:44:A2:14:51:C2:E3:AE:69:B4:63:7E X509v3 Authority Key Identifier: keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/OUVLOAWhICb6RKIUUcLjrmm0Y34.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.180.20.0/23 Signature Algorithm: sha256WithRSAEncryption 02:98:0e:f2:6b:eb:27:d0:07:73:06:2c:95:a6:b8:43:ef:f9: 75:84:e3:99:0e:09:92:eb:ed:ff:61:1b:f4:d1:1b:9a:1c:50: 1c:ed:9e:33:53:0c:5c:35:20:55:7c:24:54:f7:37:ed:20:fe: 6c:91:12:6c:d1:55:f0:8f:66:8a:68:8d:86:2d:33:dc:40:6a: 5e:d3:0b:0c:0c:a6:d3:04:c5:38:3a:08:a3:ed:3d:df:14:07: 89:3c:42:df:55:cf:85:92:20:a2:70:96:d4:4c:81:a5:c1:6b: 79:96:80:cb:3f:9f:69:96:e4:16:c2:99:69:a1:f1:04:50:57: 9e:3d:30:f6:26:7a:26:7b:75:de:83:16:37:34:0c:29:56:e4: be:ac:16:66:29:27:52:3e:bc:5e:8c:cf:fa:dd:af:8c:ca:41: e1:a3:fc:4f:59:81:77:68:9a:08:39:93:bc:5c:3f:08:5b:1e: 64:77:84:54:48:35:04:c7:43:87:74:3c:8c:88:f7:7b:3f:eb: 57:87:0b:4c:ac:3d:b7:03:35:bc:3b:af:be:11:91:3d:97:b0: 35:32:67:ae:63:26:d0:e9:05:0d:dd:4d:b7:30:39:c4:c7:fe: d4:5e:2f:ef:b3:df:2b:72:eb:16:9f:2e:89:a9:fb:02:e4:c0: 3a:10:22:50 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI2 MDY5NkQ2ODc3M0FFMkU1MzJGMENENUQxMEZEQzBDODI3M0VBNTAeFw0yNTAyMTAx NDA0MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5NDU0QjM4MDVBMTIw MjZGQTQ0QTIxNDUxQzJFM0FFNjlCNDYzN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvDgEEGTr3PWe/3q6ymk5h99t0Bq2yAZWoi/NhAg7S8Yal/PXD fg4CdROBaqjXRngS5QTx1zCF4pdc23iDnnvv3UMdRikQ6IoUyFwIirRrAjX09Dg6 idMpVwOd51UPyHDFvH+d8ujHqQbZ7mkcahL7Kg+2DtjL20zYni3jGuht7rSgDejt VDlVNIDFKiWq2YRpmk5fmRBZspuXQ7pLUuxqD1JWrtFsAuvOFLGmzYzjXGm+Yjzh LwxOME07ahXxw9Ia8pJQ4oY7wxMky2kLDmNnCq/Hh3LNHC5/hcqPo/0df3iYmQDM It6nnFmDy4dPlpY02dFCV7d00hkkLg0a87CTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUOUVLOAWhICb6RKIUUcLjrmm0Y34wHwYDVR0jBBgwFoAUm2BpbWh3OuLlMvDN XRD9wMgnPqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL20y QnBiV2gzT3VMbE12RE5YUkQ5d01nblBxVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bTJCcGJXaDNPdUxsTXZETlhSRDl3TWduUHFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL09VVkxPQVdoSUNiNlJLSVVVY0xqcm1t MFkzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntBQwDQYJ KoZIhvcNAQELBQADggEBAAKYDvJr6yfQB3MGLJWmuEPv+XWE45kOCZLr7f9hG/TR G5ocUBztnjNTDFw1IFV8JFT3N+0g/myREmzRVfCPZopojYYtM9xAal7TCwwMptME xTg6CKPtPd8UB4k8Qt9Vz4WSIKJwltRMgaXBa3mWgMs/n2mW5BbCmWmh8QRQV549 MPYmeiZ7dd6DFjc0DClW5L6sFmYpJ1I+vF6Mz/rdr4zKQeGj/E9ZgXdomgg5k7xc PwhbHmR3hFRINQTHQ4d0PIyI93s/61eHC0ysPbcDNbw7r74RkT2XsDUyZ65jJtDp BQ3dTbcwOcTH/tReL++z3yty6xafLomp+wLkwDoQIlA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net