$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/osmUmPPPsgAxLPTRSDXAoCzWYXg.roa File: osmUmPPPsgAxLPTRSDXAoCzWYXg.roa (raw, json) Hash identifier: YM5ZJhHdqOPlcYfaiCDXo5igBualS3XnjZcFnguPrEk= Subject key identifier: A2:C9:94:98:F3:CF:B2:00:31:2C:F4:D1:48:35:C0:A0:2C:D6:61:78 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2390 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/osmUmPPPsgAxLPTRSDXAoCzWYXg.roa Signing time: Mon 10 Feb 2025 14:17:42 +0000 ROA not before: Mon 10 Feb 2025 14:17:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.100.64.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9104 (0x2390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2C99498F3CFB200312CF4D14835C0A02CD66178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d2:d6:cb:25:17:9b:0b:c2:2e:ee:5d:8a:32: 64:3a:be:8e:39:d2:1d:42:7b:62:4c:2b:4c:e1:42: 0e:e9:5d:d2:47:4f:e8:5f:96:d1:36:8b:13:7a:a8: 8a:5d:40:d9:a7:e7:3f:d2:05:9a:30:5c:eb:9a:dd: be:6e:55:cc:bb:e9:db:a2:d3:c2:69:55:ca:24:9a: 8b:0c:52:3c:4c:06:61:81:99:7c:8b:9a:9c:9b:ac: 75:db:12:fa:02:60:e0:30:8b:a1:4c:d3:4b:66:3d: fc:7f:a8:4c:de:45:22:df:ae:6d:77:75:0e:08:38: 3c:fd:08:8f:9f:27:86:52:dc:37:0a:90:35:32:e1: 13:75:9c:5c:0b:80:1d:a2:1f:c2:d1:bb:39:3f:e9: bf:cf:a3:0c:38:26:01:3d:8b:00:58:20:f3:6f:0c: d0:5f:7a:86:86:4e:a6:cb:16:9a:0b:1b:1c:21:7a: ce:49:0d:e3:91:a0:ed:11:a3:da:3f:76:1b:09:b3: e7:be:d4:96:b5:75:f2:cf:32:67:e5:25:46:73:21: 92:cb:42:79:4c:b7:0f:90:e9:3c:43:2e:e4:54:f2: 40:97:61:58:fc:c4:12:2c:65:c8:a4:4e:f9:2d:7d: 66:36:16:c1:9f:8d:b4:57:95:96:09:c2:9f:73:9b: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C9:94:98:F3:CF:B2:00:31:2C:F4:D1:48:35:C0:A0:2C:D6:61:78 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/osmUmPPPsgAxLPTRSDXAoCzWYXg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 78:18:f4:75:a8:71:d1:98:86:61:25:83:f6:fb:d1:28:20:29: c6:8b:97:97:cd:5e:80:90:b2:b3:84:16:49:26:e7:26:04:7c: 99:78:85:35:1a:85:d2:20:c7:2d:8b:ff:af:4b:0c:c1:d3:69: 31:4d:f3:b0:f6:d0:59:ae:45:74:9f:2e:dc:4d:c2:99:15:52: 52:c8:a2:b3:9c:f7:09:b1:82:ff:7f:e3:2e:42:9e:14:79:52: fb:fd:97:07:6b:e5:15:c4:a6:27:e4:fb:6c:83:37:1e:6b:e0: 76:cd:4f:6e:d5:a3:46:1c:5f:5b:3d:5d:ff:f4:5a:64:be:83: 66:d1:3f:74:26:15:53:22:bb:b4:e5:49:cf:d3:0a:ba:8a:3d: 6f:4b:8c:f3:66:5a:5b:8f:a5:6d:25:d0:e6:a3:37:78:61:a0: 2a:4a:c1:ab:49:c2:81:06:3c:69:e9:79:67:69:f9:08:d5:2b: 33:40:52:9c:08:76:a5:03:60:c3:ca:26:d7:81:7e:17:1e:46: 40:c3:30:b4:b2:31:c3:58:06:0e:82:a5:fe:80:72:a9:02:80: cf:f4:f0:ae:70:1d:c5:0b:70:0a:1d:2b:55:ac:3e:6c:0d:3a: eb:e8:f8:a5:62:77:36:3b:8d:f4:78:a4:6c:1d:7f:ec:7c:e8: 96:23:59:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyQzk5NDk4RjNDRkIy MDAzMTJDRjREMTQ4MzVDMEEwMkNENjYxNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ0tbLJRebC8Iu7l2KMmQ6vo450h1Ce2JMK0zhQg7pXdJHT+hf ltE2ixN6qIpdQNmn5z/SBZowXOua3b5uVcy76dui08JpVcokmosMUjxMBmGBmXyL mpybrHXbEvoCYOAwi6FM00tmPfx/qEzeRSLfrm13dQ4IODz9CI+fJ4ZS3DcKkDUy 4RN1nFwLgB2iH8LRuzk/6b/Poww4JgE9iwBYIPNvDNBfeoaGTqbLFpoLGxwhes5J DeORoO0Ro9o/dhsJs+e+1Ja1dfLPMmflJUZzIZLLQnlMtw+Q6TxDLuRU8kCXYVj8 xBIsZcikTvktfWY2FsGfjbRXlZYJwp9zm5KrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUosmUmPPPsgAxLPTRSDXAoCzWYXgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29zbVVtUFBQc2dBeExQVFJT RFhBb0N6V1lYZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 ZEAwDQYJKoZIhvcNAQELBQADggEBAHgY9HWocdGYhmElg/b70SggKcaLl5fNXoCQ srOEFkkm5yYEfJl4hTUahdIgxy2L/69LDMHTaTFN87D20FmuRXSfLtxNwpkVUlLI orOc9wmxgv9/4y5CnhR5Uvv9lwdr5RXEpifk+2yDNx5r4HbNT27Vo0YcX1s9Xf/0 WmS+g2bRP3QmFVMiu7TlSc/TCrqKPW9LjPNmWluPpW0l0OajN3hhoCpKwatJwoEG PGnpeWdp+QjVKzNAUpwIdqUDYMPKJteBfhceRkDDMLSyMcNYBg6Cpf6AcqkCgM/0 8K5wHcULcAodK1WsPmwNOuvo+KVidzY7jfR4pGwdf+x86JYjWZI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net