$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa File: 8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa (raw, json) Hash identifier: QLXPQkwArwtpCGY/bKqF/TWj8FLkRT1Ig+RCdfrMTZo= Subject key identifier: F2:9C:89:27:A9:9D:76:D4:3E:89:75:FE:8E:A6:1D:CA:B3:70:46:16 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2361 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa Signing time: Mon 10 Feb 2025 14:17:32 +0000 ROA not before: Mon 10 Feb 2025 14:17:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 61.60.215.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9057 (0x2361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F29C8927A99D76D43E8975FE8EA61DCAB3704616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:47:68:33:25:3b:ef:89:91:51:9b:8e:d6: 2d:09:cd:63:a2:68:a9:8b:ff:8e:22:1e:db:db:e8: 57:fb:d6:cd:8f:1b:9d:a7:bb:63:2d:b3:c2:79:93: 99:ba:2b:0a:ab:70:1e:67:49:d4:09:57:aa:f1:72: 41:f2:46:cf:98:c4:e8:d6:d1:80:f2:22:14:77:8e: d7:c1:da:8f:2d:73:64:8c:12:3f:b5:e5:d4:5c:76: 9c:42:08:bd:6a:08:5e:e8:3a:61:db:5c:62:42:ce: 59:f6:22:a9:b8:7c:ee:f5:ae:0e:7e:cf:b3:93:84: 21:5b:b7:2d:6e:a1:f9:68:eb:9b:06:ec:b0:bc:5b: 03:3b:88:1a:5f:44:87:7b:41:01:5e:51:49:b8:be: b9:35:57:20:f8:f5:d6:2b:96:a3:c7:1b:0c:d0:c0: d5:2a:88:b0:e3:f3:ed:e1:59:d5:d1:cb:80:98:84: 9e:6c:17:5a:d9:3e:ba:44:2b:13:5b:fb:5e:a3:4c: 21:71:f9:d3:c5:b1:e3:b9:6d:c0:22:e2:e4:af:18: 66:6f:fe:23:41:c4:b1:9d:c4:a5:6c:6b:d6:42:59: 7a:a2:51:55:68:33:ac:85:2a:d2:75:a2:15:49:65: 9a:4b:62:35:81:5a:4f:79:66:83:da:79:c5:d0:9c: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9C:89:27:A9:9D:76:D4:3E:89:75:FE:8E:A6:1D:CA:B3:70:46:16 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.215.128/25 Signature Algorithm: sha256WithRSAEncryption 5a:44:8a:6e:ae:6e:b6:f2:7f:d2:b6:48:dc:c3:f5:b4:21:60: 9f:6e:b1:17:b4:ed:aa:3b:e1:3f:60:ce:d1:c9:0b:0a:f6:70: c7:38:6e:65:ea:05:55:6d:4d:56:4f:2d:91:fc:47:aa:70:a2: 16:ba:66:eb:14:96:e3:e9:84:9e:47:6a:6f:75:c6:f3:d7:92: f7:3c:d8:92:c9:c9:3a:61:83:6c:9a:7b:d2:ff:e9:0f:6e:13: bb:c2:eb:7a:51:e9:67:8d:9a:43:9e:17:4c:01:33:3a:3e:4a: 0f:b7:92:fa:7f:01:9e:4c:b1:a8:f6:85:47:9e:f3:a0:7d:af: 4e:cc:d3:6e:84:73:89:1f:1d:ad:dc:7f:55:13:02:3d:fb:73: 80:2c:e2:5c:bd:19:16:71:5e:f7:e7:99:b1:18:13:34:6f:26: 18:65:55:cd:43:f4:1a:70:27:94:32:e9:b2:fa:c5:ad:c1:94: f2:3e:76:04:70:d6:e8:c9:2c:13:b4:4a:c9:a0:3f:50:5d:f5: fc:29:d5:db:84:bd:f6:75:c0:63:60:73:56:18:d0:4a:a7:68: 7f:ee:6f:c7:4b:54:5c:37:03:23:48:7f:cc:9b:8e:c9:78:4d: 80:de:53:fb:15:38:88:b5:29:d5:df:a5:e2:8f:0d:23:c2:15: b9:18:36:3f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICI2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyOUM4OTI3QTk5RDc2 RDQzRTg5NzVGRThFQTYxRENBQjM3MDQ2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC95UdoMyU774mRUZuO1i0JzWOiaKmL/44iHtvb6Ff71s2PG52n u2Mts8J5k5m6KwqrcB5nSdQJV6rxckHyRs+YxOjW0YDyIhR3jtfB2o8tc2SMEj+1 5dRcdpxCCL1qCF7oOmHbXGJCzln2Iqm4fO71rg5+z7OThCFbty1uoflo65sG7LC8 WwM7iBpfRId7QQFeUUm4vrk1VyD49dYrlqPHGwzQwNUqiLDj8+3hWdXRy4CYhJ5s F1rZPrpEKxNb+16jTCFx+dPFseO5bcAi4uSvGGZv/iNBxLGdxKVsa9ZCWXqiUVVo M6yFKtJ1ohVJZZpLYjWBWk95ZoPaecXQnNuxAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU8pyJJ6mddtQ+iXX+jqYdyrNwRhYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhweUpKNm1kZHRRLWlYWC1q cVlkeXJOd1JoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQc9 PNeAMA0GCSqGSIb3DQEBCwUAA4IBAQBaRIpurm628n/Stkjcw/W0IWCfbrEXtO2q O+E/YM7RyQsK9nDHOG5l6gVVbU1WTy2R/EeqcKIWumbrFJbj6YSeR2pvdcbz15L3 PNiSyck6YYNsmnvS/+kPbhO7wut6UelnjZpDnhdMATM6PkoPt5L6fwGeTLGo9oVH nvOgfa9OzNNuhHOJHx2t3H9VEwI9+3OALOJcvRkWcV7355mxGBM0byYYZVXNQ/Qa cCeUMumy+sWtwZTyPnYEcNboySwTtErJoD9QXfX8KdXbhL32dcBjYHNWGNBKp2h/ 7m/HS1RcNwMjSH/Mm47JeE2A3lP7FTiItSnV36Xijw0jwhW5GDY/ -----END CERTIFICATE-----Generated at Thu Apr 17 21:09:14 2025 by rpki-client