$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cPwcs636s-Vb57Mf_GcWcJ2Ruzc.roa File: cPwcs636s-Vb57Mf_GcWcJ2Ruzc.roa (raw, json) Hash identifier: e5ZSTMDUubQnpuDYdJESsRdSCwX0dlolGLPuOvUDp7s= Subject key identifier: 70:FC:1C:B3:AD:FA:B3:E5:5B:E7:B3:1F:FC:67:16:70:9D:91:BB:37 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 23AF Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cPwcs636s-Vb57Mf_GcWcJ2Ruzc.roa Signing time: Mon 10 Feb 2025 14:17:49 +0000 ROA not before: Mon 10 Feb 2025 14:17:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.56.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9135 (0x23af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=70FC1CB3ADFAB3E55BE7B31FFC6716709D91BB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:16:1d:70:ae:86:16:6d:3a:2c:30:7a:94: c6:bf:48:b9:6b:4b:c0:97:f7:bd:91:41:a0:f8:e0: e4:19:30:0f:06:62:e6:fe:f7:23:5f:92:5e:bb:76: f7:38:81:ce:92:2f:02:1e:1c:38:fd:62:5f:a0:fb: ba:2e:85:62:7e:a2:3f:ae:77:fe:db:5e:4b:8a:bb: c2:3b:03:e1:ef:a4:d7:12:ab:f7:c7:7d:56:a6:78: 15:3a:1b:9e:ac:6f:93:57:a2:dc:73:cb:ae:86:92: 63:20:51:13:15:98:2b:b5:29:0a:4b:a6:64:6f:df: 51:17:84:75:8a:fd:bd:95:81:23:cf:0b:5d:2f:2a: f8:e6:3d:15:dd:4a:e7:e0:4e:82:ed:0e:92:3d:be: 94:db:ff:08:5b:0f:b2:13:33:b2:0a:a3:7f:cd:39: 5e:55:c0:0d:1d:d7:7d:17:74:ce:00:5b:df:c7:24: 5d:0e:7f:52:56:2f:03:54:18:d8:68:5c:b3:81:c0: 88:d9:ff:88:05:f0:61:2a:3d:c4:4a:8d:16:20:72: 6c:df:9a:19:78:ee:1a:bc:c5:3a:d0:7f:40:1d:23: 2b:6a:71:df:73:49:12:aa:9d:f3:7b:05:e4:dc:f3: f3:f5:01:5a:9d:11:30:47:fa:7b:e3:21:84:80:23: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:1C:B3:AD:FA:B3:E5:5B:E7:B3:1F:FC:67:16:70:9D:91:BB:37 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cPwcs636s-Vb57Mf_GcWcJ2Ruzc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.160.0/19 Signature Algorithm: sha256WithRSAEncryption 70:61:25:a6:3c:9a:f5:90:40:c0:40:b5:59:97:58:6f:eb:85: 50:c4:92:81:4a:53:69:ee:13:24:58:6f:44:d2:70:e4:ba:47: c7:98:5e:92:2b:2a:28:c4:fe:92:59:da:e6:cb:4f:c6:0a:3e: 68:16:13:25:50:a0:56:bf:c2:e6:79:ee:ea:9f:d4:0b:70:44: 11:70:81:42:44:d2:12:df:5d:4b:ce:42:42:33:32:80:ca:00: 29:e7:8e:64:cf:55:73:2e:da:18:fd:ff:ac:c4:c1:1d:89:a1: 49:0b:83:d1:be:41:42:20:f6:a2:4b:9b:51:7a:56:af:0a:f9: 7e:36:b1:0c:6f:b7:06:b8:fc:ee:a7:ae:07:24:45:c2:ba:6d: a4:de:5f:72:f7:74:e7:1d:6b:c7:29:d1:1b:e9:d5:1d:4d:10: 91:57:c0:d5:53:90:4e:e2:dd:86:7b:26:91:fa:cd:05:74:5e: 0c:85:fe:5e:a1:88:b5:b6:1f:8b:1f:cb:91:c5:e3:fe:de:5d: 7c:be:fb:41:ba:56:10:24:b4:54:09:71:3e:3c:b4:44:5f:6c: 5d:57:eb:ae:d7:57:a5:2b:30:77:7e:31:58:62:8e:c4:53:64: 2d:df:60:27:d3:24:bf:84:a7:5a:bd:c5:3d:4d:e9:b4:49:5e: d4:62:54:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwRkMxQ0IzQURGQUIz RTU1QkU3QjMxRkZDNjcxNjcwOUQ5MUJCMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5+hYdcK6GFm06LDB6lMa/SLlrS8CX972RQaD44OQZMA8GYub+ 9yNfkl67dvc4gc6SLwIeHDj9Yl+g+7ouhWJ+oj+ud/7bXkuKu8I7A+HvpNcSq/fH fVameBU6G56sb5NXotxzy66GkmMgURMVmCu1KQpLpmRv31EXhHWK/b2VgSPPC10v KvjmPRXdSufgToLtDpI9vpTb/whbD7ITM7IKo3/NOV5VwA0d130XdM4AW9/HJF0O f1JWLwNUGNhoXLOBwIjZ/4gF8GEqPcRKjRYgcmzfmhl47hq8xTrQf0AdIytqcd9z SRKqnfN7BeTc8/P1AVqdETBH+nvjIYSAI79BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcPwcs636s+Vb57Mf/GcWcJ2RuzcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NQd2NzNjM2cy1WYjU3TWZf R2NXY0oyUnV6Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 OKAwDQYJKoZIhvcNAQELBQADggEBAHBhJaY8mvWQQMBAtVmXWG/rhVDEkoFKU2nu EyRYb0TScOS6R8eYXpIrKijE/pJZ2ubLT8YKPmgWEyVQoFa/wuZ57uqf1AtwRBFw gUJE0hLfXUvOQkIzMoDKACnnjmTPVXMu2hj9/6zEwR2JoUkLg9G+QUIg9qJLm1F6 Vq8K+X42sQxvtwa4/O6nrgckRcK6baTeX3L3dOcda8cp0Rvp1R1NEJFXwNVTkE7i 3YZ7JpH6zQV0XgyF/l6hiLW2H4sfy5HF4/7eXXy++0G6VhAktFQJcT48tERfbF1X 667XV6UrMHd+MVhijsRTZC3fYCfTJL+Ep1q9xT1N6bRJXtRiVLI= -----END CERTIFICATE-----Generated at Fri Apr 18 16:44:54 2025 by rpki-client