$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gX-amWmL2UXmxnFB3BlneC0Oe1g.roa File: gX-amWmL2UXmxnFB3BlneC0Oe1g.roa (raw, json) Hash identifier: AXZWwjrbWW4gtuW94OTX0PfDujU8HaerqNJxyH26Pvg= Subject key identifier: 81:7F:9A:99:69:8B:D9:45:E6:C6:71:41:DC:19:67:78:2D:0E:7B:58 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 235A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gX-amWmL2UXmxnFB3BlneC0Oe1g.roa Signing time: Mon 10 Feb 2025 14:17:30 +0000 ROA not before: Mon 10 Feb 2025 14:17:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9050 (0x235a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=817F9A99698BD945E6C67141DC1967782D0E7B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:d5:22:fe:9e:98:12:97:15:75:13:8b:51: 42:5d:1d:c9:8c:c6:c0:74:76:7e:53:29:c4:31:e5: 00:6a:65:d5:68:e2:9f:bb:e0:b5:14:ab:ea:8d:3e: 16:4f:4c:64:61:6d:f4:8d:57:6d:dd:fe:e2:f2:fb: b8:f9:43:57:b7:08:a2:bd:9d:08:2c:86:98:ec:66: da:53:90:24:fb:ba:5b:6d:0e:4f:78:94:5c:76:d9: e8:c7:de:98:d3:3f:ea:85:98:b6:b2:fb:c8:32:84: 06:3e:56:68:41:61:30:6b:d7:06:fd:06:66:68:e9: 18:b9:d7:58:14:8f:e9:35:48:c5:2e:cf:0e:1a:f9: 93:80:7c:33:57:84:a7:6d:57:f1:94:6e:cf:ff:c4: 1c:c6:29:21:f4:4c:d2:c6:91:09:08:ff:c6:2e:be: 32:b7:00:b6:92:90:a6:d6:32:f8:f7:4b:5f:ec:df: da:37:97:d6:18:16:99:bc:95:66:bb:fe:7b:b4:61: b6:d2:c2:7a:79:c6:81:64:3e:96:37:17:f4:6c:88: 61:f6:ce:99:1b:85:cf:89:00:7e:17:23:24:9c:1e: 23:ef:a9:02:9b:fd:17:be:d3:da:35:b1:18:20:25: 02:8a:b8:3a:5d:ea:f6:de:45:b6:32:0a:fc:c7:97: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7F:9A:99:69:8B:D9:45:E6:C6:71:41:DC:19:67:78:2D:0E:7B:58 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gX-amWmL2UXmxnFB3BlneC0Oe1g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.79.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:53:f8:07:ab:52:57:b6:4f:f9:d8:b5:89:4c:72:01:e1:ce: 0d:0a:5e:34:a8:27:bd:84:77:37:eb:1f:0b:a6:0f:8d:72:23: f6:c0:36:22:a4:af:e3:51:a1:31:f1:9a:ca:e5:5a:d0:df:92: 2a:9c:02:5b:2e:80:7c:ed:53:d6:b0:a7:a1:f2:b6:7b:5f:16: 4b:6b:5c:35:32:ba:b2:b6:71:32:05:cc:28:7b:be:ac:a4:7d: 62:8b:cc:cf:79:e2:af:41:b5:f2:35:97:17:90:c9:e5:17:97: 6e:4a:c3:98:21:1f:b0:2a:4d:5e:ad:ff:e0:de:13:9b:1e:79: d4:d5:8c:a4:09:4f:5a:6b:1d:be:a4:ac:f3:72:34:6f:da:fd: 13:8e:cf:9c:71:e4:b4:8f:74:64:b9:79:b5:e8:25:c8:e4:b2: 9b:8b:39:26:27:c7:24:a9:8c:a9:bc:af:02:dd:56:b6:80:8b: 67:86:c1:4a:7d:07:87:26:72:21:1d:df:3a:93:11:c4:f9:0b: f4:01:7e:e6:65:17:be:32:a5:44:65:d1:f7:46:d7:5d:f3:cc: 7a:67:9d:71:66:15:0f:a1:e9:8f:7b:b5:55:d4:5e:6c:ea:62: 40:a1:29:07:72:47:45:f4:a4:6f:24:3c:9b:f3:75:d4:71:5d: 55:d2:9c:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxN0Y5QTk5Njk4QkQ5 NDVFNkM2NzE0MURDMTk2Nzc4MkQwRTdCNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPENUi/p6YEpcVdROLUUJdHcmMxsB0dn5TKcQx5QBqZdVo4p+7 4LUUq+qNPhZPTGRhbfSNV23d/uLy+7j5Q1e3CKK9nQgshpjsZtpTkCT7ulttDk94 lFx22ejH3pjTP+qFmLay+8gyhAY+VmhBYTBr1wb9BmZo6Ri511gUj+k1SMUuzw4a +ZOAfDNXhKdtV/GUbs//xBzGKSH0TNLGkQkI/8YuvjK3ALaSkKbWMvj3S1/s39o3 l9YYFpm8lWa7/nu0YbbSwnp5xoFkPpY3F/RsiGH2zpkbhc+JAH4XIyScHiPvqQKb /Re+09o1sRggJQKKuDpd6vbeRbYyCvzHl+1nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgX+amWmL2UXmxnFB3BlneC0Oe1gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2dYLWFtV21MMlVYbXhuRkIz QmxuZUMwT2UxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TE8wDQYJKoZIhvcNAQELBQADggEBAJ1T+AerUle2T/nYtYlMcgHhzg0KXjSoJ72E dzfrHwumD41yI/bANiKkr+NRoTHxmsrlWtDfkiqcAlsugHztU9awp6HytntfFktr XDUyurK2cTIFzCh7vqykfWKLzM954q9BtfI1lxeQyeUXl25Kw5ghH7AqTV6t/+De E5seedTVjKQJT1prHb6krPNyNG/a/ROOz5xx5LSPdGS5ebXoJcjkspuLOSYnxySp jKm8rwLdVraAi2eGwUp9B4cmciEd3zqTEcT5C/QBfuZlF74ypURl0fdG113zzHpn nXFmFQ+h6Y97tVXUXmzqYkChKQdyR0X0pG8kPJvzddRxXVXSnMw= -----END CERTIFICATE-----Generated at Fri Apr 18 16:31:15 2025 by rpki-client