$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa File: jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa (raw, json) Hash identifier: y1LvF/wtAFfpXK0ul1MnGxcM7m7A39YXi8bQ8KpCXs4= Subject key identifier: 8C:13:57:0C:1B:AA:9E:84:F0:1C:14:20:FB:64:5D:14:AE:86:6C:94 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2439 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa Signing time: Mon 10 Feb 2025 14:18:24 +0000 ROA not before: Mon 10 Feb 2025 14:18:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 211.76.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9273 (0x2439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8C13570C1BAA9E84F01C1420FB645D14AE866C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:da:69:74:7a:2c:f5:41:e9:bf:12:e6:35: f9:4e:bd:b3:63:9a:f1:7e:4e:b2:3d:7f:de:0f:f8: 12:c8:f3:2d:47:ef:90:65:9d:c6:65:7e:b3:75:26: a0:af:c4:4e:f2:7f:69:20:0d:e4:86:a2:1e:89:d5: bf:78:83:5b:06:03:ac:56:db:e5:c1:4c:55:a7:c8: 2c:f4:0d:13:49:ed:ec:01:51:47:a2:cb:12:72:69: 6e:bb:0d:2f:dd:8c:f3:5a:00:5a:15:2a:d3:cf:2e: b6:06:eb:22:fe:4d:bd:07:36:07:e6:25:84:22:81: 26:54:11:07:ba:1f:87:94:df:3c:73:c1:2c:5e:ca: b7:2b:38:28:b9:d0:21:ad:31:a5:88:7e:92:95:f6: 1f:c6:07:c9:af:4f:4e:0b:27:fc:eb:a5:6a:b0:83: 15:0e:1e:fd:96:cb:fe:09:73:53:88:52:58:41:c0: 81:15:77:7b:cc:6b:d5:c8:e7:ac:07:c7:cf:f7:9c: 6d:c4:b1:e5:37:50:72:c6:ec:d6:d6:6f:ac:09:17: f8:fe:e6:eb:dc:ac:ed:16:4c:78:8b:37:42:53:64: c9:ef:8c:9a:a5:fa:31:8f:a8:99:f1:9e:3f:a5:1f: 74:be:ff:1c:d9:e7:59:58:2c:e5:b4:b4:a4:29:a8: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:13:57:0C:1B:AA:9E:84:F0:1C:14:20:FB:64:5D:14:AE:86:6C:94 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.76.0/24 Signature Algorithm: sha256WithRSAEncryption 82:86:bf:f9:01:c4:a4:0d:51:89:6e:1c:5d:29:19:c6:bd:33: 39:de:bb:d5:e0:a1:a7:a8:07:7f:d8:1b:cd:6c:9d:49:2e:0c: 41:61:f0:ed:9b:48:1f:44:0c:f5:a9:d7:e5:dd:9f:8a:52:0d: e3:98:3b:03:af:82:ff:f8:aa:0f:23:ed:5d:35:67:69:3d:ce: af:19:b4:60:b2:ba:9d:60:4e:ee:73:38:01:c6:41:cc:e3:c1: 31:6d:40:23:21:fd:c8:cf:4a:f9:74:9a:f4:c7:dc:eb:91:cc: 2e:c7:78:5e:33:e8:7f:f6:2f:08:c5:84:62:25:7a:da:3d:f9: 95:f8:25:8e:20:46:cf:04:ae:f6:62:35:e5:19:b1:af:5a:34: d1:31:b8:c1:2e:ff:4b:01:e2:fa:c2:d2:c3:66:14:77:4d:89: 44:c1:5d:db:22:5a:ab:76:b9:f9:49:27:cc:de:27:1c:b9:6b: d5:ed:a6:18:f9:be:eb:68:6c:1e:87:d6:ab:8c:48:b1:10:f4: 91:82:d2:0c:f8:13:a7:f8:ee:00:be:53:d0:2a:59:95:e5:e8: 80:a4:ce:c5:6b:3a:b7:58:da:31:f3:7a:75:b3:42:f3:40:de: 70:50:d2:e1:e7:15:03:fd:d8:b0:f5:c8:ba:ba:af:80:75:51: 32:95:a7:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJDkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDMTM1NzBDMUJBQTlF ODRGMDFDMTQyMEZCNjQ1RDE0QUU4NjZDOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwS9ppdHos9UHpvxLmNflOvbNjmvF+TrI9f94P+BLI8y1H75Bl ncZlfrN1JqCvxE7yf2kgDeSGoh6J1b94g1sGA6xW2+XBTFWnyCz0DRNJ7ewBUUei yxJyaW67DS/djPNaAFoVKtPPLrYG6yL+Tb0HNgfmJYQigSZUEQe6H4eU3zxzwSxe yrcrOCi50CGtMaWIfpKV9h/GB8mvT04LJ/zrpWqwgxUOHv2Wy/4Jc1OIUlhBwIEV d3vMa9XI56wHx8/3nG3EseU3UHLG7NbWb6wJF/j+5uvcrO0WTHiLN0JTZMnvjJql +jGPqJnxnj+lH3S+/xzZ51lYLOW0tKQpqFZZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjBNXDBuqnoTwHBQg+2RdFK6GbJQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pCTlhEQnVxbm9Ud0hCUWct MlJkRks2R2JKUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TEwwDQYJKoZIhvcNAQELBQADggEBAIKGv/kBxKQNUYluHF0pGca9Mzneu9Xgoaeo B3/YG81snUkuDEFh8O2bSB9EDPWp1+Xdn4pSDeOYOwOvgv/4qg8j7V01Z2k9zq8Z tGCyup1gTu5zOAHGQczjwTFtQCMh/cjPSvl0mvTH3OuRzC7HeF4z6H/2LwjFhGIl eto9+ZX4JY4gRs8ErvZiNeUZsa9aNNExuMEu/0sB4vrC0sNmFHdNiUTBXdsiWqt2 uflJJ8zeJxy5a9Xtphj5vutobB6H1quMSLEQ9JGC0gz4E6f47gC+U9AqWZXl6ICk zsVrOrdY2jHzenWzQvNA3nBQ0uHnFQP92LD1yLq6r4B1UTKVp/A= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:19 2025 by rpki-client