$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k5u3i-ebTKisAfp0mq9T6Tbu6Ts.roa File: k5u3i-ebTKisAfp0mq9T6Tbu6Ts.roa (raw, json) Hash identifier: zthoOu4zOq7vk4JBBp+38PeLcsuYvVzAqDod9kC/7NE= Subject key identifier: 93:9B:B7:8B:E7:9B:4C:A8:AC:01:FA:74:9A:AF:53:E9:36:EE:E9:3B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2353 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k5u3i-ebTKisAfp0mq9T6Tbu6Ts.roa Signing time: Mon 10 Feb 2025 14:17:28 +0000 ROA not before: Mon 10 Feb 2025 14:17:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 61.56.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9043 (0x2353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:17:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=939BB78BE79B4CA8AC01FA749AAF53E936EEE93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:95:12:52:dc:c0:40:45:50:a0:d4:25:5e: 43:9f:21:14:3b:af:ed:97:85:e3:77:a1:fe:d0:73: 34:8d:83:4e:77:53:dc:46:38:f7:e1:96:62:33:7e: 07:37:cb:38:4b:4b:b1:7a:49:67:05:f2:29:7d:0e: ce:a5:77:0f:01:e3:f8:04:43:9d:c4:72:a4:6d:45: bf:49:2a:6b:9a:df:a0:0e:78:ce:50:be:d3:38:76: e2:95:15:6d:a0:ce:50:93:78:5f:75:a2:d3:3b:84: b1:51:00:a7:2f:17:ef:d7:ff:b7:dd:1b:55:d6:42: dc:46:00:da:ec:6b:af:cc:0c:f2:95:a3:a1:69:75: 98:00:85:78:13:e4:34:07:81:f8:5a:df:e2:c6:88: 22:a4:1f:75:ef:d0:1a:72:14:f2:1e:ac:ab:ab:75: 5c:e2:e1:ee:a9:45:95:28:95:a8:ab:19:88:bd:85: 2e:0a:fc:b5:c4:d8:f3:b7:b6:dd:67:6b:5b:81:63: 88:68:d6:8f:d4:06:90:ea:cf:89:d1:9e:70:6e:19: a1:a7:29:3a:f4:83:3f:a3:58:0a:e7:42:bf:7c:ba: 5d:9f:67:fb:6a:b6:8c:c1:0f:3f:7b:90:75:fa:4f: 1f:1c:ad:bd:6b:2d:2b:45:87:7b:d3:83:56:51:ff: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9B:B7:8B:E7:9B:4C:A8:AC:01:FA:74:9A:AF:53:E9:36:EE:E9:3B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k5u3i-ebTKisAfp0mq9T6Tbu6Ts.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.176.0/20 Signature Algorithm: sha256WithRSAEncryption 32:41:bc:2b:8f:69:db:8e:8d:f3:12:a0:8e:76:06:3f:95:bf: 11:c6:b2:aa:d6:96:63:aa:6e:7a:5f:c2:87:94:49:7b:b0:c8: 5b:9a:79:aa:f4:53:ea:0a:24:aa:6c:a6:51:a6:77:68:d2:c7: 9c:69:94:d0:ec:12:55:11:8a:fa:3a:98:74:42:dd:59:4d:d5: b7:0e:50:a3:02:0c:90:a8:3a:4b:36:46:07:c6:52:3b:9e:a0: 00:0a:c5:05:ea:fc:b3:35:b7:19:8d:d7:ea:fe:5b:49:60:72: 3b:11:a4:32:6b:cb:b5:88:72:ae:f9:07:fb:fd:4b:b8:de:9d: f3:93:c1:46:c3:a6:87:1f:a7:5c:8e:d0:d0:ab:44:aa:83:c1: cb:9f:21:6f:74:85:eb:07:0a:ed:db:fe:9e:f3:e6:74:c1:a6: b6:40:18:f5:5b:9f:f4:92:6e:dd:4c:5a:f7:ad:01:79:64:17: f8:27:8c:b7:1a:bd:a8:71:7a:b0:a2:df:44:92:0d:97:57:7b: 9d:96:3d:ae:bc:f9:25:98:85:5d:74:b5:7e:d4:7d:81:ed:6b: 89:63:87:cc:af:db:42:b1:3a:21:b3:cf:ce:e6:02:36:f4:28: b0:2f:53:5f:1c:aa:24:c7:47:5d:3a:49:62:a9:1f:42:9b:d3: 6d:0e:e6:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICI1MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE3MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkzOUJCNzhCRTc5QjRD QThBQzAxRkE3NDlBQUY1M0U5MzZFRUU5M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCDpUSUtzAQEVQoNQlXkOfIRQ7r+2XheN3of7QczSNg053U9xG OPfhlmIzfgc3yzhLS7F6SWcF8il9Ds6ldw8B4/gEQ53EcqRtRb9JKmua36AOeM5Q vtM4duKVFW2gzlCTeF91otM7hLFRAKcvF+/X/7fdG1XWQtxGANrsa6/MDPKVo6Fp dZgAhXgT5DQHgfha3+LGiCKkH3Xv0BpyFPIerKurdVzi4e6pRZUolairGYi9hS4K /LXE2PO3tt1na1uBY4ho1o/UBpDqz4nRnnBuGaGnKTr0gz+jWArnQr98ul2fZ/tq tozBDz97kHX6Tx8crb1rLStFh3vTg1ZR/yUTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUk5u3i+ebTKisAfp0mq9T6Tbu6TswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2s1dTNpLWViVEtpc0FmcDBt cTlUNlRidTZUcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OLAwDQYJKoZIhvcNAQELBQADggEBADJBvCuPaduOjfMSoI52Bj+VvxHGsqrWlmOq bnpfwoeUSXuwyFuaear0U+oKJKpsplGmd2jSx5xplNDsElURivo6mHRC3VlN1bcO UKMCDJCoOks2RgfGUjueoAAKxQXq/LM1txmN1+r+W0lgcjsRpDJry7WIcq75B/v9 S7jenfOTwUbDpocfp1yO0NCrRKqDwcufIW90hesHCu3b/p7z5nTBprZAGPVbn/SS bt1MWvetAXlkF/gnjLcavahxerCi30SSDZdXe52WPa68+SWYhV10tX7UfYHta4lj h8yv20KxOiGzz87mAjb0KLAvU18cqiTHR106SWKpH0Kb020O5s0= -----END CERTIFICATE-----Generated at Thu Apr 17 21:01:49 2025 by rpki-client