$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l3LuLNqF__zUgG5EmZ7rXFP5G04.roa File: l3LuLNqF__zUgG5EmZ7rXFP5G04.roa (raw, json) Hash identifier: CjIRDBKwb3fhRaVLDe6P4aCB1r5Ryk7K6B0aNY6R0dA= Subject key identifier: 97:72:EE:2C:DA:85:FF:FC:D4:80:6E:44:99:9E:EB:5C:53:F9:1B:4E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24AC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l3LuLNqF__zUgG5EmZ7rXFP5G04.roa Signing time: Mon 10 Feb 2025 14:18:52 +0000 ROA not before: Mon 10 Feb 2025 14:18:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.64.0.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9388 (0x24ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9772EE2CDA85FFFCD4806E44999EEB5C53F91B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1d:81:7d:b9:e9:67:7d:e1:3e:67:23:3c:f6: 04:c0:ef:35:6a:7b:95:55:72:c2:57:d9:dd:5d:94: d8:a0:f3:45:17:85:b2:8c:1a:ca:f0:21:35:65:64: 5a:e5:bb:8d:d4:2d:11:d7:8f:bd:86:00:10:e6:31: ad:27:9e:ce:16:f1:1f:95:9d:fe:3e:01:d1:5b:a7: 76:c6:ac:c8:a8:ca:a4:86:82:1e:5d:7c:fa:86:72: 20:c0:6b:9f:03:bd:ef:58:1d:60:d1:7f:d5:3f:91: 78:3f:36:27:51:da:06:75:b7:65:b1:cb:a2:66:74: c1:1c:3d:7e:ba:00:2d:c5:45:b8:26:28:70:1a:16: 2a:33:c6:ed:42:7a:2a:0c:cd:6d:83:ce:0c:87:bf: ac:f6:8b:ee:54:e6:6e:17:c0:e6:ac:67:41:43:e0: 67:39:9c:af:5e:ae:6d:fb:20:cb:ca:c9:56:84:a1: ea:52:9c:5f:0a:c6:22:90:92:b0:e1:c9:3f:f3:1b: f6:08:e2:23:12:1b:aa:35:da:b7:b6:48:0f:3a:54: 83:b8:f3:3a:93:fd:cc:9a:0b:ec:a7:0c:a1:e4:0c: 7d:6e:6f:5b:ce:36:f4:d3:6e:8a:f7:37:59:94:63: 3b:ff:67:a9:94:1c:5f:e1:1a:65:52:67:b9:c1:af: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:72:EE:2C:DA:85:FF:FC:D4:80:6E:44:99:9E:EB:5C:53:F9:1B:4E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l3LuLNqF__zUgG5EmZ7rXFP5G04.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.0.0/19 Signature Algorithm: sha256WithRSAEncryption 69:20:7e:9d:f3:2c:e1:fe:73:7c:ca:b7:37:f6:26:73:9a:30: 65:4f:52:da:ec:a3:7f:2c:ec:16:47:e1:ad:c8:13:bc:98:50: 70:df:f1:a7:82:3a:d7:a8:bc:c1:0e:7f:75:d2:fb:9e:c8:97: ec:58:90:29:8d:b1:da:92:23:07:97:3b:71:16:c1:66:d1:19: 36:74:37:52:f9:c5:c1:1c:66:8c:9d:1b:47:6e:1d:22:20:fc: de:56:ab:e1:b2:13:1a:81:1b:6e:ea:b4:bf:5b:67:de:ec:b3: 3c:49:03:91:ff:af:fa:8c:de:4b:43:ee:24:7b:02:2e:84:59: 39:1f:5e:f3:97:23:21:60:5c:c4:39:15:79:d5:b7:ad:8d:da: a3:29:11:c2:84:f7:02:01:fd:cf:13:38:8a:03:68:ac:76:e3: d0:2e:55:3c:29:70:76:ef:d9:5e:63:f5:e5:52:ca:c4:b6:04: f6:91:a9:74:30:7a:16:00:f4:fd:30:ed:5d:93:fb:fe:43:2c: 00:3b:90:2f:a1:e5:06:64:e0:05:a7:20:ea:29:3c:4b:2f:41: 86:f6:4d:db:0f:a7:a3:4b:2b:bd:16:f9:9c:f0:de:e7:f3:05: f9:fb:97:aa:45:5b:6a:b2:01:00:91:70:99:74:2d:2e:0b:ea: ec:c8:1e:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3NzJFRTJDREE4NUZG RkNENDgwNkU0NDk5OUVFQjVDNTNGOTFCNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpHYF9uelnfeE+ZyM89gTA7zVqe5VVcsJX2d1dlNig80UXhbKM GsrwITVlZFrlu43ULRHXj72GABDmMa0nns4W8R+Vnf4+AdFbp3bGrMioyqSGgh5d fPqGciDAa58Dve9YHWDRf9U/kXg/NidR2gZ1t2Wxy6JmdMEcPX66AC3FRbgmKHAa Fiozxu1CeioMzW2DzgyHv6z2i+5U5m4XwOasZ0FD4Gc5nK9erm37IMvKyVaEoepS nF8KxiKQkrDhyT/zG/YI4iMSG6o12re2SA86VIO48zqT/cyaC+ynDKHkDH1ub1vO NvTTbor3N1mUYzv/Z6mUHF/hGmVSZ7nBry/JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUl3LuLNqF//zUgG5EmZ7rXFP5G04wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2wzTHVMTnFGX196VWdHNUVt WjdyWEZQNUcwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 QAAwDQYJKoZIhvcNAQELBQADggEBAGkgfp3zLOH+c3zKtzf2JnOaMGVPUtrso38s 7BZH4a3IE7yYUHDf8aeCOteovMEOf3XS+57Il+xYkCmNsdqSIweXO3EWwWbRGTZ0 N1L5xcEcZoydG0duHSIg/N5Wq+GyExqBG27qtL9bZ97sszxJA5H/r/qM3ktD7iR7 Ai6EWTkfXvOXIyFgXMQ5FXnVt62N2qMpEcKE9wIB/c8TOIoDaKx249AuVTwpcHbv 2V5j9eVSysS2BPaRqXQwehYA9P0w7V2T+/5DLAA7kC+h5QZk4AWnIOopPEsvQYb2 TdsPp6NLK70W+Zzw3ufzBfn7l6pFW2qyAQCRcJl0LS4L6uzIHmU= -----END CERTIFICATE-----Generated at Thu Apr 17 21:00:53 2025 by rpki-client