$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J3CVmPR1H9jr6cItaru6C5UUQ9w.roa File: J3CVmPR1H9jr6cItaru6C5UUQ9w.roa (raw, json) Hash identifier: sgBBfqOquKBsPgpqzDu8SSLwpp3YYd5BQC3kl73251k= Subject key identifier: 27:70:95:98:F4:75:1F:D8:EB:E9:C2:2D:6A:BB:BA:0B:95:14:43:DC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2749 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J3CVmPR1H9jr6cItaru6C5UUQ9w.roa Signing time: Fri 22 Aug 2025 08:43:44 +0000 ROA not before: Fri 22 Aug 2025 08:43:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 124.6.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10057 (0x2749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:43:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=27709598F4751FD8EBE9C22D6ABBBA0B951443DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:56:fc:5f:60:e4:8e:1d:7b:1a:24:a7:06: 2b:46:e7:11:9f:62:a3:84:4f:39:04:59:10:8c:e5: f2:7c:1f:4b:5e:34:be:9d:e9:d6:6a:b2:fd:c0:74: 83:2b:9f:d0:71:64:fe:7d:16:c6:6b:6e:cd:d4:30: 30:e8:48:30:0b:56:b2:ca:1f:46:3c:90:fc:31:13: 60:4d:d1:50:25:cc:95:1a:50:72:95:af:e1:a6:f2: c0:71:b0:01:4d:e7:b0:7e:bc:9a:f5:a5:3d:4f:4a: fd:82:a9:bf:98:41:3c:db:8b:74:71:5a:6a:aa:c7: 49:32:b9:bc:db:48:d5:e8:bf:54:22:a7:55:06:e1: 7d:0c:58:76:a2:64:32:86:d5:9e:a5:de:a6:d3:2c: 73:92:ae:c0:52:3f:21:ca:70:89:32:39:28:6d:51: 5f:91:61:ca:03:7d:58:63:34:5d:2d:29:da:36:48: ee:31:4c:1e:56:92:3e:02:96:4f:8b:33:12:a9:5e: 9d:d1:a2:54:43:fc:6f:6f:63:98:a3:51:4a:26:56: 72:58:b0:8f:dd:d5:2c:d9:b8:d7:b2:9d:4a:10:ee: 07:30:10:d8:d8:1d:f3:f4:c3:32:88:23:15:46:84: 43:de:1b:cc:22:1e:04:6d:dc:02:a0:c4:bb:41:21: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:95:98:F4:75:1F:D8:EB:E9:C2:2D:6A:BB:BA:0B:95:14:43:DC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J3CVmPR1H9jr6cItaru6C5UUQ9w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.12.0/22 Signature Algorithm: sha256WithRSAEncryption 67:e7:7b:9a:13:1d:35:39:5c:f2:09:a5:41:41:26:f0:1b:6b: e0:05:20:a9:33:df:18:10:0e:4a:de:f0:07:29:e9:16:65:53: 27:86:8e:ff:5a:2f:75:8c:80:51:b0:c5:31:30:5f:aa:aa:ae: b8:7d:15:23:b9:b0:d1:a6:e5:2b:4d:17:a9:f5:b8:b8:08:c5: b1:7e:7f:fb:49:a2:b6:a4:93:0d:0d:a1:d0:82:1c:7f:2e:49: 80:c3:e7:cd:da:47:db:51:e0:c4:e0:05:80:3d:a4:15:13:67: da:8f:b7:6c:57:ab:eb:c9:e7:a4:47:71:a6:34:ff:b0:f9:6f: 02:0b:2e:2f:17:6c:42:d1:48:83:db:46:51:70:0d:7e:a4:6f: 65:4c:ae:65:d8:9b:1f:25:3b:6d:b6:bf:48:86:6b:23:67:c6: e2:9b:24:60:8c:3c:23:9e:1d:8f:08:85:49:21:ba:f3:56:8a: 7e:89:39:41:ed:f5:cb:ec:9d:14:c9:2c:53:b2:d8:4d:85:12: 64:1d:67:7d:0c:45:84:78:97:2e:4f:d4:57:92:0a:2c:80:f1: dc:25:6f:3e:ea:b3:9e:bd:ef:34:6a:ab:2a:09:ac:a3:44:f0: 9e:98:79:34:1d:1a:ce:63:68:77:71:a0:73:6c:3a:db:6e:cb: f3:2b:51:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQzNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3NzA5NTk4RjQ3NTFG RDhFQkU5QzIyRDZBQkJCQTBCOTUxNDQzREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHy1b8X2Dkjh17GiSnBitG5xGfYqOETzkEWRCM5fJ8H0teNL6d 6dZqsv3AdIMrn9BxZP59FsZrbs3UMDDoSDALVrLKH0Y8kPwxE2BN0VAlzJUaUHKV r+Gm8sBxsAFN57B+vJr1pT1PSv2Cqb+YQTzbi3RxWmqqx0kyubzbSNXov1Qip1UG 4X0MWHaiZDKG1Z6l3qbTLHOSrsBSPyHKcIkyOShtUV+RYcoDfVhjNF0tKdo2SO4x TB5Wkj4Clk+LMxKpXp3RolRD/G9vY5ijUUomVnJYsI/d1SzZuNeynUoQ7gcwENjY HfP0wzKIIxVGhEPeG8wiHgRt3AKgxLtBIf+VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJ3CVmPR1H9jr6cItaru6C5UUQ9wwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ozQ1ZtUFIxSDlqcjZjSXRh cnU2QzVVVVE5dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BgwwDQYJKoZIhvcNAQELBQADggEBAGfne5oTHTU5XPIJpUFBJvAba+AFIKkz3xgQ Dkre8Acp6RZlUyeGjv9aL3WMgFGwxTEwX6qqrrh9FSO5sNGm5StNF6n1uLgIxbF+ f/tJorakkw0NodCCHH8uSYDD583aR9tR4MTgBYA9pBUTZ9qPt2xXq+vJ56RHcaY0 /7D5bwILLi8XbELRSIPbRlFwDX6kb2VMrmXYmx8lO222v0iGayNnxuKbJGCMPCOe HY8IhUkhuvNWin6JOUHt9cvsnRTJLFOy2E2FEmQdZ30MRYR4ly5P1FeSCiyA8dwl bz7qs5697zRqqyoJrKNE8J6YeTQdGs5jaHdxoHNsOttuy/MrUdg= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:43 2025 by rpki-client