$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa File: Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa (raw, json) Hash identifier: PdiNHq9BaF3fe0OCqDwR/WFpZeCaOMdb4NNQfwVC66s= Subject key identifier: 05:AF:CF:90:19:8F:50:B4:75:3D:D3:F9:B9:91:2A:8E:08:D3:DE:73 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21B9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa Signing time: Mon 26 Aug 2024 05:33:17 +0000 ROA not before: Mon 26 Aug 2024 05:33:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 122.100.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8633 (0x21b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=05AFCF90198F50B4753DD3F9B9912A8E08D3DE73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:e6:3a:68:35:da:64:96:73:37:e4:34:df: e2:49:cc:bb:fe:4c:ec:30:bf:34:c2:32:c1:ff:d9: ce:f9:5c:3b:87:8b:71:a0:1a:36:d5:a9:31:b3:f8: da:51:df:c4:0e:94:70:5d:9d:55:bb:eb:07:42:f3: 9c:c9:8a:cd:b6:6a:00:7b:90:14:e2:57:ba:33:f5: da:9e:ff:3c:3e:af:4e:1a:0e:f0:8c:82:87:1a:21: c1:eb:c5:ad:08:e0:68:af:27:72:11:cb:74:39:38: 48:9a:d5:18:1d:02:67:a7:05:29:25:57:5c:71:fe: 08:99:ce:ef:49:83:c8:9f:05:c3:3b:c1:2f:5e:f2: a3:c5:22:e0:06:f2:4f:b6:86:26:f8:8e:21:38:30: 6a:9c:94:03:47:ba:47:34:34:96:fc:bc:ec:02:da: 51:45:3f:1d:ea:3f:d2:75:f8:e4:86:bc:1c:28:5e: 43:de:f6:e8:d2:a9:3d:cf:9a:56:9c:d0:f9:ca:ab: c5:4f:91:72:3d:aa:34:a4:bc:ed:38:aa:20:bf:72: ba:5f:96:c7:6e:4b:f4:28:04:4a:43:19:e0:30:be: f2:c8:91:c4:c0:d8:53:40:d7:0b:75:d8:0d:61:b8: b9:56:c2:f4:ac:3b:b0:fc:24:9f:8d:6c:a8:9f:8d: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AF:CF:90:19:8F:50:B4:75:3D:D3:F9:B9:91:2A:8E:08:D3:DE:73 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.96.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:82:ff:3b:df:4a:8d:0c:6f:81:d1:4d:f8:c0:3c:6d:38:8b: b5:04:4c:83:03:ec:b2:97:d8:33:f9:d8:e8:44:45:05:ec:31: 97:43:d5:35:31:ae:00:99:1f:75:3d:c6:bd:66:28:16:3a:55: 27:3f:ac:91:61:db:38:41:97:b5:2a:22:fd:63:0a:67:28:70: 4d:5c:d5:36:98:f8:70:2c:b6:ef:e4:a5:81:4a:2d:56:d8:67: 83:ec:8b:c6:f8:de:a8:89:d4:cf:e1:6a:8c:8c:37:22:1c:60: 3d:b4:4f:11:4f:84:33:bb:e0:60:39:8c:08:cf:ab:85:1f:ed: 02:fd:16:dd:cf:8a:3a:61:1d:f9:3f:6e:ff:fa:85:4c:17:69: c5:4a:86:cd:4b:c2:e3:b6:e7:61:90:25:ce:65:bc:6b:e6:e2: 73:bd:4e:f9:76:d6:8b:22:23:7c:0a:79:30:3c:f0:5e:6b:81: f4:17:eb:fd:37:6b:06:c4:16:f3:71:1a:d8:c1:f4:19:ff:13: 27:fd:fe:56:4c:e0:e6:ae:6b:4f:a7:4e:09:8d:9a:b6:67:fc: 25:02:6c:6d:d7:ff:25:85:6a:a2:da:fa:9a:3f:91:29:d5:c6: 72:3f:64:a4:9d:be:10:d3:b2:07:c8:e3:ab:20:df:df:ef:73: 81:78:7d:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1QUZDRjkwMTk4RjUw QjQ3NTNERDNGOUI5OTEyQThFMDhEM0RFNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2wuY6aDXaZJZzN+Q03+JJzLv+TOwwvzTCMsH/2c75XDuHi3Gg GjbVqTGz+NpR38QOlHBdnVW76wdC85zJis22agB7kBTiV7oz9dqe/zw+r04aDvCM gocaIcHrxa0I4GivJ3IRy3Q5OEia1RgdAmenBSklV1xx/giZzu9Jg8ifBcM7wS9e 8qPFIuAG8k+2hib4jiE4MGqclANHukc0NJb8vOwC2lFFPx3qP9J1+OSGvBwoXkPe 9ujSqT3Pmlac0PnKq8VPkXI9qjSkvO04qiC/crpflsduS/QoBEpDGeAwvvLIkcTA 2FNA1wt12A1huLlWwvSsO7D8JJ+NbKifjRlZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBa/PkBmPULR1PdP5uZEqjgjT3nMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JhX1BrQm1QVUxSMVBkUDV1 WkVxamdqVDNuTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV6 ZGAwDQYJKoZIhvcNAQELBQADggEBAA6C/zvfSo0Mb4HRTfjAPG04i7UETIMD7LKX 2DP52OhERQXsMZdD1TUxrgCZH3U9xr1mKBY6VSc/rJFh2zhBl7UqIv1jCmcocE1c 1TaY+HAstu/kpYFKLVbYZ4Psi8b43qiJ1M/haoyMNyIcYD20TxFPhDO74GA5jAjP q4Uf7QL9Ft3PijphHfk/bv/6hUwXacVKhs1LwuO252GQJc5lvGvm4nO9Tvl21osi I3wKeTA88F5rgfQX6/03awbEFvNxGtjB9Bn/Eyf9/lZM4Oaua0+nTgmNmrZn/CUC bG3X/yWFaqLa+po/kSnVxnI/ZKSdvhDTsgfI46sg39/vc4F4fRg= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:58 2024 by rpki-client on console-ams.rpki-client.org