$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O_MmK4UEFWLRphk5o42AsOAQJm0.roa File: O_MmK4UEFWLRphk5o42AsOAQJm0.roa (raw, json) Hash identifier: HIHpvQ34K7ALxGNoPpRWllUvtVKDBwd2Zgj2dGlIf2s= Subject key identifier: 3B:F3:26:2B:85:04:15:62:D1:A6:19:39:A3:8D:80:B0:E0:10:26:6D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22C5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O_MmK4UEFWLRphk5o42AsOAQJm0.roa Signing time: Mon 26 Aug 2024 05:34:21 +0000 ROA not before: Mon 26 Aug 2024 05:34:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 122.100.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8901 (0x22c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3BF3262B85041562D1A61939A38D80B0E010266D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:82:f0:0c:12:f6:21:b5:90:0c:3a:6f:85: 61:2f:45:c9:8b:f6:f2:58:4d:f5:0e:93:a0:6b:ce: 13:6f:58:3f:33:ee:d6:75:35:2a:fe:7d:4d:df:ed: 12:a7:2d:91:0b:73:c8:79:83:02:05:a2:92:92:6b: 89:31:fa:d0:a1:39:8a:bc:17:3f:25:dd:07:1e:24: 2c:c2:92:ad:f4:ee:31:5a:90:28:a4:6b:2f:7e:94: c9:86:ad:0d:e8:6e:70:65:b0:e6:9e:8a:fb:41:ed: 4a:50:bb:bd:ad:49:6e:6b:c5:20:7f:f6:6a:84:3a: f3:b1:53:1c:50:f8:a6:aa:5e:58:e9:a2:eb:42:ec: 12:83:99:c4:af:69:47:bb:84:7c:23:74:fc:fc:32: d6:d3:b9:15:02:d9:22:63:47:07:d1:3c:02:42:d0: d0:09:1b:5c:f0:bd:a4:c1:57:6a:23:88:d2:4f:33: fb:06:4f:67:d2:2a:64:5c:cb:bf:5b:51:f2:1e:1e: 93:66:cc:4c:ec:bb:55:9b:b9:64:d4:02:59:2c:f3: 86:c5:b8:0c:76:4f:a8:e5:e8:8d:3b:1b:f2:e1:0d: 57:34:d2:7a:d7:4a:1a:82:89:2a:06:59:81:91:75: 94:4b:93:42:a9:3b:ad:70:10:a2:ac:b1:71:9b:ea: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F3:26:2B:85:04:15:62:D1:A6:19:39:A3:8D:80:B0:E0:10:26:6D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O_MmK4UEFWLRphk5o42AsOAQJm0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.112.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:14:4e:b8:d6:7b:29:77:40:e7:7c:f4:14:19:b7:95:3a:6d: 78:c0:b0:be:1b:dc:c4:fe:0c:e1:5f:7c:48:60:d7:61:20:63: 51:29:5e:a3:4f:7b:f0:16:7c:8a:f7:1f:ee:d3:96:4b:2c:6b: 97:46:cf:62:c5:b5:79:a7:0d:9c:b6:2b:1f:55:95:11:69:bd: 69:a8:00:6f:1d:fa:c1:cc:a0:dd:82:b3:5f:78:13:88:1e:46: 1d:34:1f:e4:f4:91:46:9f:8c:d9:75:02:52:c0:5b:d8:5f:00: 6d:20:2a:de:2e:25:5c:75:9a:00:3c:09:78:98:df:ba:f0:c7: 49:5a:72:e6:4a:d1:3e:b5:9c:bf:e8:b5:2f:17:fe:7f:24:1c: 8d:8c:d1:d2:42:09:64:a8:df:9a:a0:c0:62:f0:34:e8:6e:b1: ed:5e:2e:25:12:51:bd:01:a0:58:85:22:e0:b9:c6:45:8e:2d: e2:a7:1a:61:ff:84:8a:d9:e8:36:5e:7f:24:6a:55:e1:36:c4: 48:8a:97:de:f1:68:44:d9:00:64:45:57:6d:c2:e0:ac:29:3d: bf:a2:3c:36:46:5f:a6:e8:be:3a:b4:28:b8:1c:59:d8:68:95: 2a:62:4a:98:8d:60:9c:87:7e:7c:00:b6:50:9a:73:68:e6:9e: d3:a8:4f:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCRjMyNjJCODUwNDE1 NjJEMUE2MTkzOUEzOEQ4MEIwRTAxMDI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZjILwDBL2IbWQDDpvhWEvRcmL9vJYTfUOk6BrzhNvWD8z7tZ1 NSr+fU3f7RKnLZELc8h5gwIFopKSa4kx+tChOYq8Fz8l3QceJCzCkq307jFakCik ay9+lMmGrQ3obnBlsOaeivtB7UpQu72tSW5rxSB/9mqEOvOxUxxQ+KaqXljpoutC 7BKDmcSvaUe7hHwjdPz8MtbTuRUC2SJjRwfRPAJC0NAJG1zwvaTBV2ojiNJPM/sG T2fSKmRcy79bUfIeHpNmzEzsu1WbuWTUAlks84bFuAx2T6jl6I07G/LhDVc00nrX ShqCiSoGWYGRdZRLk0KpO61wEKKssXGb6mH7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUO/MmK4UEFWLRphk5o42AsOAQJm0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09fTW1LNFVFRldMUnBoazVv NDJBc09BUUptMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 ZHAwDQYJKoZIhvcNAQELBQADggEBADoUTrjWeyl3QOd89BQZt5U6bXjAsL4b3MT+ DOFffEhg12EgY1EpXqNPe/AWfIr3H+7Tlkssa5dGz2LFtXmnDZy2Kx9VlRFpvWmo AG8d+sHMoN2Cs194E4geRh00H+T0kUafjNl1AlLAW9hfAG0gKt4uJVx1mgA8CXiY 37rwx0lacuZK0T61nL/otS8X/n8kHI2M0dJCCWSo35qgwGLwNOhuse1eLiUSUb0B oFiFIuC5xkWOLeKnGmH/hIrZ6DZefyRqVeE2xEiKl97xaETZAGRFV23C4KwpPb+i PDZGX6bovjq0KLgcWdholSpiSpiNYJyHfnwAtlCac2jmntOoT58= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:58 2024 by rpki-client on console-ams.rpki-client.org