$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZhblDGJSVZbmVItAXCpfwZx9q88.roa File: ZhblDGJSVZbmVItAXCpfwZx9q88.roa (raw, json) Hash identifier: B2hBcljVR3PUydxrdABT2TgxjgPE+rIpaS/J9SoJg74= Subject key identifier: 66:16:E5:0C:62:52:55:96:E6:54:8B:40:5C:2A:5F:C1:9C:7D:AB:CF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2189 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZhblDGJSVZbmVItAXCpfwZx9q88.roa Signing time: Mon 26 Aug 2024 05:33:05 +0000 ROA not before: Mon 26 Aug 2024 05:33:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 103.225.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8585 (0x2189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6616E50C62525596E6548B405C2A5FC19C7DABCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:0b:6c:50:03:52:18:27:d8:e3:ee:39:c4: e9:b4:af:76:c3:4a:7d:05:50:65:0a:fd:42:66:39: 3d:78:ad:30:cf:3c:e7:1d:bc:d1:bb:97:a9:80:48: 29:2a:3f:0d:0a:fd:95:ab:8b:3a:aa:87:0f:9a:e1: 32:0a:c4:e6:9b:73:34:2c:df:79:b6:59:45:93:6f: 6c:b7:cb:eb:06:a9:2e:f2:b3:fa:92:e9:d7:f6:f6: bb:3d:51:5c:4c:01:84:a9:99:c0:4e:af:ef:11:17: a6:4b:e5:ef:ca:8d:d7:fc:3e:d5:75:1c:34:7b:c9: da:5b:25:29:d5:9e:a1:e1:a7:0e:e4:b2:f5:d8:74: 5b:9c:07:22:41:10:9f:e9:9a:ac:07:75:b9:3f:2d: 6d:e6:67:70:a4:19:2b:74:75:3c:c1:ca:bb:5e:1f: ba:e7:94:3a:38:90:7d:4c:87:58:45:b2:5e:3f:e6: fb:42:5a:54:87:19:d5:0c:95:b2:e0:25:b0:22:fb: 97:53:62:31:a1:7a:3c:a3:a9:9c:4b:d6:a0:3d:46: 69:89:e2:24:09:6e:75:d1:00:51:99:3d:47:55:d7: f8:c8:63:4a:2e:e7:01:93:28:be:76:4a:0c:32:39: a6:4c:d3:c2:01:1a:67:f6:e6:a0:12:71:c4:24:0f: 95:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:16:E5:0C:62:52:55:96:E6:54:8B:40:5C:2A:5F:C1:9C:7D:AB:CF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZhblDGJSVZbmVItAXCpfwZx9q88.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.225.0.0/22 Signature Algorithm: sha256WithRSAEncryption 22:56:5c:dd:b0:73:49:1c:83:b1:af:96:77:1e:26:21:0e:af: 4a:aa:43:fd:9d:f6:4a:4e:e1:f9:92:85:64:15:dd:a5:0f:b9: ae:f1:c2:2f:14:ce:07:7d:2e:da:5e:0c:4a:9e:8e:fe:33:0c: cf:7e:0a:37:4c:9c:7d:f1:c7:3c:73:5f:41:44:28:2f:c8:eb: 32:1d:ca:e0:e4:fc:b2:c4:75:93:28:08:85:d9:2a:a4:89:83: 26:dd:a5:b9:5a:0b:69:ca:e4:7b:92:41:6a:b9:8c:67:f0:52: 57:ba:ba:74:e8:cc:14:d6:a4:d8:db:09:b9:33:c0:16:7b:8e: 89:3e:87:5b:49:ed:6b:8f:fd:70:5c:b2:2e:6d:05:85:a1:2f: 4e:ac:5d:1b:a2:1e:5f:56:62:eb:e2:ed:01:48:dc:4f:d2:4e: df:64:61:db:72:36:9a:d2:87:46:1a:ea:7f:bf:4b:91:f1:02: 8e:12:d7:ec:d9:3b:9c:c2:02:35:99:dc:ce:90:ce:4d:b3:4f: 79:00:0b:b9:fb:fa:67:0f:94:64:06:2a:fc:8b:97:66:01:08: a7:3a:77:9e:fa:f6:90:72:08:0d:b2:2d:28:35:df:79:5e:b2: 0f:29:f6:d7:27:38:92:0f:43:4f:ae:1b:56:71:f7:22:ce:f8: 3c:d8:15:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2MTZFNTBDNjI1MjU1 OTZFNjU0OEI0MDVDMkE1RkMxOUM3REFCQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt+AtsUANSGCfY4+45xOm0r3bDSn0FUGUK/UJmOT14rTDPPOcd vNG7l6mASCkqPw0K/ZWrizqqhw+a4TIKxOabczQs33m2WUWTb2y3y+sGqS7ys/qS 6df29rs9UVxMAYSpmcBOr+8RF6ZL5e/Kjdf8PtV1HDR7ydpbJSnVnqHhpw7ksvXY dFucByJBEJ/pmqwHdbk/LW3mZ3CkGSt0dTzByrteH7rnlDo4kH1Mh1hFsl4/5vtC WlSHGdUMlbLgJbAi+5dTYjGhejyjqZxL1qA9RmmJ4iQJbnXRAFGZPUdV1/jIY0ou 5wGTKL52SgwyOaZM08IBGmf25qASccQkD5VhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZhblDGJSVZbmVItAXCpfwZx9q88wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1poYmxER0pTVlpibVZJdEFY Q3Bmd1p4OXE4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn 4QAwDQYJKoZIhvcNAQELBQADggEBACJWXN2wc0kcg7GvlnceJiEOr0qqQ/2d9kpO 4fmShWQV3aUPua7xwi8Uzgd9LtpeDEqejv4zDM9+CjdMnH3xxzxzX0FEKC/I6zId yuDk/LLEdZMoCIXZKqSJgybdpblaC2nK5HuSQWq5jGfwUle6unTozBTWpNjbCbkz wBZ7jok+h1tJ7WuP/XBcsi5tBYWhL06sXRuiHl9WYuvi7QFI3E/STt9kYdtyNprS h0Ya6n+/S5HxAo4S1+zZO5zCAjWZ3M6Qzk2zT3kAC7n7+mcPlGQGKvyLl2YBCKc6 d5769pByCA2yLSg133lesg8p9tcnOJIPQ0+uG1Zx9yLO+DzYFUE= -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:00 2024 by rpki-client on console-fra.rpki-client.org