$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gz2X_fGllvT3L7hXX484JHp96fc.roa File: gz2X_fGllvT3L7hXX484JHp96fc.roa (raw, json) Hash identifier: iB5q8o6zjZcYVCaSiJJ2T2uH/g7QgwydNteRo2pJfq8= Subject key identifier: 83:3D:97:FD:F1:A5:96:F4:F7:2F:B8:57:5F:8F:38:24:7A:7D:E9:F7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21EA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gz2X_fGllvT3L7hXX484JHp96fc.roa Signing time: Mon 26 Aug 2024 05:33:28 +0000 ROA not before: Mon 26 Aug 2024 05:33:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 119.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8682 (0x21ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=833D97FDF1A596F4F72FB8575F8F38247A7DE9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d8:18:60:f0:5c:58:f3:fe:34:48:a0:f0:ee: d4:b5:00:96:21:f3:5d:b6:11:8a:c1:b4:68:6d:5d: ae:d9:59:b9:0d:fb:1e:82:e5:f4:7a:67:1f:0f:1b: e2:c7:05:79:45:28:2f:f5:b7:6b:fa:93:d9:a5:01: 28:25:78:bc:e9:82:35:67:17:d5:a3:7a:71:c1:11: 70:8e:19:fa:b7:f6:0a:2c:a1:ec:71:d0:4d:a0:d2: a5:da:c3:6c:14:c7:75:a4:27:d0:94:fb:cb:57:b9: 61:76:db:4a:66:b6:50:55:d3:c6:ad:40:e7:20:ee: fe:e5:b1:bb:5b:7f:f3:20:bb:48:7c:57:63:47:7e: d1:64:24:38:ac:72:1d:38:8a:85:6c:42:5f:08:67: 68:96:a7:7b:ff:0a:4f:33:89:ec:ba:96:7f:81:c5: 25:58:17:85:ef:6d:d4:58:f4:eb:94:b3:71:20:a1: 54:51:2c:fe:f3:dc:11:27:72:10:bd:50:54:f1:5d: d0:1b:7f:b1:11:5d:93:ae:02:99:f3:78:31:e3:56: 32:01:9e:e2:fb:b3:44:9c:a9:01:b6:93:b9:e7:5c: 07:45:29:60:7d:2b:98:e5:ef:86:a3:7b:72:6f:3c: f6:9c:49:da:d7:6c:01:26:76:93:cc:4b:fd:23:1c: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3D:97:FD:F1:A5:96:F4:F7:2F:B8:57:5F:8F:38:24:7A:7D:E9:F7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gz2X_fGllvT3L7hXX484JHp96fc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 12:02:36:48:4e:fd:7c:f5:34:60:e5:17:09:c6:5e:ea:06:86: 90:e4:7b:f9:91:dc:2c:f4:aa:d4:84:6d:a0:dd:46:14:76:16: 0d:0b:32:ca:8f:1e:7d:04:b3:ec:92:5f:97:1e:4e:6c:28:e5: ee:20:c4:95:80:4e:a7:0f:6b:9b:9d:fd:74:ef:56:ae:31:29: 13:6c:c4:6e:5a:dc:33:b5:d4:16:ed:f2:b8:7b:d7:0d:a9:d0: 57:01:d2:5a:2c:7f:60:db:14:b2:8a:e0:fd:2a:a4:d4:0e:fa: 0d:05:4d:ca:e0:e2:c1:10:d5:22:9e:f5:0d:00:62:fb:64:d8: 47:bf:07:6e:11:66:14:41:78:31:fb:b2:b3:9b:92:cb:7a:13: 52:93:b7:d8:f8:70:33:b4:ff:8b:00:57:be:6c:a9:1f:d2:da: 2a:80:f7:a6:19:cb:89:28:c4:03:6d:54:b8:be:7d:72:e0:1f: 95:3b:37:2e:27:88:16:68:31:be:0a:a4:92:92:d6:f5:c1:a9: 23:67:ef:e9:89:79:7b:a8:59:79:40:54:56:f3:ec:71:46:ab: 81:41:63:27:5f:c6:f4:a8:0e:94:6a:21:5a:fe:51:6b:6d:5c: 99:ab:c3:db:1e:9a:37:83:16:78:b1:55:70:da:bc:ea:bf:99: 78:91:97:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgzM0Q5N0ZERjFBNTk2 RjRGNzJGQjg1NzVGOEYzODI0N0E3REU5RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp2Bhg8FxY8/40SKDw7tS1AJYh8122EYrBtGhtXa7ZWbkN+x6C 5fR6Zx8PG+LHBXlFKC/1t2v6k9mlASgleLzpgjVnF9WjenHBEXCOGfq39gosoexx 0E2g0qXaw2wUx3WkJ9CU+8tXuWF220pmtlBV08atQOcg7v7lsbtbf/Mgu0h8V2NH ftFkJDisch04ioVsQl8IZ2iWp3v/Ck8ziey6ln+BxSVYF4XvbdRY9OuUs3EgoVRR LP7z3BEnchC9UFTxXdAbf7ERXZOuApnzeDHjVjIBnuL7s0ScqQG2k7nnXAdFKWB9 K5jl74aje3JvPPacSdrXbAEmdpPMS/0jHJZBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgz2X/fGllvT3L7hXX484JHp96fcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2d6MlhfZkdsbHZUM0w3aFhY NDg0SkhwOTZmYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 TYAwDQYJKoZIhvcNAQELBQADggEBABICNkhO/Xz1NGDlFwnGXuoGhpDke/mR3Cz0 qtSEbaDdRhR2Fg0LMsqPHn0Es+ySX5ceTmwo5e4gxJWATqcPa5ud/XTvVq4xKRNs xG5a3DO11Bbt8rh71w2p0FcB0losf2DbFLKK4P0qpNQO+g0FTcrg4sEQ1SKe9Q0A Yvtk2Ee/B24RZhRBeDH7srObkst6E1KTt9j4cDO0/4sAV75sqR/S2iqA96YZy4ko xANtVLi+fXLgH5U7Ny4niBZoMb4KpJKS1vXBqSNn7+mJeXuoWXlAVFbz7HFGq4FB YydfxvSoDpRqIVr+UWttXJmrw9semjeDFnixVXDavOq/mXiRl0g= -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:01 2024 by rpki-client on console-fra.rpki-client.org