$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rrZrzcD-vHGaoOflQRL4XKEjCVE.roa File: rrZrzcD-vHGaoOflQRL4XKEjCVE.roa (raw, json) Hash identifier: je/M3Fu3mXngfBpJWuKbty9M/S33vp05o4VkE4t/+mU= Subject key identifier: AE:B6:6B:CD:C0:FE:BC:71:9A:A0:E7:E5:41:12:F8:5C:A1:23:09:51 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2299 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rrZrzcD-vHGaoOflQRL4XKEjCVE.roa Signing time: Mon 26 Aug 2024 05:34:10 +0000 ROA not before: Mon 26 Aug 2024 05:34:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 211.76.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8857 (0x2299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AEB66BCDC0FEBC719AA0E7E54112F85CA1230951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:99:cb:b5:70:58:3e:e5:d0:20:26:81:a3: 8b:c4:b9:62:08:ab:95:31:a5:63:ad:d6:a4:14:b9: c8:58:bb:1a:c6:27:c8:7d:3a:e7:fb:3e:66:f1:72: e4:4f:a1:14:b1:0f:53:8f:b5:1e:a2:27:fc:22:49: 83:9a:82:28:f8:48:57:c6:3f:5b:d5:e4:bc:d7:4e: 13:fa:9d:1f:d1:60:16:b6:cd:16:79:44:8f:44:1a: 8a:20:80:d2:23:68:fe:3d:d5:b1:5f:4e:99:4f:2f: 9a:d6:e6:88:ec:1f:5e:79:c7:24:1a:82:fe:ee:d4: 56:d7:28:f6:e1:ab:d4:08:cb:78:db:36:1a:33:43: 3e:76:d4:04:f8:fa:19:a8:2c:86:d5:ce:d4:84:a2: e3:6e:16:75:8e:cd:88:58:06:95:3a:e7:6c:63:ba: d4:d4:e3:9f:29:c8:0e:dc:c5:2f:e3:78:e9:b4:20: c3:b0:b8:fb:66:49:e6:45:98:3b:2e:bc:a4:8d:db: 19:18:49:fe:4c:08:bb:1d:3f:3a:10:18:c0:6b:76: 88:0d:4d:47:8f:15:62:cc:ce:3d:f8:d9:9b:17:9d: f9:bc:72:d6:e3:fd:66:64:a4:08:13:63:6a:73:a0: 07:44:f0:7d:00:2b:0f:27:9d:42:54:5c:44:d3:43: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B6:6B:CD:C0:FE:BC:71:9A:A0:E7:E5:41:12:F8:5C:A1:23:09:51 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rrZrzcD-vHGaoOflQRL4XKEjCVE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.44.0/22 Signature Algorithm: sha256WithRSAEncryption 91:f7:52:cb:7e:f6:57:67:d5:ff:48:d8:81:5b:94:6a:7f:0f: 79:65:01:b8:88:1a:d3:24:b8:33:98:c8:06:ae:a8:90:09:75: 69:53:6b:bc:21:8c:28:cb:2a:e9:60:08:b6:ce:21:54:28:47: f9:95:7a:cb:ee:03:4b:5f:8c:6d:c1:7f:59:34:4f:06:78:a9: 6d:78:ec:71:2e:7b:12:6c:07:29:6f:2a:dc:b9:8c:ea:eb:ff: e7:96:a8:3f:65:b8:7a:d1:c2:ee:34:71:9c:df:5d:92:cf:cc: cb:6e:fc:c6:b4:ce:91:33:de:a2:a1:65:5f:74:68:16:a7:99: de:21:0e:a4:19:53:0b:13:86:91:b3:54:43:e1:76:5e:2c:15: ed:f3:2b:b4:2d:b0:5f:92:e8:09:c8:43:17:7b:21:d3:ff:85: d1:5d:d6:15:8a:67:af:9e:f7:8a:e1:80:63:fe:91:8e:59:8d: a5:0f:3c:48:6e:71:94:09:e8:50:0b:d6:c8:2f:84:d0:70:0c: a9:e5:32:65:db:5c:3f:2f:c1:de:c5:58:1b:ae:85:b2:a9:e4: 18:69:e6:45:51:38:d5:a7:c8:6d:60:2a:bc:c0:71:7f:31:cf: 34:7f:63:5c:e0:8b:20:84:9e:fd:81:f9:ee:05:b7:33:1a:f8: fb:36:c8:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFQjY2QkNEQzBGRUJD NzE5QUEwRTdFNTQxMTJGODVDQTEyMzA5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMBJnLtXBYPuXQICaBo4vEuWIIq5UxpWOt1qQUuchYuxrGJ8h9 Ouf7PmbxcuRPoRSxD1OPtR6iJ/wiSYOagij4SFfGP1vV5LzXThP6nR/RYBa2zRZ5 RI9EGooggNIjaP491bFfTplPL5rW5ojsH155xyQagv7u1FbXKPbhq9QIy3jbNhoz Qz521AT4+hmoLIbVztSEouNuFnWOzYhYBpU652xjutTU458pyA7cxS/jeOm0IMOw uPtmSeZFmDsuvKSN2xkYSf5MCLsdPzoQGMBrdogNTUePFWLMzj342ZsXnfm8ctbj /WZkpAgTY2pzoAdE8H0AKw8nnUJUXETTQ/YjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrrZrzcD+vHGaoOflQRL4XKEjCVEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3JyWnJ6Y0QtdkhHYW9PZmxR Ukw0WEtFakNWRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TCwwDQYJKoZIhvcNAQELBQADggEBAJH3Ust+9ldn1f9I2IFblGp/D3llAbiIGtMk uDOYyAauqJAJdWlTa7whjCjLKulgCLbOIVQoR/mVesvuA0tfjG3Bf1k0TwZ4qW14 7HEuexJsBylvKty5jOrr/+eWqD9luHrRwu40cZzfXZLPzMtu/Ma0zpEz3qKhZV90 aBanmd4hDqQZUwsThpGzVEPhdl4sFe3zK7QtsF+S6AnIQxd7IdP/hdFd1hWKZ6+e 94rhgGP+kY5ZjaUPPEhucZQJ6FAL1sgvhNBwDKnlMmXbXD8vwd7FWBuuhbKp5Bhp 5kVRONWnyG1gKrzAcX8xzzR/Y1zgiyCEnv2B+e4FtzMa+Ps2yEE= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:58 2024 by rpki-client on console-ams.rpki-client.org