$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wNt0PEpW5i2Nua33NQDutx4h7MI.roa File: wNt0PEpW5i2Nua33NQDutx4h7MI.roa (raw, json) Hash identifier: AfIbXht/qBZqm4qXF4mfgR4suXB9MV5V4+kmLsxHEEI= Subject key identifier: C0:DB:74:3C:4A:56:E6:2D:8D:B9:AD:F7:35:00:EE:B7:1E:21:EC:C2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22C8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wNt0PEpW5i2Nua33NQDutx4h7MI.roa Signing time: Mon 26 Aug 2024 05:34:22 +0000 ROA not before: Mon 26 Aug 2024 05:34:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 122.100.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8904 (0x22c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C0DB743C4A56E62D8DB9ADF73500EEB71E21ECC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d2:96:a5:2e:be:5a:cb:30:e0:98:8f:2d:74: 39:d2:ce:b4:45:96:c5:97:1d:11:d0:0d:fd:cd:aa: 50:c9:48:a3:8e:1a:20:58:9c:c2:35:db:a3:51:20: 49:6a:1b:d4:62:bb:bd:ea:fa:1d:a6:af:b5:76:f4: ef:b8:24:2b:87:cb:0d:ff:b3:bd:01:f8:94:bc:22: 4d:c2:91:aa:f5:03:54:fb:ec:5c:f1:f6:8c:23:ad: ac:08:f3:47:3f:c6:fd:be:33:f5:88:d9:ed:0b:87: f4:a7:67:62:36:ef:c7:24:22:3e:34:41:68:1e:94: 8b:19:29:48:fc:52:1e:1a:a5:61:53:b3:de:3b:be: 51:63:5e:25:93:8a:1e:cc:37:a7:37:cf:46:87:51: 0d:e2:b0:b0:7a:0e:2a:68:49:d3:4a:1f:ff:79:7a: 35:08:d6:39:93:2c:6a:45:10:7e:90:a2:8d:be:11: 85:57:36:e0:94:54:fe:e7:0c:e6:fd:7a:82:0f:1f: ad:86:d2:d9:32:49:78:8a:5a:0d:6d:36:1e:f5:9d: c9:2a:8a:d5:c8:10:f8:6a:16:82:d0:27:d8:29:f4: 13:50:12:16:22:c5:92:25:91:2d:62:93:52:42:7c: ab:71:ca:9d:24:c6:9c:90:38:ce:bc:b0:23:48:8c: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DB:74:3C:4A:56:E6:2D:8D:B9:AD:F7:35:00:EE:B7:1E:21:EC:C2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wNt0PEpW5i2Nua33NQDutx4h7MI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.120.0/22 Signature Algorithm: sha256WithRSAEncryption 99:af:58:4a:a6:a7:d0:7e:41:db:ae:82:24:1d:19:d5:98:16: 1e:58:f5:9e:51:cc:c5:44:78:2f:c3:c7:c8:90:8e:9f:1d:d5: 72:88:13:74:97:ed:4a:74:1a:2d:f1:ab:2e:c4:9e:ef:ea:88: bd:8d:2c:bc:c2:1c:cd:01:00:75:79:99:81:ad:fa:f0:af:ed: 7b:05:53:ae:2f:33:8e:03:fc:12:28:33:fa:a0:93:14:cc:ab: 80:cc:49:d2:7e:5c:49:c5:6a:36:5c:eb:d6:ed:af:e0:0d:10: df:e2:70:51:89:bc:c7:66:2b:91:09:01:fb:f7:aa:7c:f9:87: 75:82:b2:58:5e:00:0d:24:30:3a:38:1b:f1:30:18:81:59:b9: 54:2e:8c:87:31:73:89:df:4e:72:db:76:3b:90:5c:80:57:5f: c3:50:48:e0:96:f9:1b:da:0c:f8:a1:74:4f:ea:ec:f8:68:fb: a1:08:3e:d4:38:97:9a:2b:dc:06:1a:57:e5:15:fb:a9:6a:a7: 7c:7a:41:42:b7:1f:33:bc:3d:10:07:2e:90:33:2b:78:f3:cd: 00:03:cf:6d:e2:73:e9:29:dc:8d:61:18:88:9f:a3:71:85:3c: 30:ed:7c:58:a7:b0:f5:f6:05:0f:44:f9:ca:48:54:35:72:2f: 7f:ee:76:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwREI3NDNDNEE1NkU2 MkQ4REI5QURGNzM1MDBFRUI3MUUyMUVDQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDv0palLr5ayzDgmI8tdDnSzrRFlsWXHRHQDf3NqlDJSKOOGiBY nMI126NRIElqG9Riu73q+h2mr7V29O+4JCuHyw3/s70B+JS8Ik3Ckar1A1T77Fzx 9owjrawI80c/xv2+M/WI2e0Lh/SnZ2I278ckIj40QWgelIsZKUj8Uh4apWFTs947 vlFjXiWTih7MN6c3z0aHUQ3isLB6DipoSdNKH/95ejUI1jmTLGpFEH6Qoo2+EYVX NuCUVP7nDOb9eoIPH62G0tkySXiKWg1tNh71nckqitXIEPhqFoLQJ9gp9BNQEhYi xZIlkS1ik1JCfKtxyp0kxpyQOM68sCNIjO6HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwNt0PEpW5i2Nua33NQDutx4h7MIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3dOdDBQRXBXNWkyTnVhMzNO UUR1dHg0aDdNSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6 ZHgwDQYJKoZIhvcNAQELBQADggEBAJmvWEqmp9B+QduugiQdGdWYFh5Y9Z5RzMVE eC/Dx8iQjp8d1XKIE3SX7Up0Gi3xqy7Enu/qiL2NLLzCHM0BAHV5mYGt+vCv7XsF U64vM44D/BIoM/qgkxTMq4DMSdJ+XEnFajZc69btr+ANEN/icFGJvMdmK5EJAfv3 qnz5h3WCslheAA0kMDo4G/EwGIFZuVQujIcxc4nfTnLbdjuQXIBXX8NQSOCW+Rva DPihdE/q7Pho+6EIPtQ4l5or3AYaV+UV+6lqp3x6QUK3HzO8PRAHLpAzK3jzzQAD z23ic+kp3I1hGIifo3GFPDDtfFinsPX2BQ9E+cpIVDVyL3/udu8= -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:01 2024 by rpki-client on console-fra.rpki-client.org