$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa File: wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa (raw, json) Hash identifier: AZzP7o4lRbCfyDgcVzeog1F8TbemNe2C7IumEImyMCc= Subject key identifier: C3:3C:07:36:CD:F1:29:81:B0:F3:01:79:90:51:B1:80:39:51:69:43 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E0F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa Signing time: Fri 01 Sep 2023 10:15:37 +0000 ROA not before: Fri 01 Sep 2023 10:15:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 122.254.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7695 (0x1e0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C33C0736CDF12981B0F301799051B18039516943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:b5:ad:93:6d:80:a7:ce:d9:d0:e4:f0:9d: 8b:de:da:93:9d:5d:78:db:8b:3c:96:9c:9f:6c:b3: 9c:49:06:2c:d1:9b:c7:3b:69:a2:fd:5d:3d:71:df: 33:b0:e8:14:f3:08:36:0b:54:5b:25:d5:c2:d0:32: c5:c3:93:51:8c:6d:f2:6a:9c:27:e1:b3:16:f1:70: a2:be:09:0b:1a:5b:6e:06:f2:07:23:b5:1c:58:e6: 10:a5:8a:97:d9:13:90:c8:6a:f2:f0:0e:12:a3:3f: b4:d3:83:de:0f:15:d6:53:03:64:50:f2:b8:8c:0b: f2:94:23:21:2d:84:56:9d:f2:34:41:7e:c2:27:58: dd:d5:e4:b9:c2:fe:6f:22:b7:bf:23:e5:a1:e1:20: 2d:db:7b:1d:46:04:f8:fc:9c:5b:53:f1:84:18:aa: 2b:29:7b:83:52:c2:49:e8:d6:c9:73:d7:f0:d2:61: aa:a7:06:6d:31:4a:1e:ab:c7:62:1c:1d:6e:07:c4: 7c:ee:f1:6f:a6:e3:71:37:9f:ff:c4:ae:d3:c8:51: d2:55:ef:20:5d:70:98:f0:37:09:6f:ce:f5:85:84: 34:ed:fe:e9:95:24:76:83:59:45:e2:bb:1e:85:5a: 52:e9:0b:b7:8b:cf:7b:b0:dc:04:ac:a9:e6:61:e9: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3C:07:36:CD:F1:29:81:B0:F3:01:79:90:51:B1:80:39:51:69:43 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.48.0/21 Signature Algorithm: sha256WithRSAEncryption 40:64:b3:64:98:03:95:15:0d:f5:ce:49:dc:85:bd:4c:1a:43: 6d:51:43:86:e8:1e:4c:86:a1:33:44:51:0c:5c:75:37:56:69: 32:cb:69:5e:21:cb:dc:39:14:06:b9:bd:76:ef:f4:20:09:88: 43:85:03:cd:3a:a9:ae:87:11:ab:87:80:3b:51:30:36:b3:8d: 76:09:a9:90:1e:36:8d:e5:04:f8:93:3c:d5:99:79:a1:e9:f4: b2:53:0a:13:24:da:3c:df:58:30:62:b8:a8:c5:d8:05:be:69: 4f:b3:2a:ca:95:59:5c:9f:f5:da:18:be:a5:98:f7:e0:39:45: 36:df:d9:ff:03:b2:c0:3f:20:4a:af:3f:55:65:dd:e7:a8:2c: 47:40:f7:88:fe:7a:30:9b:72:e7:ae:96:df:6a:11:01:08:7b: 72:95:33:ba:ef:14:e1:c5:9c:8e:92:89:21:a1:77:39:80:00: af:0b:3d:5c:c6:2a:a4:16:f1:12:b5:62:17:8b:51:eb:6e:a5: b3:12:4f:5c:cb:fb:4d:0c:a8:79:c4:32:3f:79:e4:2e:69:2a: 06:a2:89:ad:f9:29:a3:d6:65:6c:53:0a:79:43:e7:6d:ca:e4: 0c:d1:10:26:91:9c:75:d2:2d:6f:27:39:dd:46:b5:c0:e5:ec: 0e:3d:f2:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMzM0MwNzM2Q0RGMTI5 ODFCMEYzMDE3OTkwNTFCMTgwMzk1MTY5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwX7Wtk22Ap87Z0OTwnYve2pOdXXjbizyWnJ9ss5xJBizRm8c7 aaL9XT1x3zOw6BTzCDYLVFsl1cLQMsXDk1GMbfJqnCfhsxbxcKK+CQsaW24G8gcj tRxY5hClipfZE5DIavLwDhKjP7TTg94PFdZTA2RQ8riMC/KUIyEthFad8jRBfsIn WN3V5LnC/m8it78j5aHhIC3bex1GBPj8nFtT8YQYqispe4NSwkno1slz1/DSYaqn Bm0xSh6rx2IcHW4HxHzu8W+m43E3n//ErtPIUdJV7yBdcJjwNwlvzvWFhDTt/umV JHaDWUXiux6FWlLpC7eLz3uw3ASsqeZh6VjzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwzwHNs3xKYGw8wF5kFGxgDlRaUMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3d6d0hOczN4S1lHdzh3RjVr Rkd4Z0RsUmFVTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /jAwDQYJKoZIhvcNAQELBQADggEBAEBks2SYA5UVDfXOSdyFvUwaQ21RQ4boHkyG oTNEUQxcdTdWaTLLaV4hy9w5FAa5vXbv9CAJiEOFA806qa6HEauHgDtRMDazjXYJ qZAeNo3lBPiTPNWZeaHp9LJTChMk2jzfWDBiuKjF2AW+aU+zKsqVWVyf9doYvqWY 9+A5RTbf2f8DssA/IEqvP1Vl3eeoLEdA94j+ejCbcueult9qEQEIe3KVM7rvFOHF nI6SiSGhdzmAAK8LPVzGKqQW8RK1YheLUetupbMST1zL+00MqHnEMj955C5pKgai ia35KaPWZWxTCnlD523K5AzRECaRnHXSLW8nOd1GtcDl7A498uk= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:13 2024 by rpki-client on console-ams.rpki-client.org