$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1603PpU_tS0vQsKJQHyhFihRCbI.roa File: 1603PpU_tS0vQsKJQHyhFihRCbI.roa (raw, json) Hash identifier: xVcMTOjdiuRYCJl+K7Bm5aO/CtBJdWLLVbWtJAt1Rp4= Subject key identifier: D7:AD:37:3E:95:3F:B5:2D:2F:42:C2:89:40:7C:A1:16:28:51:09:B2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22B6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1603PpU_tS0vQsKJQHyhFihRCbI.roa Signing time: Mon 26 Aug 2024 05:34:17 +0000 ROA not before: Mon 26 Aug 2024 05:34:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 122.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8886 (0x22b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D7AD373E953FB52D2F42C289407CA116285109B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:4e:3e:04:b2:0f:63:6f:31:c2:9c:f1:6a: 2b:91:81:28:8e:f9:a1:a1:69:ce:a8:ed:21:26:fb: c5:79:00:30:1b:a7:1e:ac:44:7f:89:0a:b4:f2:6e: 19:1c:80:de:61:c9:d0:65:c8:03:12:3c:f6:f0:24: 14:14:d9:ae:34:bd:94:b3:8a:2d:14:4f:6c:52:e9: 58:ff:e5:22:4c:c2:ac:10:a9:d4:bf:b1:a5:12:c5: 3f:69:84:bf:31:38:15:4e:2b:bf:02:06:94:43:0d: c4:42:16:d6:01:f0:10:9c:f7:3a:71:3d:2b:13:8c: 57:c6:9d:f8:26:08:2b:ab:2a:c9:a6:02:51:fb:ea: 41:95:79:eb:2a:af:3c:68:f2:9e:b4:00:4c:b7:d8: a1:be:ca:5b:a6:c3:bb:b8:e7:ad:be:8d:e4:d4:ba: 1c:f7:6f:69:37:db:13:ed:a1:fe:fe:3a:65:f7:bc: 89:3c:ac:ee:38:20:10:06:ce:45:f1:d6:cd:42:1e: 9a:5a:1a:1d:a3:b7:65:96:10:c3:59:98:eb:ad:9a: 07:5f:3c:19:52:d0:09:9c:12:be:ed:7a:9f:b8:3e: 8e:ac:45:1a:3c:63:7f:b8:04:cc:40:01:b3:20:fc: 85:9c:a6:ef:9c:a5:09:6d:32:74:07:0a:2d:50:4d: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AD:37:3E:95:3F:B5:2D:2F:42:C2:89:40:7C:A1:16:28:51:09:B2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1603PpU_tS0vQsKJQHyhFihRCbI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:d2:5f:0e:1e:59:72:f4:f3:82:5c:c8:2e:37:5c:6e:53:d5: cd:05:36:e3:7d:bf:27:da:52:e6:59:fa:ef:19:c8:ea:4b:75: ff:25:35:d0:52:48:a2:bf:9c:75:93:09:01:53:33:dd:d5:a0: 9a:4f:e8:4a:f1:45:b4:15:b7:a0:0a:a6:f3:47:cc:72:94:5f: f2:7a:5d:d1:d3:59:a6:a0:77:10:7a:a1:1f:96:17:1c:36:87: 50:79:cc:08:00:b1:55:5d:cf:02:45:79:c7:b9:0f:69:70:b8: 64:83:96:13:91:4a:9a:14:a6:25:33:c2:2a:cf:81:fc:f7:a9: 46:0f:82:65:f9:cd:10:53:d1:88:06:f3:5d:3c:cf:0f:d5:6f: 44:3b:9c:9a:85:91:49:12:c9:b7:6b:4d:6e:10:88:87:1b:f3: d1:df:24:f2:2c:1b:a5:1f:39:82:a2:0c:b2:f7:3b:7d:ed:21: 82:1c:a4:da:3b:11:bb:39:51:05:06:f8:d4:59:dd:3d:63:e9: 60:52:e3:3e:35:5e:8f:c4:58:0c:2b:00:30:4f:0b:fe:fa:7f: 98:b5:f6:6a:cc:1d:11:b9:4e:04:c1:5e:75:87:0d:0d:36:ea: e5:e0:3f:ac:70:f9:f0:3e:17:5b:be:9b:17:8a:ea:ab:00:00: dd:56:8f:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIrYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ3QUQzNzNFOTUzRkI1 MkQyRjQyQzI4OTQwN0NBMTE2Mjg1MTA5QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOVk4+BLIPY28xwpzxaiuRgSiO+aGhac6o7SEm+8V5ADAbpx6s RH+JCrTybhkcgN5hydBlyAMSPPbwJBQU2a40vZSzii0UT2xS6Vj/5SJMwqwQqdS/ saUSxT9phL8xOBVOK78CBpRDDcRCFtYB8BCc9zpxPSsTjFfGnfgmCCurKsmmAlH7 6kGVeesqrzxo8p60AEy32KG+ylumw7u4562+jeTUuhz3b2k32xPtof7+OmX3vIk8 rO44IBAGzkXx1s1CHppaGh2jt2WWEMNZmOutmgdfPBlS0AmcEr7tep+4Po6sRRo8 Y3+4BMxAAbMg/IWcpu+cpQltMnQHCi1QTQjvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1603PpU/tS0vQsKJQHyhFihRCbIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzE2MDNQcFVfdFMwdlFzS0pR SHloRmloUkNiSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 ZEAwDQYJKoZIhvcNAQELBQADggEBAD/SXw4eWXL084JcyC43XG5T1c0FNuN9vyfa UuZZ+u8ZyOpLdf8lNdBSSKK/nHWTCQFTM93VoJpP6ErxRbQVt6AKpvNHzHKUX/J6 XdHTWaagdxB6oR+WFxw2h1B5zAgAsVVdzwJFece5D2lwuGSDlhORSpoUpiUzwirP gfz3qUYPgmX5zRBT0YgG8108zw/Vb0Q7nJqFkUkSybdrTW4QiIcb89HfJPIsG6Uf OYKiDLL3O33tIYIcpNo7Ebs5UQUG+NRZ3T1j6WBS4z41Xo/EWAwrADBPC/76f5i1 9mrMHRG5TgTBXnWHDQ026uXgP6xw+fA+F1u+mxeK6qsAAN1Wj7A= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org