$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3gDgNGpQfuPOD_zQLM7aW-IkA4s.roa File: 3gDgNGpQfuPOD_zQLM7aW-IkA4s.roa (raw, json) Hash identifier: aIaSCuEkKigxN7TRaZedjfAm+JrAWE2hGJ+KJd22e2s= Subject key identifier: DE:00:E0:34:6A:50:7E:E3:CE:0F:FC:D0:2C:CE:DA:5B:E2:24:03:8B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 217A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3gDgNGpQfuPOD_zQLM7aW-IkA4s.roa Signing time: Mon 26 Aug 2024 05:33:02 +0000 ROA not before: Mon 26 Aug 2024 05:33:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 122.254.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8570 (0x217a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DE00E0346A507EE3CE0FFCD02CCEDA5BE224038B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:21:b8:d2:94:a3:4c:fc:31:dd:98:40:98: 8c:91:5c:38:89:82:a4:ab:06:e0:a7:23:27:51:70: a8:31:49:08:62:85:0d:87:0a:ca:ab:7d:55:ca:3e: 57:30:f0:0a:fd:f8:48:c6:01:04:e7:1a:44:a4:05: 8a:5c:35:a1:9a:4d:47:77:99:4a:cd:0f:b7:26:36: f2:03:ca:91:70:bd:36:bb:aa:3e:6b:db:95:f4:ab: b9:8b:5c:57:9c:14:9a:9d:72:f1:92:c9:c6:56:e2: d3:3d:4d:2d:a5:d3:89:d1:1d:74:64:5f:ae:67:e9: 59:6d:2b:4d:99:49:a8:55:b3:d1:4c:6d:b3:1d:bd: 5e:47:c9:4a:37:98:62:94:51:70:5e:0c:62:bc:aa: 7f:cc:19:79:cd:c0:f1:77:ce:df:c3:a6:0a:87:75: 98:97:2e:de:8f:da:b9:45:3b:ea:4c:fc:ca:39:57: 36:2b:78:a4:8a:57:24:f4:94:50:c2:e5:01:bb:33: 0c:fc:71:d6:0b:4b:da:7c:3a:3c:51:3e:29:58:87: b0:df:d1:13:73:68:94:dc:14:93:aa:11:41:61:37: 9c:27:20:66:39:18:bb:8f:81:72:47:c1:80:69:2f: 2f:80:15:e4:47:1e:3f:2a:63:e9:69:f2:ca:a6:5d: fd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:00:E0:34:6A:50:7E:E3:CE:0F:FC:D0:2C:CE:DA:5B:E2:24:03:8B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3gDgNGpQfuPOD_zQLM7aW-IkA4s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.16.0/21 Signature Algorithm: sha256WithRSAEncryption 36:07:75:cd:85:8d:67:72:59:47:35:4b:47:64:02:c8:55:f8: 00:78:b8:0f:dc:3b:dc:cc:68:d9:33:50:47:5c:3a:95:5f:fb: 35:69:a9:c3:b2:dc:d7:f1:a7:f1:d8:d9:8c:7a:ef:a7:db:1b: 9b:0d:f4:ac:05:16:20:a5:1a:15:20:9c:93:e5:6d:c6:11:d9: b3:30:56:0c:e7:ae:bd:ac:90:01:e3:40:9a:b7:ce:ef:a8:b8: b4:13:7b:ac:84:82:5b:7b:4d:02:e9:e4:4a:e1:ea:91:8b:c3: 58:74:70:ba:f4:7e:64:8c:9c:66:32:b0:0a:e8:41:55:aa:25: 0a:29:f3:40:c7:99:26:ee:12:67:e9:31:bb:df:80:f9:35:88: ac:03:e5:c8:46:39:91:43:cc:48:f6:a9:b0:6e:d0:43:74:84: a7:79:ac:c1:29:77:ca:4c:df:c8:98:48:af:17:de:b9:91:61: c3:a2:18:9e:c0:99:43:84:42:e8:1d:d7:23:10:64:e9:fd:1e: 0a:0b:7d:71:e8:17:37:b3:51:24:5a:1b:cf:ab:4a:79:fa:24: 9e:f6:2f:0a:1a:87:26:38:c1:df:ba:77:e1:3a:e0:19:8d:8e: 7f:c7:d2:a8:c1:6d:65:11:a8:88:0d:bf:e0:b5:55:33:42:2e: cf:c4:2d:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERFMDBFMDM0NkE1MDdF RTNDRTBGRkNEMDJDQ0VEQTVCRTIyNDAzOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoiyG40pSjTPwx3ZhAmIyRXDiJgqSrBuCnIydRcKgxSQhihQ2H CsqrfVXKPlcw8Ar9+EjGAQTnGkSkBYpcNaGaTUd3mUrND7cmNvIDypFwvTa7qj5r 25X0q7mLXFecFJqdcvGSycZW4tM9TS2l04nRHXRkX65n6VltK02ZSahVs9FMbbMd vV5HyUo3mGKUUXBeDGK8qn/MGXnNwPF3zt/DpgqHdZiXLt6P2rlFO+pM/Mo5VzYr eKSKVyT0lFDC5QG7Mwz8cdYLS9p8OjxRPilYh7Df0RNzaJTcFJOqEUFhN5wnIGY5 GLuPgXJHwYBpLy+AFeRHHj8qY+lp8sqmXf2fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3gDgNGpQfuPOD/zQLM7aW+IkA4swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNnRGdOR3BRZnVQT0RfelFM TTdhVy1Ja0E0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /hAwDQYJKoZIhvcNAQELBQADggEBADYHdc2FjWdyWUc1S0dkAshV+AB4uA/cO9zM aNkzUEdcOpVf+zVpqcOy3Nfxp/HY2Yx676fbG5sN9KwFFiClGhUgnJPlbcYR2bMw Vgznrr2skAHjQJq3zu+ouLQTe6yEglt7TQLp5Erh6pGLw1h0cLr0fmSMnGYysAro QVWqJQop80DHmSbuEmfpMbvfgPk1iKwD5chGOZFDzEj2qbBu0EN0hKd5rMEpd8pM 38iYSK8X3rmRYcOiGJ7AmUOEQugd1yMQZOn9HgoLfXHoFzezUSRaG8+rSnn6JJ72 LwoahyY4wd+6d+E64BmNjn/H0qjBbWURqIgNv+C1VTNCLs/ELZY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org