$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa File: 8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa (raw, json) Hash identifier: fXQkRCWYyu37KBGxTOlfJA8/fSvcNhcwU5tY+2TC54U= Subject key identifier: F3:30:63:4F:F7:54:61:94:7C:85:9F:88:EE:CD:CF:9D:1E:EA:9A:AA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 221C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa Signing time: Mon 26 Aug 2024 05:33:41 +0000 ROA not before: Mon 26 Aug 2024 05:33:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.254.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8732 (0x221c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F330634FF75461947C859F88EECDCF9D1EEA9AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:e6:af:5d:43:b1:09:04:47:da:80:6b:97: a7:06:fd:75:53:c7:57:f6:b6:03:e9:86:09:87:cb: bd:eb:c4:b0:1f:0e:03:8e:d9:1c:df:9f:10:0d:35: 42:72:c9:46:63:2a:4f:05:7d:91:a8:61:cf:d5:17: 7a:80:ab:93:53:24:f7:de:80:6c:af:db:48:65:87: f6:ae:63:59:71:4c:33:ca:05:5e:76:ee:a1:06:15: d6:1f:1c:bd:dc:f1:72:15:86:34:47:52:26:01:c6: bf:16:11:40:3f:be:5d:28:c9:d5:20:a6:df:20:f3: dd:6c:bd:a8:61:73:f3:33:f2:75:54:4e:a5:99:59: 5a:f5:63:d3:68:92:ed:09:75:43:80:47:2a:f0:8d: 44:f5:14:78:e4:21:b7:6c:40:cb:30:7d:a1:5d:3d: d2:3d:47:87:0a:88:64:c6:cc:a0:e0:8d:a2:ea:ce: c8:f1:b5:9c:ea:29:70:e1:4a:fd:d0:65:d4:63:ca: db:50:fa:6c:72:c5:f1:7b:0e:63:a4:db:be:c5:6e: ba:23:80:fe:cf:93:9f:f1:c0:30:c6:53:e4:d0:4e: e9:8e:c4:5f:65:b8:77:6f:e1:c4:51:16:48:46:ad: 74:37:b8:34:d4:59:bd:50:a1:7b:6e:ba:46:6a:f0: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:30:63:4F:F7:54:61:94:7C:85:9F:88:EE:CD:CF:9D:1E:EA:9A:AA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.36.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:eb:3f:8d:18:8e:a6:7d:e5:8a:91:14:6c:12:38:e4:78:5c: a3:f3:d3:a4:3a:6c:16:b0:d5:a7:e3:ae:a3:b4:8e:45:0b:ed: 22:da:bc:3b:20:0b:0f:97:e9:29:ae:bd:c6:8e:06:bb:20:8f: c0:d1:d9:06:ad:84:65:c5:01:cb:a3:76:fa:c2:cb:51:f4:89: d3:51:25:c2:db:f2:91:17:1b:79:01:49:cb:53:b0:b8:b1:ae: de:4a:f3:66:b3:09:f3:16:31:e3:bf:f9:51:7a:e8:4a:32:2b: 8f:36:2e:92:10:0a:40:54:55:e6:f6:c5:ff:dd:38:0e:2a:dc: 90:aa:ff:5c:5e:5b:e6:88:a4:3f:77:91:80:02:49:68:84:2b: ff:87:b7:4d:5f:d6:1c:b9:4b:dd:e0:b0:c2:3e:27:e1:02:e1: 98:0e:eb:e7:b5:6d:2d:31:e5:86:d1:30:c0:31:f3:d5:97:ae: ef:31:75:f3:67:da:f8:7f:de:d8:c0:a1:01:c1:4c:9d:7f:e2: b5:e9:7d:30:95:30:4c:7a:24:88:ee:2f:22:d3:75:1d:99:c0: 5d:a7:e8:07:62:67:6f:38:0f:57:7f:90:f0:01:9b:39:40:72: 6e:5f:4d:aa:bc:f6:14:ea:df:ea:fa:93:ab:b6:b0:c7:af:3b: c1:df:af:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzMzA2MzRGRjc1NDYx OTQ3Qzg1OUY4OEVFQ0RDRjlEMUVFQTlBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXFuavXUOxCQRH2oBrl6cG/XVTx1f2tgPphgmHy73rxLAfDgOO 2RzfnxANNUJyyUZjKk8FfZGoYc/VF3qAq5NTJPfegGyv20hlh/auY1lxTDPKBV52 7qEGFdYfHL3c8XIVhjRHUiYBxr8WEUA/vl0oydUgpt8g891svahhc/Mz8nVUTqWZ WVr1Y9Noku0JdUOARyrwjUT1FHjkIbdsQMswfaFdPdI9R4cKiGTGzKDgjaLqzsjx tZzqKXDhSv3QZdRjyttQ+mxyxfF7DmOk277FbrojgP7Pk5/xwDDGU+TQTumOxF9l uHdv4cRRFkhGrXQ3uDTUWb1QoXtuukZq8CaNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8zBjT/dUYZR8hZ+I7s3PnR7qmqowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzh6QmpUX2RVWVpSOGhaLUk3 czNQblI3cW1xby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6 /iQwDQYJKoZIhvcNAQELBQADggEBACvrP40YjqZ95YqRFGwSOOR4XKPz06Q6bBaw 1afjrqO0jkUL7SLavDsgCw+X6SmuvcaOBrsgj8DR2QathGXFAcujdvrCy1H0idNR JcLb8pEXG3kBSctTsLixrt5K82azCfMWMeO/+VF66EoyK482LpIQCkBUVeb2xf/d OA4q3JCq/1xeW+aIpD93kYACSWiEK/+Ht01f1hy5S93gsMI+J+EC4ZgO6+e1bS0x 5YbRMMAx89WXru8xdfNn2vh/3tjAoQHBTJ1/4rXpfTCVMEx6JIjuLyLTdR2ZwF2n 6AdiZ284D1d/kPABmzlAcm5fTaq89hTq3+r6k6u2sMevO8Hfr4k= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org