$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQRlgO8u5X8tLolrO3xUr4TM7Xw.roa File: CQRlgO8u5X8tLolrO3xUr4TM7Xw.roa (raw, json) Hash identifier: NB8BABij+kVMWh8J+xW2JDsJruiRuaO/1fPZeVPfDPY= Subject key identifier: 09:04:65:80:EF:2E:E5:7F:2D:2E:89:6B:3B:7C:54:AF:84:CC:ED:7C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 225B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQRlgO8u5X8tLolrO3xUr4TM7Xw.roa Signing time: Mon 26 Aug 2024 05:33:54 +0000 ROA not before: Mon 26 Aug 2024 05:33:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.32.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8795 (0x225b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=09046580EF2EE57F2D2E896B3B7C54AF84CCED7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:cf:19:4a:25:2f:fa:69:06:93:05:f8:51: 04:1d:28:93:e3:45:5f:d4:19:e3:5d:ec:38:c4:ea: dd:14:1d:18:08:cf:41:99:d8:6f:f8:57:59:bb:c2: 4a:d5:79:19:73:38:2a:61:af:47:dc:fc:19:3d:98: 7e:53:ef:f1:5a:00:f4:94:74:b3:7a:a4:69:e0:c8: 91:a7:65:2d:bc:8a:14:c6:fb:4b:24:29:6a:91:24: 30:3d:ef:95:65:7d:0f:55:8d:87:ae:99:01:2f:b3: e1:dc:28:be:e6:0b:a9:3e:ce:5e:97:9a:33:f6:4b: c7:8d:a8:f5:45:79:c2:20:24:15:65:96:5b:05:e8: 1a:83:70:34:ea:5c:66:41:2a:79:76:b8:39:74:84: 92:e9:09:54:50:cb:0b:10:94:30:b0:23:41:1a:56: 1d:31:2b:42:30:9f:24:69:a4:42:3f:02:cc:56:81: e3:0c:88:1f:f2:2f:6b:4b:3a:3a:94:82:3c:ba:f1: 34:7e:c4:5b:68:a2:72:a7:fa:c7:4c:46:c4:44:46: d5:00:c4:09:31:d1:19:70:ab:ef:40:66:f0:89:94: 49:19:68:9e:b5:f6:0d:1e:a5:30:7e:a5:43:ca:9e: 51:f6:a6:dd:2f:5c:0e:7f:66:a9:ce:f4:e1:fb:b2: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:65:80:EF:2E:E5:7F:2D:2E:89:6B:3B:7C:54:AF:84:CC:ED:7C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQRlgO8u5X8tLolrO3xUr4TM7Xw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:c8:ac:18:eb:d3:54:b3:23:85:1b:b6:12:05:14:b4:45:1c: 57:e6:4c:30:8d:65:9f:b7:1b:41:3a:ce:26:de:89:b6:79:f0: 09:27:e7:5d:53:ec:23:6d:f3:af:67:1a:83:95:ce:30:99:7c: c2:30:c5:91:74:09:de:68:60:71:59:65:a0:67:e5:f0:12:d6: f9:e8:9c:76:9d:cc:00:96:c9:6c:b0:c8:c8:90:93:b1:bb:96: 98:ce:96:42:47:81:ac:13:32:b1:39:89:f0:f9:6f:e0:cc:3d: 0b:57:c5:16:70:41:bb:55:5d:9d:d3:70:36:56:bb:da:35:ee: 43:5c:2b:e3:d4:22:bc:ea:57:69:bb:ea:e1:85:bd:89:c9:5b: c0:61:b4:48:eb:1f:c3:91:ff:db:5c:03:10:a6:1d:2e:a9:3b: a0:c7:a1:99:cf:8b:b7:ac:fc:b0:9b:b9:68:08:28:cb:32:a8: fe:d7:b9:84:00:4b:33:ca:3e:0f:8c:e1:ce:bf:9c:88:45:a0: d2:ef:f1:48:df:98:f2:22:43:4b:8d:fa:a5:97:85:23:21:53: 2e:b4:5e:cd:0d:66:12:94:3b:d8:03:0b:83:7e:cd:1e:fd:ec: 59:71:42:9f:65:a4:4f:59:59:7d:c4:44:9e:e0:84:86:d8:07: 99:39:75:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5MDQ2NTgwRUYyRUU1 N0YyRDJFODk2QjNCN0M1NEFGODRDQ0VEN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/es8ZSiUv+mkGkwX4UQQdKJPjRV/UGeNd7DjE6t0UHRgIz0GZ 2G/4V1m7wkrVeRlzOCphr0fc/Bk9mH5T7/FaAPSUdLN6pGngyJGnZS28ihTG+0sk KWqRJDA975VlfQ9VjYeumQEvs+HcKL7mC6k+zl6XmjP2S8eNqPVFecIgJBVlllsF 6BqDcDTqXGZBKnl2uDl0hJLpCVRQywsQlDCwI0EaVh0xK0IwnyRppEI/AsxWgeMM iB/yL2tLOjqUgjy68TR+xFtoonKn+sdMRsRERtUAxAkx0Rlwq+9AZvCJlEkZaJ61 9g0epTB+pUPKnlH2pt0vXA5/ZqnO9OH7snqpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCQRlgO8u5X8tLolrO3xUr4TM7XwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NRUmxnTzh1NVg4dExvbHJP M3hVcjRUTTdYdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXT TCAwDQYJKoZIhvcNAQELBQADggEBAEvIrBjr01SzI4UbthIFFLRFHFfmTDCNZZ+3 G0E6zibeibZ58Akn511T7CNt869nGoOVzjCZfMIwxZF0Cd5oYHFZZaBn5fAS1vno nHadzACWyWywyMiQk7G7lpjOlkJHgawTMrE5ifD5b+DMPQtXxRZwQbtVXZ3TcDZW u9o17kNcK+PUIrzqV2m76uGFvYnJW8BhtEjrH8OR/9tcAxCmHS6pO6DHoZnPi7es /LCbuWgIKMsyqP7XuYQASzPKPg+M4c6/nIhFoNLv8UjfmPIiQ0uN+qWXhSMhUy60 Xs0NZhKUO9gDC4N+zR797FlxQp9lpE9ZWX3ERJ7ghIbYB5k5dV8= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org