$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F8bjATR8xgFQIaSnAsk74idd9i0.roa File: F8bjATR8xgFQIaSnAsk74idd9i0.roa (raw, json) Hash identifier: LFwPf4SHQAbUsaaIiTVr/3hjy+g2L7glCQk+7iE4/l0= Subject key identifier: 17:C6:E3:01:34:7C:C6:01:50:21:A4:A7:02:C9:3B:E2:27:5D:F6:2D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2247 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F8bjATR8xgFQIaSnAsk74idd9i0.roa Signing time: Mon 26 Aug 2024 05:33:50 +0000 ROA not before: Mon 26 Aug 2024 05:33:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 123.0.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8775 (0x2247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=17C6E301347CC6015021A4A702C93BE2275DF62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:9a:e3:79:56:f0:d2:40:6e:bd:95:3b:d7: 05:a3:da:2c:1a:35:f3:b3:52:bd:9d:80:b8:96:77: 1d:ae:0b:e2:55:e3:1a:93:ea:ce:f7:a8:ab:0f:6d: ef:5c:83:29:fa:c1:5e:0e:98:d7:b0:26:07:61:f1: a3:77:a3:e9:3a:26:f9:46:07:47:0f:27:68:65:0c: 3a:0d:f3:a3:55:c8:7c:ed:ab:4b:79:dd:ac:3c:4d: 54:95:25:de:e7:af:74:e8:f2:02:4f:c5:66:65:6e: 7a:f0:2e:6c:47:ba:28:31:2a:d9:03:76:02:90:6e: 36:d7:0e:5c:5d:29:5f:34:df:9a:75:66:73:07:23: ce:a9:7e:2b:0a:46:78:21:06:d2:8c:0e:46:60:07: 37:12:8b:17:d7:a1:3c:f5:29:4a:9e:cf:61:7a:11: 33:d4:57:5f:47:ae:7e:e6:0c:8d:d2:ab:ff:ac:80: 57:8a:52:66:26:dc:96:8b:97:73:4c:ab:2f:6b:21: 72:b9:52:ac:57:e6:6c:6f:0d:cb:41:f9:e4:c3:f5: a5:4c:db:a2:ff:2c:8c:bc:0e:f2:96:f8:30:2e:27: 8c:87:f2:78:db:9e:f4:78:96:56:42:01:4f:00:cc: c8:a4:f8:fe:21:cc:9e:47:b8:01:cf:84:ba:b7:5b: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C6:E3:01:34:7C:C6:01:50:21:A4:A7:02:C9:3B:E2:27:5D:F6:2D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F8bjATR8xgFQIaSnAsk74idd9i0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.44.0/22 Signature Algorithm: sha256WithRSAEncryption 85:ee:f4:cd:5d:c1:a8:7b:d1:51:fb:65:af:34:1f:4a:5e:fb: 24:0a:a7:e3:cd:78:ea:ad:4e:94:ec:b7:9d:1a:f5:cc:f4:bc: 8c:fb:d5:db:07:99:85:40:52:ca:d2:c9:d7:82:a5:1c:8a:44: 79:8d:b0:03:a7:22:23:22:a4:e9:a8:d3:0a:67:a7:01:d1:b1: 71:ac:84:dd:ae:f7:b7:cc:6a:50:b7:fa:18:6b:73:7a:29:00: 8d:b1:af:ce:8d:72:c6:95:c9:d2:95:70:f3:28:96:21:07:94: 81:7d:55:5a:a4:a2:a9:b0:eb:23:0e:0d:ff:4d:d8:55:17:16: 5a:43:4a:a2:56:60:20:f7:8f:cd:70:02:31:ad:cf:22:5a:e2: 73:c9:a5:25:dc:b4:5a:04:1e:e4:70:93:54:c1:4d:4c:65:05: f8:92:d8:92:2f:c1:0a:49:e9:da:1e:9b:3f:ee:7a:aa:75:14: 7a:9f:c2:09:c5:a3:6c:8e:3a:57:d2:4e:65:08:c6:44:a5:ee: 33:db:f1:57:97:e9:6d:65:fc:dd:29:7d:fd:3b:be:3b:40:45: 88:83:b2:a9:bf:62:76:6f:16:a9:1a:5f:12:fa:05:85:34:4c: 81:3e:c4:b6:e5:7b:fb:7c:54:83:26:d4:2c:ef:44:9e:52:72: 47:2d:88:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE3QzZFMzAxMzQ3Q0M2 MDE1MDIxQTRBNzAyQzkzQkUyMjc1REY2MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCWZrjeVbw0kBuvZU71wWj2iwaNfOzUr2dgLiWdx2uC+JV4xqT 6s73qKsPbe9cgyn6wV4OmNewJgdh8aN3o+k6JvlGB0cPJ2hlDDoN86NVyHztq0t5 3aw8TVSVJd7nr3To8gJPxWZlbnrwLmxHuigxKtkDdgKQbjbXDlxdKV8035p1ZnMH I86pfisKRnghBtKMDkZgBzcSixfXoTz1KUqez2F6ETPUV19Hrn7mDI3Sq/+sgFeK UmYm3JaLl3NMqy9rIXK5UqxX5mxvDctB+eTD9aVM26L/LIy8DvKW+DAuJ4yH8njb nvR4llZCAU8AzMik+P4hzJ5HuAHPhLq3WxodAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUF8bjATR8xgFQIaSnAsk74idd9i0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0Y4YmpBVFI4eGdGUUlhU25B c2s3NGlkZDlpMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 ACwwDQYJKoZIhvcNAQELBQADggEBAIXu9M1dwah70VH7Za80H0pe+yQKp+PNeOqt TpTst50a9cz0vIz71dsHmYVAUsrSydeCpRyKRHmNsAOnIiMipOmo0wpnpwHRsXGs hN2u97fMalC3+hhrc3opAI2xr86NcsaVydKVcPMoliEHlIF9VVqkoqmw6yMODf9N 2FUXFlpDSqJWYCD3j81wAjGtzyJa4nPJpSXctFoEHuRwk1TBTUxlBfiS2JIvwQpJ 6doemz/ueqp1FHqfwgnFo2yOOlfSTmUIxkSl7jPb8VeX6W1l/N0pff07vjtARYiD sqm/YnZvFqkaXxL6BYU0TIE+xLble/t8VIMm1CzvRJ5SckctiJs= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org