$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Isot4CKEt8BSqhQlsHREARg0NaE.roa File: Isot4CKEt8BSqhQlsHREARg0NaE.roa (raw, json) Hash identifier: dxGAoOoYL9fj+yy11ALiwXB/PD8tmdJG+rDCi1K7cSI= Subject key identifier: 22:CA:2D:E0:22:84:B7:C0:52:AA:14:25:B0:74:44:01:18:34:35:A1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 217B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Isot4CKEt8BSqhQlsHREARg0NaE.roa Signing time: Mon 26 Aug 2024 05:33:02 +0000 ROA not before: Mon 26 Aug 2024 05:33:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 124.6.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8571 (0x217b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=22CA2DE02284B7C052AA1425B0744401183435A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:54:ae:45:bc:aa:ff:20:5b:46:7a:99:71: 09:36:00:de:90:07:c5:bd:e1:df:c3:b2:75:49:85: 27:24:cb:f7:fb:22:41:87:3d:6c:c8:2f:97:23:b9: 84:72:1c:92:02:dd:4a:35:bd:1e:ff:75:14:c7:a3: ce:90:35:28:66:df:37:e1:45:e9:10:c0:15:f5:8c: 30:5c:b1:81:6d:21:b3:70:04:8b:eb:1e:39:aa:93: 25:78:fb:fb:47:fe:c6:8c:e0:2b:f0:b3:b1:0a:fb: a7:ee:61:ae:b0:29:e1:a4:55:0c:07:d9:8d:dd:0c: fe:2e:f8:51:31:0b:61:7c:6a:eb:69:30:7d:f0:2f: 96:0b:50:bc:0c:ff:2c:70:bd:76:a0:71:99:63:60: e7:25:08:49:01:f6:43:51:7e:01:45:e6:ab:00:4c: 6f:14:61:9a:07:92:48:41:6b:bf:83:f4:98:a7:de: 5f:4c:d2:91:97:df:49:cd:97:4e:d1:24:99:45:69: f7:26:ac:89:d3:7c:72:f8:55:ea:40:6e:9b:d1:33: ea:bb:f5:d4:ac:59:2d:af:5e:82:41:29:b0:ea:41: 83:07:a7:f0:31:d5:59:5a:e9:ed:6f:53:89:03:6b: 79:76:8c:68:07:73:e3:61:5c:52:a5:07:6a:a3:c8: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:2D:E0:22:84:B7:C0:52:AA:14:25:B0:74:44:01:18:34:35:A1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Isot4CKEt8BSqhQlsHREARg0NaE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.20.0/22 Signature Algorithm: sha256WithRSAEncryption 64:95:b8:e0:ad:a4:ce:43:6e:b8:ec:21:a3:80:3d:39:ca:c0: 1a:8c:25:65:92:6a:bb:ae:bc:49:24:78:9f:9c:a5:1a:e6:f9: cb:82:07:67:de:56:58:fd:ac:a1:8c:0b:93:65:7f:c5:cf:07: 41:6f:e2:76:ac:fb:08:7b:db:8e:5e:65:93:54:91:7b:df:3b: 60:c8:ca:66:29:5f:e6:00:2d:2c:f9:53:bd:83:f0:1d:20:90: af:41:cc:d3:aa:e4:75:a7:9e:e1:85:45:e1:5c:23:9f:d1:99: b4:f6:86:d4:fc:dd:14:c3:47:85:2e:03:64:89:36:0f:25:8a: 7f:a4:44:ec:21:ab:8f:c6:57:73:d7:ca:16:6a:71:07:fa:73: f2:a8:0f:03:3b:49:4c:d1:e7:3c:06:57:3e:e5:24:cb:ab:00: a8:62:3d:7a:bd:a0:0e:03:08:2e:f5:b4:13:f9:30:b8:ff:d6: b8:18:c2:46:34:4b:67:ad:d7:de:00:06:89:f2:35:d5:5b:0d: 6a:1a:cf:81:fd:c3:07:eb:7d:76:cd:72:04:c9:dc:b5:2a:6e: 69:26:4b:66:64:04:b0:84:e1:ee:d9:3a:0f:b4:54:ea:a7:d8: 4c:fd:3a:5d:d5:78:fa:47:e1:38:07:3f:1a:ed:ff:8d:da:2a: 58:57:34:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyQ0EyREUwMjI4NEI3 QzA1MkFBMTQyNUIwNzQ0NDAxMTgzNDM1QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnY1SuRbyq/yBbRnqZcQk2AN6QB8W94d/DsnVJhScky/f7IkGH PWzIL5cjuYRyHJIC3Uo1vR7/dRTHo86QNShm3zfhRekQwBX1jDBcsYFtIbNwBIvr HjmqkyV4+/tH/saM4Cvws7EK+6fuYa6wKeGkVQwH2Y3dDP4u+FExC2F8autpMH3w L5YLULwM/yxwvXagcZljYOclCEkB9kNRfgFF5qsATG8UYZoHkkhBa7+D9Jin3l9M 0pGX30nNl07RJJlFafcmrInTfHL4VepAbpvRM+q79dSsWS2vXoJBKbDqQYMHp/Ax 1Vla6e1vU4kDa3l2jGgHc+NhXFKlB2qjyGnHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIsot4CKEt8BSqhQlsHREARg0NaEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lzb3Q0Q0tFdDhCU3FoUWxz SFJFQVJnME5hRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BhQwDQYJKoZIhvcNAQELBQADggEBAGSVuOCtpM5DbrjsIaOAPTnKwBqMJWWSaruu vEkkeJ+cpRrm+cuCB2feVlj9rKGMC5Nlf8XPB0Fv4nas+wh7245eZZNUkXvfO2DI ymYpX+YALSz5U72D8B0gkK9BzNOq5HWnnuGFReFcI5/RmbT2htT83RTDR4UuA2SJ Ng8lin+kROwhq4/GV3PXyhZqcQf6c/KoDwM7SUzR5zwGVz7lJMurAKhiPXq9oA4D CC71tBP5MLj/1rgYwkY0S2et194ABonyNdVbDWoaz4H9wwfrfXbNcgTJ3LUqbmkm S2ZkBLCE4e7ZOg+0VOqn2Ez9Ol3VePpH4TgHPxrt/43aKlhXNF4= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:54 2024 by rpki-client on console-fra.rpki-client.org