$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jtt8p7sK738_XAoBbBN3k24m9HQ.roa File: Jtt8p7sK738_XAoBbBN3k24m9HQ.roa (raw, json) Hash identifier: vNvyVLARCq2pdG/fb9vQP00cSGSFk3yHEk3GS6NJKT8= Subject key identifier: 26:DB:7C:A7:BB:0A:EF:7F:3F:5C:0A:01:6C:13:77:93:6E:26:F4:74 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22AE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jtt8p7sK738_XAoBbBN3k24m9HQ.roa Signing time: Mon 26 Aug 2024 05:34:15 +0000 ROA not before: Mon 26 Aug 2024 05:34:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 114.198.176.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8878 (0x22ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=26DB7CA7BB0AEF7F3F5C0A016C1377936E26F474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:14:7d:2e:1d:2b:32:fb:c8:73:a3:c6:d4: 96:e8:e2:30:67:62:4b:40:fb:70:2b:a2:e2:1c:1e: b0:33:7d:55:d8:9d:a3:d7:16:60:e1:07:fb:43:17: 7d:38:09:ee:8c:47:6b:94:d2:a8:49:bb:c2:57:b5: 43:03:40:9a:71:60:fd:9f:fa:24:30:5b:7f:4a:5e: c8:ed:3e:a2:56:34:39:8a:52:05:39:fc:3c:25:b2: 8a:17:55:b4:2f:11:16:c1:d7:97:88:f6:f3:d9:d6: 7a:53:b0:54:7d:c5:76:00:8c:80:89:68:45:0f:4a: cd:a1:e5:f5:d4:cd:f2:87:46:eb:b0:38:2b:af:58: ea:40:ac:19:9f:d0:fd:a4:0b:0a:16:11:3b:73:92: 84:f0:d6:e7:83:b1:38:67:db:1b:75:c1:f6:f3:a0: 9d:14:17:b3:76:01:03:27:fd:56:c7:10:98:d7:8b: d5:6f:fb:c0:6d:fc:74:31:f9:e0:e2:35:9e:4d:2d: c4:55:6b:5a:02:57:9f:c3:5d:05:50:39:0a:a8:c3: 9b:33:60:da:a4:ba:69:10:2a:20:16:c3:1a:85:b4: 89:96:08:b7:b5:33:1e:b7:c1:93:9c:12:8d:0f:bb: 98:0d:ce:61:49:40:04:17:10:34:64:b2:6f:ab:02: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DB:7C:A7:BB:0A:EF:7F:3F:5C:0A:01:6C:13:77:93:6E:26:F4:74 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jtt8p7sK738_XAoBbBN3k24m9HQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.176.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:f5:64:8f:1f:b4:5f:a7:2e:88:dc:ae:00:ad:a5:ef:a6:79: ad:62:b0:f8:95:da:28:4b:5c:f5:81:0c:35:ff:62:86:14:8f: 52:d6:6a:8d:36:c0:6a:ab:3e:64:ad:8d:54:82:a2:16:66:f6: 2f:6b:3c:c8:88:b8:a8:18:e1:2f:28:12:b3:66:ae:fc:cd:0a: a2:55:1d:e8:37:9f:85:04:71:45:76:58:00:bc:17:8b:dc:43: 01:82:73:1d:4c:50:d0:18:6a:d9:a9:2f:d0:e2:6c:20:c9:1d: 7e:b2:46:9b:ee:57:b2:22:2e:4e:bd:91:b6:f4:d0:d8:d8:42: 23:27:f9:9f:30:d2:fe:a5:33:c9:f6:ae:92:86:ce:d9:95:aa: eb:8b:d7:e8:49:08:cb:43:8f:99:6a:38:9d:0a:0f:26:61:fa: df:1c:59:93:e9:ce:bf:a3:27:64:c9:27:1d:e5:52:8e:cb:48: 33:26:2d:11:db:96:b1:09:74:da:4f:2e:81:e9:0c:49:72:95: 3b:88:6e:65:95:6b:63:62:c9:6a:d4:28:37:04:bd:9a:ba:b7: 9c:6e:ab:2c:0d:1d:f8:f1:0e:cf:b1:f2:e2:52:d8:5d:d9:92: 1f:f0:79:72:5e:d5:9f:8d:63:e8:fe:9e:30:64:26:ce:4e:5a: 71:51:77:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2REI3Q0E3QkIwQUVG N0YzRjVDMEEwMTZDMTM3NzkzNkUyNkY0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJrBR9Lh0rMvvIc6PG1Jbo4jBnYktA+3ArouIcHrAzfVXYnaPX FmDhB/tDF304Ce6MR2uU0qhJu8JXtUMDQJpxYP2f+iQwW39KXsjtPqJWNDmKUgU5 /DwlsooXVbQvERbB15eI9vPZ1npTsFR9xXYAjICJaEUPSs2h5fXUzfKHRuuwOCuv WOpArBmf0P2kCwoWETtzkoTw1ueDsThn2xt1wfbzoJ0UF7N2AQMn/VbHEJjXi9Vv +8Bt/HQx+eDiNZ5NLcRVa1oCV5/DXQVQOQqow5szYNqkumkQKiAWwxqFtImWCLe1 Mx63wZOcEo0Pu5gNzmFJQAQXEDRksm+rAhgNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJtt8p7sK738/XAoBbBN3k24m9HQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0p0dDhwN3NLNzM4X1hBb0Ji Qk4zazI0bTlIUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xrAwDQYJKoZIhvcNAQELBQADggEBAD/1ZI8ftF+nLojcrgCtpe+mea1isPiV2ihL XPWBDDX/YoYUj1LWao02wGqrPmStjVSCohZm9i9rPMiIuKgY4S8oErNmrvzNCqJV Heg3n4UEcUV2WAC8F4vcQwGCcx1MUNAYatmpL9DibCDJHX6yRpvuV7IiLk69kbb0 0NjYQiMn+Z8w0v6lM8n2rpKGztmVquuL1+hJCMtDj5lqOJ0KDyZh+t8cWZPpzr+j J2TJJx3lUo7LSDMmLRHblrEJdNpPLoHpDElylTuIbmWVa2NiyWrUKDcEvZq6t5xu qywNHfjxDs+x8uJS2F3Zkh/weXJe1Z+NY+j+njBkJs5OWnFRdxo= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org