$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa File: KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa (raw, json) Hash identifier: nHATse+8oBAHkVH+JU7edr5p3/Gjtlvf+NP3jYHNmLc= Subject key identifier: 2A:A7:40:20:6B:7E:37:EC:4B:B0:87:91:D0:8E:EC:6D:BB:74:67:92 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 226B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa Signing time: Mon 26 Aug 2024 05:33:59 +0000 ROA not before: Mon 26 Aug 2024 05:33:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.254.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8811 (0x226b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2AA740206B7E37EC4BB08791D08EEC6DBB746792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:29:3d:c0:ac:ee:fe:1f:37:8f:91:8e:0f: cb:e6:8c:4c:8e:7c:cd:9d:21:ac:ed:1a:5d:f1:aa: f4:63:1a:47:7c:bc:7e:77:84:32:02:84:16:db:aa: 1c:52:b3:05:56:69:4d:af:ff:1f:8f:ca:09:e2:4a: fa:08:01:32:88:37:25:dd:a1:45:8a:63:25:63:f9: 6f:b8:9c:c9:7f:85:2e:55:b8:ea:93:0a:d5:71:86: 16:a0:20:8b:43:a0:c3:be:52:8e:44:57:60:fd:17: 36:9a:9c:63:65:bc:f7:4f:70:8f:f1:c3:9a:94:67: c2:09:52:ed:5a:6f:d7:b3:c7:1a:a9:25:c2:ae:6e: 8d:a1:49:13:80:66:76:eb:db:83:0a:fc:c1:69:22: 4d:9c:f1:38:f2:17:17:51:0e:6c:92:01:e1:ff:4a: 82:0d:1d:c2:27:8f:6c:8f:11:0a:00:5b:18:f1:3f: 93:68:88:0a:e6:bd:d6:ea:2c:78:88:60:3c:dd:89: 25:23:cd:f2:a8:0d:3b:a2:b8:60:40:c7:85:52:b9: d7:29:47:b5:dd:da:92:37:32:c7:30:94:48:9f:8f: 5e:60:f3:db:07:51:4b:17:22:b2:63:9c:36:4c:8e: ee:13:19:fd:d5:b5:57:36:82:7c:1c:84:0d:85:b8: 48:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A7:40:20:6B:7E:37:EC:4B:B0:87:91:D0:8E:EC:6D:BB:74:67:92 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.40.0/21 Signature Algorithm: sha256WithRSAEncryption 84:c3:14:0c:3d:2d:01:ec:ce:74:20:7f:ef:1f:92:ab:2f:a6: 01:9e:cf:0b:87:49:0e:ec:8e:f7:4a:25:23:11:14:a1:b9:2b: b7:3c:e3:bc:37:42:69:b3:51:3c:5c:2d:cb:12:bc:65:38:06: 82:43:62:f5:ad:02:92:df:94:2a:f8:8e:12:08:27:8d:59:36: a2:ea:c6:88:19:da:6f:95:99:00:0f:44:a7:49:b6:db:17:7c: 21:28:da:b4:a3:65:90:e9:d5:17:28:50:a0:46:d4:41:1a:6d: aa:0c:fd:a8:19:b7:f8:09:ff:68:6c:e7:06:f2:5e:33:9d:ff: 86:36:d0:c2:33:a2:4e:4c:2a:c9:b1:aa:d0:ca:12:af:03:91: da:11:83:b6:68:fe:8c:4d:02:0c:74:cb:e4:31:5b:60:31:56: 10:2a:1a:bf:22:48:36:ef:2e:35:33:ca:bb:ba:0d:64:07:f6: 97:5d:87:83:d2:53:e1:a4:6e:f2:c1:30:7b:0e:cd:cd:1b:f2: 7b:af:2c:b9:2b:7c:93:e3:1c:d2:5a:a8:b6:02:d4:a1:62:a0: 02:db:9e:62:e6:e2:8f:a8:08:f9:9e:8a:4c:3f:20:f9:f0:4f: 6c:bc:38:b9:17:82:61:21:d8:7f:de:57:54:38:c1:fb:20:c5: 9c:2f:a4:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICImswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBQTc0MDIwNkI3RTM3 RUM0QkIwODc5MUQwOEVFQzZEQkI3NDY3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4Hyk9wKzu/h83j5GOD8vmjEyOfM2dIaztGl3xqvRjGkd8vH53 hDIChBbbqhxSswVWaU2v/x+PygniSvoIATKINyXdoUWKYyVj+W+4nMl/hS5VuOqT CtVxhhagIItDoMO+Uo5EV2D9FzaanGNlvPdPcI/xw5qUZ8IJUu1ab9ezxxqpJcKu bo2hSROAZnbr24MK/MFpIk2c8TjyFxdRDmySAeH/SoINHcInj2yPEQoAWxjxP5No iArmvdbqLHiIYDzdiSUjzfKoDTuiuGBAx4VSudcpR7Xd2pI3MscwlEifj15g89sH UUsXIrJjnDZMju4TGf3VtVc2gnwchA2FuEgNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKqdAIGt+N+xLsIeR0I7sbbt0Z5IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0txZEFJR3QtTi14THNJZVIw STdzYmJ0MFo1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /igwDQYJKoZIhvcNAQELBQADggEBAITDFAw9LQHsznQgf+8fkqsvpgGezwuHSQ7s jvdKJSMRFKG5K7c847w3QmmzUTxcLcsSvGU4BoJDYvWtApLflCr4jhIIJ41ZNqLq xogZ2m+VmQAPRKdJttsXfCEo2rSjZZDp1RcoUKBG1EEabaoM/agZt/gJ/2hs5wby XjOd/4Y20MIzok5MKsmxqtDKEq8DkdoRg7Zo/oxNAgx0y+QxW2AxVhAqGr8iSDbv LjUzyru6DWQH9pddh4PSU+GkbvLBMHsOzc0b8nuvLLkrfJPjHNJaqLYC1KFioALb nmLm4o+oCPmeikw/IPnwT2y8OLkXgmEh2H/eV1Q4wfsgxZwvpDg= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org