$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa File: ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa (raw, json) Hash identifier: mh5Nq9O0SWacxQRzrBWn6gNksvlA4JedvsTdllQhb+U= Subject key identifier: 39:B1:BA:31:80:92:8C:8B:8A:0B:67:F3:A8:19:8C:CD:97:2C:9A:96 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2237 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa Signing time: Mon 26 Aug 2024 05:33:47 +0000 ROA not before: Mon 26 Aug 2024 05:33:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 124.6.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8759 (0x2237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39B1BA3180928C8B8A0B67F3A8198CCD972C9A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:b5:89:13:ea:f8:7d:e7:c1:96:35:5e:94: 88:d2:aa:69:d9:39:03:ff:75:9c:6f:4d:8c:cf:09: c4:1e:fc:f7:c3:af:a8:d8:f5:a7:d0:88:e4:b9:a6: ea:de:db:71:a3:5a:c3:d1:90:bf:99:af:3c:1b:c9: 31:5a:ba:a8:34:24:6e:b3:3c:94:96:79:f9:e8:8e: f7:89:a0:f8:7b:38:b1:90:0e:95:01:6d:45:62:97: 49:7d:66:b3:9a:4d:04:c2:b2:22:19:ff:6c:d8:0c: cf:31:96:c1:95:2d:b3:91:b4:9e:8d:56:ba:3f:f2: 9f:e3:99:19:29:92:58:24:fc:1f:df:58:e5:5a:10: 8a:14:c8:10:64:d0:06:d3:fd:8b:12:bb:5d:a7:72: 78:f2:56:07:73:42:c4:44:28:76:bb:92:05:88:3b: 18:68:07:08:e2:33:b3:3b:8b:91:43:3a:d3:5d:0f: 12:ba:0d:01:71:c6:96:d2:b6:82:32:e8:51:55:78: 4b:9d:57:32:1e:8a:4b:7e:43:14:11:be:af:9b:42: 84:5e:13:71:7b:35:eb:80:ee:35:38:82:3d:9b:93: e7:2e:5e:f2:03:85:58:7f:8c:9b:9d:bc:11:5c:e5: 6c:c3:c2:ba:cf:ea:4e:4c:a4:f2:95:52:3d:49:8b: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:BA:31:80:92:8C:8B:8A:0B:67:F3:A8:19:8C:CD:97:2C:9A:96 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.16.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:d4:f2:25:ec:6f:d5:86:24:26:ff:f1:6a:4e:8f:ce:12:ed: c3:b0:c6:ea:e4:31:6c:0a:05:70:3c:ee:0f:77:56:25:7c:02: b2:2e:59:b9:f4:af:64:34:80:55:3f:09:ab:e5:75:e8:d3:e0: 73:ed:65:bb:21:8a:f8:27:9b:58:ac:99:8f:0f:4a:be:8a:0b: b7:29:c8:16:30:1d:d6:f7:f5:17:34:10:0c:a3:24:dc:6a:0b: 2b:26:29:1e:d5:9c:e0:31:74:b9:e1:bb:bc:e4:75:87:e6:09: 60:7a:43:7c:0f:02:c6:11:e2:62:61:43:f7:db:db:66:b9:96: d7:23:27:01:0a:f7:b8:a6:e6:46:db:30:ed:90:49:41:5b:90: 19:ad:de:87:7f:88:15:d7:fb:a8:8a:dc:55:49:c7:df:e0:69: 43:57:8a:f5:ec:31:d0:bf:ca:d7:92:52:40:c1:86:12:74:22: de:76:87:f6:af:32:d0:55:16:5b:41:67:f1:41:7f:78:95:e3: bd:2f:2c:63:5e:0f:1f:ce:37:07:81:6a:40:17:00:09:a0:11: 0a:c1:d6:e1:d5:cf:ce:fc:f6:7a:06:02:3e:7e:6a:b3:a0:c8: 4a:38:8e:b2:0a:0c:76:b6:99:44:f5:ac:cb:c3:29:fe:49:c1: 7a:6f:4d:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5QjFCQTMxODA5MjhD OEI4QTBCNjdGM0E4MTk4Q0NEOTcyQzlBOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7SbWJE+r4fefBljVelIjSqmnZOQP/dZxvTYzPCcQe/PfDr6jY 9afQiOS5pure23GjWsPRkL+ZrzwbyTFauqg0JG6zPJSWefnojveJoPh7OLGQDpUB bUVil0l9ZrOaTQTCsiIZ/2zYDM8xlsGVLbORtJ6NVro/8p/jmRkpklgk/B/fWOVa EIoUyBBk0AbT/YsSu12ncnjyVgdzQsREKHa7kgWIOxhoBwjiM7M7i5FDOtNdDxK6 DQFxxpbStoIy6FFVeEudVzIeikt+QxQRvq+bQoReE3F7NeuA7jU4gj2bk+cuXvID hVh/jJudvBFc5WzDwrrP6k5MpPKVUj1Ji4/zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUObG6MYCSjIuKC2fzqBmMzZcsmpYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09iRzZNWUNTakl1S0MyZnpx Qm1Nelpjc21wWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BhAwDQYJKoZIhvcNAQELBQADggEBAF/U8iXsb9WGJCb/8WpOj84S7cOwxurkMWwK BXA87g93ViV8ArIuWbn0r2Q0gFU/CavldejT4HPtZbshivgnm1ismY8PSr6KC7cp yBYwHdb39Rc0EAyjJNxqCysmKR7VnOAxdLnhu7zkdYfmCWB6Q3wPAsYR4mJhQ/fb 22a5ltcjJwEK97im5kbbMO2QSUFbkBmt3od/iBXX+6iK3FVJx9/gaUNXivXsMdC/ yteSUkDBhhJ0It52h/avMtBVFltBZ/FBf3iV470vLGNeDx/ONweBakAXAAmgEQrB 1uHVz8789noGAj5+arOgyEo4jrIKDHa2mUT1rMvDKf5JwXpvTZ4= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:55 2024 by rpki-client on console-fra.rpki-client.org