$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QtcAeoXiNbXIiCKBAHlERpRsIuE.roa File: QtcAeoXiNbXIiCKBAHlERpRsIuE.roa (raw, json) Hash identifier: IPwKUssV3wAEkCm0gvH5XsJsi2DkbIELz9b0PUV/Y9E= Subject key identifier: 42:D7:00:7A:85:E2:35:B5:C8:88:22:81:00:79:44:46:94:6C:22:E1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 220A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QtcAeoXiNbXIiCKBAHlERpRsIuE.roa Signing time: Mon 26 Aug 2024 05:33:36 +0000 ROA not before: Mon 26 Aug 2024 05:33:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.100.88.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8714 (0x220a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=42D7007A85E235B5C888228100794446946C22E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:46:04:3e:11:32:60:a1:cf:c6:c3:f4:cc: 73:b4:6f:47:61:db:2d:aa:38:54:58:38:02:aa:22: 82:cf:13:c8:38:45:c9:e9:e5:dd:07:19:49:15:43: 00:63:a5:f2:69:23:77:49:38:1f:91:42:dc:2c:21: 64:40:91:c2:7c:0b:0b:31:c1:b6:77:0d:25:9a:ac: 3c:52:8c:4e:97:09:d4:a8:a4:89:79:a7:33:44:87: 2a:1a:38:db:ab:fd:04:50:6a:e2:0b:c6:15:9a:fc: 44:c8:ea:b7:24:c3:af:1c:f9:c0:0f:10:cc:d8:7b: fb:0e:68:9b:92:f0:aa:8d:04:4f:ab:ba:04:26:ad: ce:18:f9:36:cd:ce:8f:da:23:ed:1e:1f:5b:0d:8b: ad:08:2a:11:82:05:09:25:1d:ed:98:91:ca:43:ea: 76:41:ab:75:30:cb:8d:e7:f8:81:d6:41:08:33:d7: 64:96:69:5b:33:24:bb:d1:b8:73:a4:5d:82:6f:8e: 93:34:16:e2:81:76:55:7e:18:de:1f:6f:f1:2f:e2: 30:69:a7:f8:38:1b:0c:3f:9f:de:45:57:db:96:db: 26:4a:bb:90:a0:29:dd:1e:5f:72:9d:d8:86:d8:f8: 98:4a:5d:4b:9e:a6:45:4c:db:16:2e:9f:ab:f3:b6: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:00:7A:85:E2:35:B5:C8:88:22:81:00:79:44:46:94:6C:22:E1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QtcAeoXiNbXIiCKBAHlERpRsIuE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.88.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:6b:64:55:c4:c5:52:28:f5:35:28:d6:9d:0e:85:78:00:dc: 8c:45:d3:ed:3e:32:77:d8:bd:65:87:de:fb:42:e5:a3:bf:2f: 18:2b:51:72:96:55:7d:ac:8a:fe:45:d5:db:f5:60:e1:48:48: a4:7c:f1:cf:70:9b:0f:84:90:c8:03:45:92:8e:ce:64:d0:e1: b4:91:38:b1:97:76:3f:57:23:70:09:14:ff:bd:ed:e5:d1:e5: a7:59:0a:df:81:78:3f:f8:dc:81:9f:1f:23:57:93:4c:d0:8a: 00:ec:62:fa:52:06:2c:09:cb:e4:f1:91:73:b6:10:d7:b6:3c: 9d:0f:0f:32:26:16:7e:fa:65:01:89:cb:00:c4:59:3b:8b:fe: 63:68:63:1f:e2:04:32:08:da:29:e3:75:5d:c2:9a:77:ad:79: e9:93:69:83:4e:ac:58:a6:41:c7:d9:69:f6:0b:ef:7d:86:e6: 21:24:7b:c5:a8:87:20:4b:63:00:35:bb:d0:b1:f1:a3:72:9d: cf:b3:73:fd:3e:95:a0:1f:96:52:68:29:14:cf:2e:3b:82:ca: 61:ad:a3:8d:77:44:15:80:cb:e0:42:bb:fb:9d:9c:8c:dd:cb: 5e:11:57:27:ba:dd:26:68:e1:a6:d3:b7:ab:ae:43:c7:41:2e: bc:3e:7f:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyRDcwMDdBODVFMjM1 QjVDODg4MjI4MTAwNzk0NDQ2OTQ2QzIyRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVCEYEPhEyYKHPxsP0zHO0b0dh2y2qOFRYOAKqIoLPE8g4Rcnp 5d0HGUkVQwBjpfJpI3dJOB+RQtwsIWRAkcJ8CwsxwbZ3DSWarDxSjE6XCdSopIl5 pzNEhyoaONur/QRQauILxhWa/ETI6rckw68c+cAPEMzYe/sOaJuS8KqNBE+rugQm rc4Y+TbNzo/aI+0eH1sNi60IKhGCBQklHe2YkcpD6nZBq3Uwy43n+IHWQQgz12SW aVszJLvRuHOkXYJvjpM0FuKBdlV+GN4fb/Ev4jBpp/g4Gww/n95FV9uW2yZKu5Cg Kd0eX3Kd2IbY+JhKXUuepkVM2xYun6vztvc/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQtcAeoXiNbXIiCKBAHlERpRsIuEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1F0Y0Flb1hpTmJYSWlDS0JB SGxFUnBSc0l1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 ZFgwDQYJKoZIhvcNAQELBQADggEBAD1rZFXExVIo9TUo1p0OhXgA3IxF0+0+MnfY vWWH3vtC5aO/LxgrUXKWVX2siv5F1dv1YOFISKR88c9wmw+EkMgDRZKOzmTQ4bSR OLGXdj9XI3AJFP+97eXR5adZCt+BeD/43IGfHyNXk0zQigDsYvpSBiwJy+TxkXO2 ENe2PJ0PDzImFn76ZQGJywDEWTuL/mNoYx/iBDII2injdV3CmneteemTaYNOrFim QcfZafYL732G5iEke8WohyBLYwA1u9Cx8aNync+zc/0+laAfllJoKRTPLjuCymGt o413RBWAy+BCu/udnIzdy14RVye63SZo4abTt6uuQ8dBLrw+f88= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org