$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Tj1Vgj6PW4pHIlF0d4A_OPTakvE.roa File: Tj1Vgj6PW4pHIlF0d4A_OPTakvE.roa (raw, json) Hash identifier: SmPslu2xbLKNBmbSxDaxPkCGf6srnK/RAnRsyu0ChUk= Subject key identifier: 4E:3D:55:82:3E:8F:5B:8A:47:22:51:74:77:80:3F:38:F4:DA:92:F1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21D0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Tj1Vgj6PW4pHIlF0d4A_OPTakvE.roa Signing time: Mon 26 Aug 2024 05:33:22 +0000 ROA not before: Mon 26 Aug 2024 05:33:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 123.0.48.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8656 (0x21d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4E3D55823E8F5B8A4722517477803F38F4DA92F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:24:60:a0:63:0b:71:a7:b0:f4:91:08:ec: 0b:e7:e7:a6:e8:65:40:0a:44:db:59:8e:1a:7d:3e: 83:01:61:ce:79:6f:69:d7:16:ca:cf:ed:e6:b0:ea: 48:61:61:1c:31:74:f0:7f:d9:d1:6d:82:dd:1b:80: 23:36:ba:61:74:fb:6b:4a:04:64:31:91:b3:48:10: ca:22:d8:30:22:0f:d7:f3:d0:64:a9:98:4d:be:6d: 98:d8:d5:60:74:2d:76:1a:06:47:ef:f4:f9:20:b6: 26:62:a9:c2:39:5a:25:4b:30:78:33:77:62:09:5e: 80:ea:5e:99:77:a8:45:f1:02:7c:fa:c2:ea:76:1e: f6:e5:e8:55:c5:84:50:9a:d6:57:cb:ad:52:fe:4d: 6c:70:5f:45:63:c7:6d:e5:94:d9:c9:ba:ce:28:47: e1:32:f6:05:96:d7:3a:2c:fc:cb:7b:05:ad:7c:42: 53:d1:a8:de:e5:16:3d:db:5d:5d:73:d1:92:a2:bc: 62:33:bc:1f:0a:d2:0d:eb:39:1f:d9:f5:47:f3:ce: d8:01:f1:46:14:60:87:34:92:90:6a:2f:50:8c:0a: 26:1f:1b:22:f8:99:c6:91:b7:68:9d:f0:05:a5:67: 2d:0f:5e:28:7a:ce:d8:b5:40:b4:af:32:86:75:51: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3D:55:82:3E:8F:5B:8A:47:22:51:74:77:80:3F:38:F4:DA:92:F1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Tj1Vgj6PW4pHIlF0d4A_OPTakvE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.48.0/20 Signature Algorithm: sha256WithRSAEncryption 50:5e:47:00:3b:7a:29:f8:a0:ae:1d:78:c9:9b:ca:4b:77:40: de:17:e7:5e:44:59:fb:3b:4a:10:2a:21:57:96:ae:af:e5:cc: df:6a:15:37:41:1e:e8:a5:dd:f3:f6:94:d1:48:59:bf:69:8d: 6c:75:f6:2a:03:c9:54:9d:e4:9c:a7:db:94:b5:53:f7:b2:c9: 30:e7:ce:2d:70:ac:82:f2:63:0a:a1:1d:dd:23:09:72:47:e0: 19:94:8f:79:19:8b:2b:9f:7e:b8:25:3c:b6:c3:f7:99:10:b3: e2:5d:50:9f:e7:40:01:c3:e1:b5:5e:f6:e5:a0:8a:e8:04:b2: 26:09:3c:2b:63:c1:e9:cc:36:19:29:27:f7:09:7a:35:64:84: 27:94:b2:c2:b8:2d:76:bc:c3:82:aa:28:2f:55:f3:a3:ae:97: 2a:d5:9e:c1:c8:63:08:dc:1a:2a:e0:36:23:40:8f:b0:26:24: 08:b0:e3:5a:82:83:1d:60:26:9f:c7:c7:0c:1e:e0:a2:2a:0c: e8:af:b0:61:ed:d5:c8:bf:69:2f:3a:03:8f:74:96:ff:5c:21: 96:64:3f:af:8b:bc:59:61:b2:6d:94:7d:8d:74:83:aa:67:d3: 3e:d9:69:47:59:7b:68:09:a5:80:ce:8c:6a:e9:0a:e5:fe:c3: 39:45:ab:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFM0Q1NTgyM0U4RjVC OEE0NzIyNTE3NDc3ODAzRjM4RjREQTkyRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyySRgoGMLcaew9JEI7Avn56boZUAKRNtZjhp9PoMBYc55b2nX FsrP7eaw6khhYRwxdPB/2dFtgt0bgCM2umF0+2tKBGQxkbNIEMoi2DAiD9fz0GSp mE2+bZjY1WB0LXYaBkfv9PkgtiZiqcI5WiVLMHgzd2IJXoDqXpl3qEXxAnz6wup2 Hvbl6FXFhFCa1lfLrVL+TWxwX0Vjx23llNnJus4oR+Ey9gWW1zos/Mt7Ba18QlPR qN7lFj3bXV1z0ZKivGIzvB8K0g3rOR/Z9UfzztgB8UYUYIc0kpBqL1CMCiYfGyL4 mcaRt2id8AWlZy0PXih6zti1QLSvMoZ1UV2NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTj1Vgj6PW4pHIlF0d4A/OPTakvEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RqMVZnajZQVzRwSElsRjBk NEFfT1BUYWt2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 ADAwDQYJKoZIhvcNAQELBQADggEBAFBeRwA7ein4oK4deMmbykt3QN4X515EWfs7 ShAqIVeWrq/lzN9qFTdBHuil3fP2lNFIWb9pjWx19ioDyVSd5Jyn25S1U/eyyTDn zi1wrILyYwqhHd0jCXJH4BmUj3kZiyuffrglPLbD95kQs+JdUJ/nQAHD4bVe9uWg iugEsiYJPCtjwenMNhkpJ/cJejVkhCeUssK4LXa8w4KqKC9V86OulyrVnsHIYwjc GirgNiNAj7AmJAiw41qCgx1gJp/Hxwwe4KIqDOivsGHt1ci/aS86A490lv9cIZZk P6+LvFlhsm2UfY10g6pn0z7ZaUdZe2gJpYDOjGrpCuX+wzlFq+I= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org