$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa File: gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa (raw, json) Hash identifier: DAeK3gge0PAqzEnu0LVy+1tUjRzOHPFg41eP+Mn9wQI= Subject key identifier: 82:D7:79:09:D2:E7:C3:31:03:07:48:DF:07:85:D1:7B:C0:FE:1F:27 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 224E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa Signing time: Mon 26 Aug 2024 05:33:51 +0000 ROA not before: Mon 26 Aug 2024 05:33:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 124.6.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8782 (0x224e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=82D77909D2E7C331030748DF0785D17BC0FE1F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:37:23:25:fc:ad:3d:ca:7a:56:5e:9c:fe:70: e4:dc:c7:d2:2b:09:e3:85:50:52:6f:aa:41:1a:ce: bf:16:21:02:97:4f:d3:23:ac:8c:48:22:a7:0b:f5: 8a:9e:24:68:78:9d:60:13:1d:c4:b7:10:00:1b:9d: 77:f1:41:86:51:90:6a:96:20:f2:92:07:42:72:8a: 3e:a7:31:e4:28:ba:ff:7e:e0:6f:db:19:a1:cb:29: c0:6e:aa:72:c0:5e:46:63:de:ea:a3:04:e7:69:56: c8:3f:e6:82:1e:b9:f6:41:bc:1a:ef:1f:ab:4d:66: 44:49:47:46:4d:c9:3e:45:09:d9:4c:99:5b:96:db: 0d:60:5a:af:38:8f:21:2d:87:2d:fc:62:18:55:e3: a5:c3:79:1d:38:ed:40:5c:0f:8c:f5:65:80:3f:55: 42:d7:d2:f5:99:aa:dd:c4:87:a4:7b:8e:44:7f:31: 9a:97:1e:21:1a:1b:4f:32:48:fe:1f:1d:3a:e4:15: b9:6a:e5:af:94:50:3e:6b:37:ad:01:9e:dd:97:03: 4f:cc:e6:49:56:4b:69:88:4d:93:0c:26:07:8f:91: a9:ae:51:8f:bb:b2:95:fa:b3:4a:b3:84:37:e8:4c: 3d:ea:8c:86:ce:49:d0:2d:70:a2:6c:c3:f0:82:fa: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D7:79:09:D2:E7:C3:31:03:07:48:DF:07:85:D1:7B:C0:FE:1F:27 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.28.0/22 Signature Algorithm: sha256WithRSAEncryption 29:a1:52:40:fe:6c:5b:b5:e7:a1:de:1d:73:59:3a:10:e4:ad: b5:d6:51:58:61:4a:43:eb:d3:ac:a9:4a:c1:20:84:29:c3:88: d1:4f:2a:60:25:a2:9c:61:95:a7:01:28:61:3f:9a:37:36:df: 8d:a0:43:a3:b7:b1:b6:fd:78:74:2c:2c:f0:69:ba:d4:ae:0c: b2:a7:c4:d6:42:a0:2c:a0:cd:33:2f:b7:2b:78:39:67:97:4a: 68:e2:2f:a4:bb:25:25:23:b0:26:cb:51:21:44:26:88:dd:d0: 4a:5b:a6:bb:62:07:2b:e6:66:4e:7b:d5:f1:7e:27:d8:4f:34: a1:5b:fd:07:1a:43:d4:5c:94:cd:1c:2e:dd:68:88:80:08:3e: 72:ba:df:19:c7:db:06:da:e5:cb:e0:90:cf:e9:d4:70:01:99: 5f:ef:fd:84:bf:b5:9b:41:e4:ee:49:84:b9:55:b4:92:a2:6f: 77:d3:75:7c:7b:5c:49:db:20:45:40:f3:be:85:f6:dc:0b:3d: c8:70:ac:2d:77:2a:d9:99:93:1b:54:a1:c8:9e:45:c3:e2:95: d2:ed:03:4d:76:69:be:f0:dd:0a:59:e9:99:42:c5:4f:9e:5d: c4:ce:63:3c:a3:98:b7:2b:b9:d0:42:5c:7e:5a:6f:48:41:49: 5f:00:a5:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgyRDc3OTA5RDJFN0Mz MzEwMzA3NDhERjA3ODVEMTdCQzBGRTFGMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaNyMl/K09ynpWXpz+cOTcx9IrCeOFUFJvqkEazr8WIQKXT9Mj rIxIIqcL9YqeJGh4nWATHcS3EAAbnXfxQYZRkGqWIPKSB0Jyij6nMeQouv9+4G/b GaHLKcBuqnLAXkZj3uqjBOdpVsg/5oIeufZBvBrvH6tNZkRJR0ZNyT5FCdlMmVuW 2w1gWq84jyEthy38YhhV46XDeR047UBcD4z1ZYA/VULX0vWZqt3Eh6R7jkR/MZqX HiEaG08ySP4fHTrkFblq5a+UUD5rN60Bnt2XA0/M5klWS2mITZMMJgePkamuUY+7 spX6s0qzhDfoTD3qjIbOSdAtcKJsw/CC+o0ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgtd5CdLnwzEDB0jfB4XRe8D+HycwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2d0ZDVDZExud3pFREIwamZC NFhSZThELUh5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BhwwDQYJKoZIhvcNAQELBQADggEBACmhUkD+bFu156HeHXNZOhDkrbXWUVhhSkPr 06ypSsEghCnDiNFPKmAlopxhlacBKGE/mjc2342gQ6O3sbb9eHQsLPBputSuDLKn xNZCoCygzTMvtyt4OWeXSmjiL6S7JSUjsCbLUSFEJojd0EpbprtiByvmZk571fF+ J9hPNKFb/QcaQ9RclM0cLt1oiIAIPnK63xnH2wba5cvgkM/p1HABmV/v/YS/tZtB 5O5JhLlVtJKib3fTdXx7XEnbIEVA876F9twLPchwrC13KtmZkxtUocieRcPildLt A012ab7w3QpZ6ZlCxU+eXcTOYzyjmLcrudBCXH5ab0hBSV8ApQc= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org