$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j-1YvNNwKundc7qAR1L5bett-Cs.roa File: j-1YvNNwKundc7qAR1L5bett-Cs.roa (raw, json) Hash identifier: qotB47J1qt9nKXDKQ3l9yvkb7DcXKXlP96BHweupe98= Subject key identifier: 8F:ED:58:BC:D3:70:2A:E9:DD:73:BA:80:47:52:F9:6D:EB:6D:F8:2B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22A0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j-1YvNNwKundc7qAR1L5bett-Cs.roa Signing time: Mon 26 Aug 2024 05:34:12 +0000 ROA not before: Mon 26 Aug 2024 05:34:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 45.64.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8864 (0x22a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8FED58BCD3702AE9DD73BA804752F96DEB6DF82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:d6:0d:92:98:53:8c:50:6d:2d:b6:62:05: cc:d9:58:76:cc:ab:43:a6:38:2a:38:2f:02:2a:4e: 06:ae:78:03:95:a8:a2:f9:52:5f:22:07:56:c5:70: b1:2f:9e:e0:27:43:82:d7:b1:c8:e3:29:2c:b9:00: 7f:ae:f6:30:81:30:c1:f8:c5:fe:29:72:7f:e7:bf: 4c:38:33:73:af:62:5e:2c:95:77:0b:4e:22:d0:6e: e2:32:b8:f8:0a:69:67:32:5e:7e:ab:0f:ec:44:4d: e9:9a:02:0e:e0:ba:ad:e3:4c:6f:9b:c8:d7:6e:ee: ed:c0:89:3a:07:9f:55:62:43:f7:e1:f6:c9:51:b4: f7:d4:b9:84:20:6e:99:3b:0d:02:b5:ba:25:64:a6: 30:26:cf:fd:50:6a:77:46:bd:71:11:3d:aa:85:ac: e5:1a:a6:43:9e:23:b9:8f:b8:57:f7:1c:05:7a:85: b0:c1:76:96:91:78:d4:cb:72:f6:d0:58:70:e0:fa: 62:86:af:03:7e:bf:e0:d5:93:c3:d9:0c:7a:d3:eb: cb:88:5a:2c:95:39:02:67:fc:b0:f9:8f:ae:80:ff: d3:3e:41:b4:da:65:5c:62:6d:cc:a2:ef:ff:e9:5f: 3a:a6:74:42:57:b2:75:3f:d5:80:b1:3c:75:ed:70: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:ED:58:BC:D3:70:2A:E9:DD:73:BA:80:47:52:F9:6D:EB:6D:F8:2B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j-1YvNNwKundc7qAR1L5bett-Cs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.32.0/22 Signature Algorithm: sha256WithRSAEncryption 79:22:c9:a3:ed:f3:7f:70:14:9c:d3:c0:cd:75:09:0c:2c:3c: 3d:ad:d7:fd:6f:61:0b:41:eb:55:9a:5c:19:84:2e:94:11:3d: 2f:b7:12:78:4f:c7:2c:63:83:59:62:ff:7e:60:38:59:cf:0a: 85:0a:60:ef:f4:1d:2e:97:58:09:e6:96:19:40:6a:03:2e:57: bb:90:6e:b8:fc:ed:6e:26:43:25:3c:1a:5b:58:59:16:07:4f: 65:1a:1e:30:09:6a:fe:32:49:03:7f:c8:de:19:35:cc:f4:20: 36:cf:b7:31:45:b2:85:04:3f:fa:89:2f:38:7a:d3:da:8c:06: 94:32:56:9c:d1:d7:39:8e:a1:ec:5b:2d:84:0d:79:78:38:e2: 6e:96:0b:56:91:93:77:60:13:67:ea:ea:a4:2c:f0:38:58:68: 69:04:ad:34:10:27:82:0a:2e:3c:6c:61:5b:fa:36:94:66:1f: 8a:8c:ab:19:cb:10:32:0c:88:22:79:68:71:e9:b1:fa:55:dc: 52:f8:54:31:22:0d:e2:f7:7a:fc:d6:6a:29:0d:d3:43:8d:f1: be:87:de:63:18:81:dd:15:bb:3b:e7:af:df:c4:ee:22:06:8c: 96:2a:b5:22:78:9f:73:2e:ff:2e:db:be:cd:66:96:43:96:79: e0:d6:0f:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGRUQ1OEJDRDM3MDJB RTlERDczQkE4MDQ3NTJGOTZERUI2REY4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIJtYNkphTjFBtLbZiBczZWHbMq0OmOCo4LwIqTgaueAOVqKL5 Ul8iB1bFcLEvnuAnQ4LXscjjKSy5AH+u9jCBMMH4xf4pcn/nv0w4M3OvYl4slXcL TiLQbuIyuPgKaWcyXn6rD+xETemaAg7guq3jTG+byNdu7u3AiToHn1ViQ/fh9slR tPfUuYQgbpk7DQK1uiVkpjAmz/1QandGvXERPaqFrOUapkOeI7mPuFf3HAV6hbDB dpaReNTLcvbQWHDg+mKGrwN+v+DVk8PZDHrT68uIWiyVOQJn/LD5j66A/9M+QbTa ZVxibcyi7//pXzqmdEJXsnU/1YCxPHXtcO0JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUj+1YvNNwKundc7qAR1L5bett+CswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2otMVl2Tk53S3VuZGM3cUFS MUw1YmV0dC1Dcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt QCAwDQYJKoZIhvcNAQELBQADggEBAHkiyaPt839wFJzTwM11CQwsPD2t1/1vYQtB 61WaXBmELpQRPS+3EnhPxyxjg1li/35gOFnPCoUKYO/0HS6XWAnmlhlAagMuV7uQ brj87W4mQyU8GltYWRYHT2UaHjAJav4ySQN/yN4ZNcz0IDbPtzFFsoUEP/qJLzh6 09qMBpQyVpzR1zmOoexbLYQNeXg44m6WC1aRk3dgE2fq6qQs8DhYaGkErTQQJ4IK LjxsYVv6NpRmH4qMqxnLEDIMiCJ5aHHpsfpV3FL4VDEiDeL3evzWaikN00ON8b6H 3mMYgd0Vuzvnr9/E7iIGjJYqtSJ4n3Mu/y7bvs1mlkOWeeDWD0o= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:26 2024 by rpki-client on console-ams.rpki-client.org