$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oMZv5ehcQ5SEZ2kCi8LXRkqYtqM.roa File: oMZv5ehcQ5SEZ2kCi8LXRkqYtqM.roa (raw, json) Hash identifier: ECH1io8HiH5tn31QqUAmLHVjOXJFXIoU+LvKnRvdVs4= Subject key identifier: A0:C6:6F:E5:E8:5C:43:94:84:67:69:02:8B:C2:D7:46:4A:98:B6:A3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 228D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oMZv5ehcQ5SEZ2kCi8LXRkqYtqM.roa Signing time: Mon 26 Aug 2024 05:34:08 +0000 ROA not before: Mon 26 Aug 2024 05:34:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 61.64.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8845 (0x228d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0C66FE5E85C4394846769028BC2D7464A98B6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:7d:a8:10:44:1c:6e:68:29:d9:cb:56:0e: 0d:fe:fc:5a:7f:a1:1b:2e:0c:02:21:dc:eb:c2:a4: 47:5c:d5:7c:84:ef:40:42:37:d5:05:05:91:dc:d5: 0e:fc:5d:e5:51:21:20:f3:90:43:12:2c:04:33:61: c3:57:10:32:dd:b1:32:ee:87:e3:93:df:9d:bb:a0: 95:35:e1:53:4e:9a:f7:50:ec:ef:9a:2f:01:71:f0: 16:cc:22:a8:ff:87:0c:01:86:28:dc:26:4d:1c:05: 1d:6b:dd:6b:f2:03:02:ce:04:0d:3e:1f:7d:b7:5a: 65:00:d4:41:c5:e7:9a:61:45:1a:8f:37:81:fe:65: 5c:62:b1:14:e5:41:84:2c:5a:5b:9f:68:94:8b:3c: 32:ae:43:b8:38:02:ab:f3:9c:c2:9e:a3:ee:c3:23: c7:09:57:6e:49:35:0a:a2:19:63:ee:d1:ab:8f:c3: 02:76:3f:63:7a:50:f7:fb:ba:69:f0:d1:f5:c4:a3: 31:18:aa:99:8a:4f:a5:60:6a:c0:70:36:4e:99:12: 52:b8:54:f0:38:b7:11:35:36:2e:82:25:85:90:5f: d5:6d:b8:3d:4d:30:8f:bd:cc:b3:3c:d8:81:58:cc: 2d:59:1e:6d:9a:b1:53:96:27:d3:85:47:54:00:a0: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C6:6F:E5:E8:5C:43:94:84:67:69:02:8B:C2:D7:46:4A:98:B6:A3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oMZv5ehcQ5SEZ2kCi8LXRkqYtqM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.8.0/22 Signature Algorithm: sha256WithRSAEncryption 19:2c:39:b9:7c:9c:62:f8:12:3f:85:8c:28:b5:1d:9c:d1:15: 91:45:5f:11:e7:55:ce:e6:f6:38:db:f3:4a:cb:3a:c0:4d:8c: d6:73:a7:b1:91:d7:90:c5:a6:fc:cf:e9:a4:d7:d5:7a:ef:f2: 11:c6:90:3a:af:d2:06:10:e6:67:1c:8f:03:79:77:ec:1a:4f: 81:17:78:17:69:c7:f1:1f:18:84:2e:ae:04:f6:c6:58:ea:69: 3b:6e:17:d0:61:2b:f2:71:da:7a:88:e4:2f:cf:3f:91:2c:2c: 05:56:0e:d3:bd:37:18:fb:18:dc:b6:4b:d5:ee:13:bf:1b:7a: 29:f9:1c:98:bb:d8:25:6b:16:1e:cc:94:a8:3e:f4:18:39:cd: d2:f1:5e:a2:34:f3:ed:c2:22:26:de:5a:19:8a:af:1e:2a:f8: b4:7f:41:dc:3e:37:1c:56:ae:b6:9e:1d:58:79:33:43:99:80: 9c:8d:ad:b1:95:57:03:b1:e3:12:b8:17:4d:e9:a8:76:2b:c3: 06:a1:7b:b4:60:89:81:77:6c:17:c8:27:7f:48:02:47:11:d3: 09:37:c6:4e:13:67:6d:8f:bc:8e:88:1b:73:3a:64:c1:d1:89: 23:26:44:e0:2c:8f:db:ff:f3:c8:95:99:a8:55:53:84:4c:2e: 72:d1:14:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwQzY2RkU1RTg1QzQz OTQ4NDY3NjkwMjhCQzJENzQ2NEE5OEI2QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAhX2oEEQcbmgp2ctWDg3+/Fp/oRsuDAIh3OvCpEdc1XyE70BC N9UFBZHc1Q78XeVRISDzkEMSLAQzYcNXEDLdsTLuh+OT3527oJU14VNOmvdQ7O+a LwFx8BbMIqj/hwwBhijcJk0cBR1r3WvyAwLOBA0+H323WmUA1EHF55phRRqPN4H+ ZVxisRTlQYQsWlufaJSLPDKuQ7g4AqvznMKeo+7DI8cJV25JNQqiGWPu0auPwwJ2 P2N6UPf7umnw0fXEozEYqpmKT6VgasBwNk6ZElK4VPA4txE1Ni6CJYWQX9VtuD1N MI+9zLM82IFYzC1ZHm2asVOWJ9OFR1QAoDqVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoMZv5ehcQ5SEZ2kCi8LXRkqYtqMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29NWnY1ZWhjUTVTRVoya0Np OExYUmtxWXRxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QAgwDQYJKoZIhvcNAQELBQADggEBABksObl8nGL4Ej+FjCi1HZzRFZFFXxHnVc7m 9jjb80rLOsBNjNZzp7GR15DFpvzP6aTX1Xrv8hHGkDqv0gYQ5mccjwN5d+waT4EX eBdpx/EfGIQurgT2xljqaTtuF9BhK/Jx2nqI5C/PP5EsLAVWDtO9Nxj7GNy2S9Xu E78bein5HJi72CVrFh7MlKg+9Bg5zdLxXqI08+3CIibeWhmKrx4q+LR/Qdw+NxxW rraeHVh5M0OZgJyNrbGVVwOx4xK4F03pqHYrwwahe7RgiYF3bBfIJ39IAkcR0wk3 xk4TZ22PvI6IG3M6ZMHRiSMmROAsj9v/88iVmahVU4RMLnLRFIg= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:26 2024 by rpki-client on console-ams.rpki-client.org