$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzoOUWhdHTUsOS8-Gzc3VEk0tLU.roa File: qzoOUWhdHTUsOS8-Gzc3VEk0tLU.roa (raw, json) Hash identifier: jj7KIt1AVkMH9NBShFkQUJERtbToQWqH3gaQgwOY5Qs= Subject key identifier: AB:3A:0E:51:68:5D:1D:35:2C:39:2F:3E:1B:37:37:54:49:34:B4:B5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 229A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzoOUWhdHTUsOS8-Gzc3VEk0tLU.roa Signing time: Mon 26 Aug 2024 05:34:10 +0000 ROA not before: Mon 26 Aug 2024 05:34:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 211.76.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8858 (0x229a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AB3A0E51685D1D352C392F3E1B3737544934B4B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1f:4f:f6:08:0a:52:c8:5e:f0:9d:01:b7:72: a4:1f:30:f1:e0:73:0a:6c:5d:f3:57:ce:92:02:b1: 81:9b:f8:8c:13:ad:c6:74:92:55:31:86:30:5b:aa: 45:cb:f4:88:3b:4b:2e:61:dc:59:ec:f3:37:8b:24: 55:2e:ca:c2:35:9c:e8:1e:a1:c6:bd:6e:7f:77:2b: 2a:05:ba:99:f1:80:2a:ba:56:fd:b6:f9:29:dc:f5: 6f:97:d6:c4:68:ad:1b:83:8b:2e:65:cd:a0:2f:ac: 20:53:ca:e2:79:4c:eb:54:1f:b3:96:8f:c6:be:75: 82:41:c1:69:d5:9e:47:c5:40:68:64:f7:90:18:eb: ea:91:52:d3:fe:03:57:12:63:62:99:a3:33:07:c1: 5b:e1:97:a5:1c:04:49:9e:61:51:86:a0:4b:fe:8d: c2:83:f3:0d:f3:63:69:79:e7:99:6a:17:6c:f0:33: 99:d6:64:33:26:d2:65:89:fc:1f:3e:0a:a5:48:f0: 3b:4f:bf:f1:b7:74:8d:b2:ae:c8:46:fd:63:ab:c1: 16:a2:6e:ce:8c:e5:f8:0a:71:0a:d6:6c:b1:34:95: cf:a5:9e:10:8d:85:0d:03:31:a3:3e:b4:2f:0b:94: ff:b3:22:31:7a:04:0d:96:cd:7f:77:b5:02:2f:a1: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3A:0E:51:68:5D:1D:35:2C:39:2F:3E:1B:37:37:54:49:34:B4:B5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzoOUWhdHTUsOS8-Gzc3VEk0tLU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.64.0/20 Signature Algorithm: sha256WithRSAEncryption 52:d7:9f:eb:91:11:22:37:3d:d6:18:fc:d8:4e:98:fc:93:8d: cf:b0:60:a7:ae:89:68:d4:3f:05:ff:bb:77:f0:16:dd:6e:3b: 51:7b:d6:73:1f:96:50:c9:b4:c5:88:de:1b:43:25:af:ff:c0: 0b:13:0b:61:3f:3b:a5:38:39:a2:7f:b2:f1:cc:4b:35:ba:3b: ec:a3:ab:5a:26:dd:95:c6:ba:31:58:d1:5f:c5:fe:f1:bb:a3: 38:84:05:fb:0b:f9:d3:54:65:30:00:6c:d3:ad:eb:48:3d:24: 66:02:3b:25:d8:4c:3e:2a:e2:e7:10:e3:56:f3:d0:c3:fd:c4: b2:74:f3:14:56:38:bd:4d:dd:70:c5:41:bb:41:04:81:4d:55: 1c:31:ab:c0:de:c7:5c:79:b7:a4:10:e9:aa:41:1b:31:ee:d7: fc:ac:87:a1:57:7d:55:d2:3d:3f:6c:db:58:e7:33:d8:cf:fc: 93:cc:16:a7:89:21:ae:e8:89:17:16:05:2c:77:dc:7f:73:13: bf:e0:be:83:dd:3c:8c:2d:fc:6b:82:4e:7e:d4:d1:59:14:22: 34:fb:32:d4:18:b4:c7:ca:dc:72:79:3f:b1:a2:00:25:29:d2: da:84:24:ae:37:a2:8d:55:56:7b:ac:e0:55:33:03:4c:72:45: 96:ed:22:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCM0EwRTUxNjg1RDFE MzUyQzM5MkYzRTFCMzczNzU0NDkzNEI0QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUH0/2CApSyF7wnQG3cqQfMPHgcwpsXfNXzpICsYGb+IwTrcZ0 klUxhjBbqkXL9Ig7Sy5h3Fns8zeLJFUuysI1nOgeoca9bn93KyoFupnxgCq6Vv22 +Snc9W+X1sRorRuDiy5lzaAvrCBTyuJ5TOtUH7OWj8a+dYJBwWnVnkfFQGhk95AY 6+qRUtP+A1cSY2KZozMHwVvhl6UcBEmeYVGGoEv+jcKD8w3zY2l555lqF2zwM5nW ZDMm0mWJ/B8+CqVI8DtPv/G3dI2yrshG/WOrwRaibs6M5fgKcQrWbLE0lc+lnhCN hQ0DMaM+tC8LlP+zIjF6BA2WzX93tQIvoUOvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqzoOUWhdHTUsOS8+Gzc3VEk0tLUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3F6b09VV2hkSFRVc09TOC1H emMzVkVrMHRMVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATT TEAwDQYJKoZIhvcNAQELBQADggEBAFLXn+uRESI3PdYY/NhOmPyTjc+wYKeuiWjU PwX/u3fwFt1uO1F71nMfllDJtMWI3htDJa//wAsTC2E/O6U4OaJ/svHMSzW6O+yj q1om3ZXGujFY0V/F/vG7oziEBfsL+dNUZTAAbNOt60g9JGYCOyXYTD4q4ucQ41bz 0MP9xLJ08xRWOL1N3XDFQbtBBIFNVRwxq8Dex1x5t6QQ6apBGzHu1/ysh6FXfVXS PT9s21jnM9jP/JPMFqeJIa7oiRcWBSx33H9zE7/gvoPdPIwt/GuCTn7U0VkUIjT7 MtQYtMfK3HJ5P7GiACUp0tqEJK43oo1VVnus4FUzA0xyRZbtIjA= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:46 2024 by rpki-client on console-fra.rpki-client.org