$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJJfZkucJKpjIhKMP11235kanH8.roa File: xJJfZkucJKpjIhKMP11235kanH8.roa (raw, json) Hash identifier: d1ZkvwAf87o86yz6uETQqbB1UQkXka7Dia7/LdZD3GQ= Subject key identifier: C4:92:5F:66:4B:9C:24:AA:63:22:12:8C:3F:5D:76:DF:99:1A:9C:7F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2295 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJJfZkucJKpjIhKMP11235kanH8.roa Signing time: Mon 26 Aug 2024 05:34:09 +0000 ROA not before: Mon 26 Aug 2024 05:34:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.64.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8853 (0x2295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C4925F664B9C24AA6322128C3F5D76DF991A9C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ce:69:e9:93:24:e9:f3:56:83:9e:a6:e6:b4: df:1d:b6:93:c3:9a:26:47:a4:25:bd:58:ac:33:e0: a6:6e:8f:07:90:a4:2f:9c:6d:54:a1:b6:c0:44:42: 4b:24:89:07:04:d5:6d:30:25:ca:37:19:44:32:7c: 17:92:e3:0e:7e:74:c9:df:e9:e4:fb:d8:02:7c:88: a4:56:91:a0:58:34:99:cb:d8:95:82:4c:7f:86:e3: 5e:d8:2f:3f:3a:90:79:ce:ad:ec:d0:d4:86:ee:0a: cc:36:2e:56:f3:1d:83:3d:07:63:42:16:60:15:54: c6:51:8b:b5:e2:29:2e:7e:98:8c:78:2e:ce:cf:db: 98:58:c3:8a:e5:36:a0:4d:c8:7d:41:3b:d1:9f:50: 0f:ad:4e:1a:c3:80:cf:83:54:aa:67:f8:82:ce:96: 03:4c:fe:aa:31:af:04:26:ff:cc:c9:5c:db:ab:a9: 69:b4:0b:55:61:7c:58:38:fc:6b:fe:85:fe:7e:fc: a8:1e:f5:66:bd:25:83:a0:9c:4b:72:98:74:dd:74: 0a:3c:af:b1:02:18:7e:4e:f1:a1:24:8d:47:51:6d: 0b:79:95:fb:04:ab:d9:4b:16:06:54:b8:a3:70:a2: a4:ab:d2:e7:29:5a:4f:cd:41:b1:06:3d:08:79:fb: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:92:5F:66:4B:9C:24:AA:63:22:12:8C:3F:5D:76:DF:99:1A:9C:7F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJJfZkucJKpjIhKMP11235kanH8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.24.0/22 Signature Algorithm: sha256WithRSAEncryption 31:6d:d2:66:1d:1f:38:47:33:48:b2:f1:68:c4:a3:53:3f:4a: f1:5c:4c:65:76:44:a8:83:e2:b5:7e:7d:64:1c:63:e8:f3:80: f7:49:2e:74:49:b2:94:b3:fb:f6:fc:47:8d:dc:d8:be:94:e0: 82:ae:6e:db:02:5d:c7:87:17:2d:9a:a7:77:71:88:17:28:1a: 6c:30:db:0d:83:2e:7a:73:49:05:65:99:bd:4e:9e:91:06:38: a1:f2:75:4d:1c:04:78:49:bd:4d:53:71:9d:d6:2f:b7:d8:88: ab:5b:37:6b:54:97:31:6b:1a:74:a3:87:50:c0:be:7d:3f:13: 4f:37:f2:c1:2f:4c:12:d6:a6:9f:b2:6d:2b:c0:f7:2f:5c:1d: 11:8a:95:6d:3f:64:b3:d6:52:05:e2:d8:2f:82:21:a1:22:46: 13:0a:1f:70:d5:bd:7b:d2:13:d2:6b:14:01:1b:3f:05:29:52: ad:a5:7c:e6:46:26:f9:9f:49:79:78:6d:9c:21:c7:58:f2:6a: 66:7c:a6:db:0e:34:ff:b8:8c:43:10:94:12:0b:53:e0:c1:34: ce:32:16:ec:cc:59:60:07:b2:5a:6d:5b:c5:f0:ee:29:8a:ce: 3b:87:23:4d:58:49:a8:43:a9:15:b1:31:5e:68:1f:ab:44:c9: 10:86:d7:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIpUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0OTI1RjY2NEI5QzI0 QUE2MzIyMTI4QzNGNUQ3NkRGOTkxQTlDN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuzmnpkyTp81aDnqbmtN8dtpPDmiZHpCW9WKwz4KZujweQpC+c bVShtsBEQkskiQcE1W0wJco3GUQyfBeS4w5+dMnf6eT72AJ8iKRWkaBYNJnL2JWC TH+G417YLz86kHnOrezQ1IbuCsw2LlbzHYM9B2NCFmAVVMZRi7XiKS5+mIx4Ls7P 25hYw4rlNqBNyH1BO9GfUA+tThrDgM+DVKpn+ILOlgNM/qoxrwQm/8zJXNurqWm0 C1VhfFg4/Gv+hf5+/Kge9Wa9JYOgnEtymHTddAo8r7ECGH5O8aEkjUdRbQt5lfsE q9lLFgZUuKNwoqSr0ucpWk/NQbEGPQh5+2THAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxJJfZkucJKpjIhKMP11235kanH8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hKSmZaa3VjSktwakloS01Q MTEyMzVrYW5IOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QBgwDQYJKoZIhvcNAQELBQADggEBADFt0mYdHzhHM0iy8WjEo1M/SvFcTGV2RKiD 4rV+fWQcY+jzgPdJLnRJspSz+/b8R43c2L6U4IKubtsCXceHFy2ap3dxiBcoGmww 2w2DLnpzSQVlmb1OnpEGOKHydU0cBHhJvU1TcZ3WL7fYiKtbN2tUlzFrGnSjh1DA vn0/E0838sEvTBLWpp+ybSvA9y9cHRGKlW0/ZLPWUgXi2C+CIaEiRhMKH3DVvXvS E9JrFAEbPwUpUq2lfOZGJvmfSXl4bZwhx1jyamZ8ptsONP+4jEMQlBILU+DBNM4y FuzMWWAHslptW8Xw7imKzjuHI01YSahDqRWxMV5oH6tEyRCG1x4= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:27 2024 by rpki-client on console-ams.rpki-client.org