$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ubQAfr9h2yMUu1e2ICxxDKt1oaQ.roa File: ubQAfr9h2yMUu1e2ICxxDKt1oaQ.roa (raw, json) Hash identifier: 5keVWVwO0VWx3jM3Tipj8Jm6TXcLg8zQJwrBhH9LQbo= Subject key identifier: B9:B4:00:7E:BF:61:DB:23:14:BB:57:B6:20:2C:71:0C:AB:75:A1:A4 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0D85 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ubQAfr9h2yMUu1e2ICxxDKt1oaQ.roa Signing time: Mon 26 Aug 2024 05:35:01 +0000 ROA not before: Mon 26 Aug 2024 05:35:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 2405:8700:9900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3461 (0xd85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 26 05:35:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B9B4007EBF61DB2314BB57B6202C710CAB75A1A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:17:1b:69:0b:34:da:c6:9b:df:a1:55:51: 20:18:69:1b:7b:37:49:fb:75:94:ff:4e:da:42:a2: 94:c9:ef:84:82:9a:fa:c1:86:9b:cc:c1:5c:0b:63: cd:f6:5d:88:83:76:3b:0b:1f:28:78:19:a9:f7:ae: d7:22:03:38:35:cd:a6:5a:b3:cd:3d:09:15:bc:a4: 1c:0f:a9:30:bf:9c:53:de:37:15:e9:7b:6d:f9:b1: 33:77:1a:2f:e7:00:ec:33:c9:53:bc:59:c8:b4:f5: cf:ed:af:e2:e1:f4:86:ed:c4:f0:fb:a5:9f:0c:35: 5a:83:fe:6b:fb:7b:9d:ea:2c:e9:4c:58:0c:96:d4: b1:23:a1:92:f3:7d:7a:64:e1:19:80:f8:71:6c:51: 1a:86:db:a4:95:01:06:b0:39:d6:62:30:d0:4b:c3: 2c:9a:58:4d:d6:e7:f1:8e:6e:1d:dc:9d:ea:39:99: 96:8e:6f:04:23:dc:6a:d5:34:3b:23:f0:48:b4:bd: 10:ec:63:2b:05:ff:45:f6:9b:b3:04:9d:9d:30:23: 3c:64:27:1a:9b:51:c6:5f:b9:2d:ec:51:85:f8:69: 9a:ff:b4:49:db:fa:d0:e0:c5:1f:9d:4c:0c:3e:1b: 89:33:24:e5:e5:90:57:c7:07:15:74:c5:cf:c8:3c: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B4:00:7E:BF:61:DB:23:14:BB:57:B6:20:2C:71:0C:AB:75:A1:A4 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ubQAfr9h2yMUu1e2ICxxDKt1oaQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:8700:9900::/48 Signature Algorithm: sha256WithRSAEncryption 65:03:09:08:96:a0:eb:ed:6c:75:1f:02:e4:d1:df:8a:d6:bf: 69:f2:58:9c:bf:d5:83:0f:c1:91:47:9e:98:ac:0a:67:22:c8: 0e:de:ef:81:88:ef:5a:aa:be:0d:f5:24:14:9e:fa:a9:05:91: 7b:e4:e4:3f:33:9d:a2:38:8a:9f:14:79:79:62:9c:84:71:5d: 6f:1f:61:4b:ba:fe:e3:44:80:9f:20:9b:02:a2:61:57:98:12: aa:c8:ca:eb:28:69:f9:1e:2d:14:0e:f9:dc:ea:69:b8:25:05: a2:b1:54:5d:c3:d3:3a:c8:a9:49:6e:86:98:6a:7f:ee:43:d4: c6:90:96:85:48:33:cf:22:19:ec:3c:9b:23:9b:ce:d1:45:1b: df:7a:83:95:fe:44:2e:51:7b:77:be:d0:1f:a6:9b:b8:c3:ed: 6c:bd:ce:a5:0c:90:4d:aa:0c:e2:24:4f:e8:fd:2f:c6:5c:42: 81:f9:37:f7:a3:23:e0:27:53:8a:94:73:39:00:8d:82:68:3a: 72:50:7d:51:19:e0:08:f0:d7:d7:21:ff:ce:57:0c:e3:00:43: 6b:0f:0a:c7:72:a1:60:09:0b:80:05:39:37:e3:5d:3c:32:fd: bb:93:fe:55:cb:4b:1d:57:ea:9f:4e:b8:fe:05:e9:f7:ce:65: da:d2:fb:4d -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICDYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNDA4MjYw NTM1MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI5QjQwMDdFQkY2MURC MjMxNEJCNTdCNjIwMkM3MTBDQUI3NUExQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBThcbaQs02sab36FVUSAYaRt7N0n7dZT/TtpCopTJ74SCmvrB hpvMwVwLY832XYiDdjsLHyh4Gan3rtciAzg1zaZas809CRW8pBwPqTC/nFPeNxXp e235sTN3Gi/nAOwzyVO8Wci09c/tr+Lh9IbtxPD7pZ8MNVqD/mv7e53qLOlMWAyW 1LEjoZLzfXpk4RmA+HFsURqG26SVAQawOdZiMNBLwyyaWE3W5/GObh3cneo5mZaO bwQj3GrVNDsj8Ei0vRDsYysF/0X2m7MEnZ0wIzxkJxqbUcZfuS3sUYX4aZr/tEnb +tDgxR+dTAw+G4kzJOXlkFfHBxV0xc/IPI3PAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUubQAfr9h2yMUu1e2ICxxDKt1oaQwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL3ViUUFmcjloMnlN VXUxZTJJQ3h4REt0MW9hUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkBYcAmQAwDQYJKoZIhvcNAQELBQADggEBAGUDCQiWoOvtbHUfAuTR34rW v2nyWJy/1YMPwZFHnpisCmciyA7e74GI71qqvg31JBSe+qkFkXvk5D8znaI4ip8U eXlinIRxXW8fYUu6/uNEgJ8gmwKiYVeYEqrIyusoafkeLRQO+dzqabglBaKxVF3D 0zrIqUluhphqf+5D1MaQloVIM88iGew8myObztFFG996g5X+RC5Re3e+0B+mm7jD 7Wy9zqUMkE2qDOIkT+j9L8ZcQoH5N/ejI+AnU4qUczkAjYJoOnJQfVEZ4Ajw19ch /85XDOMAQ2sPCsdyoWAJC4AFOTfjXTwy/buT/lXLSx1X6p9OuP4F6ffOZdrS+00= -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:00 2024 by rpki-client on console-fra.rpki-client.org