$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa File: 0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa (raw, json) Hash identifier: DAncr7SNXZk73gSbQUUFxO8gpFI8JXE0EIk34V84QSc= Subject key identifier: D2:09:05:19:8C:C3:D1:22:F0:E0:47:EC:AE:89:47:66:D9:8D:B7:96 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22BC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa Signing time: Mon 26 Aug 2024 05:34:19 +0000 ROA not before: Mon 26 Aug 2024 05:34:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 180.218.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8892 (0x22bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D20905198CC3D122F0E047ECAE894766D98DB796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:26:d6:21:9e:55:18:31:c4:1a:cb:1a:d2: d9:d3:a9:41:5c:4a:9c:33:df:0b:40:ea:5e:66:07: c7:1a:84:96:18:aa:42:03:3a:fd:c6:d5:23:ad:4e: 29:ab:96:2c:d3:28:a4:b2:c5:1b:5e:1f:7b:55:a7: de:e3:0b:64:cb:d9:a9:3f:c0:7b:9c:fd:00:3e:0e: 1f:17:29:ef:17:19:37:55:8d:4f:f7:9b:41:66:7a: b4:45:68:e0:40:75:03:b7:81:97:50:c6:d5:c8:fc: 17:31:05:80:33:0e:14:ee:96:f9:a1:9f:66:22:55: f4:9b:c5:bb:8a:e3:e2:42:e8:4d:bf:42:3b:db:64: b6:77:a6:25:28:b4:38:ad:10:38:5a:aa:32:3f:fa: e3:0b:5d:6e:57:6a:7d:9a:30:bd:f3:92:de:8a:17: e1:0a:45:47:cd:7b:d5:0f:99:80:40:e3:68:cc:27: ca:86:43:78:b9:1d:d6:05:77:a9:f0:19:07:b6:19: 54:17:49:fc:ee:01:7d:95:32:dd:88:71:d9:46:44: 36:f2:79:12:0a:fa:7c:9f:81:2a:49:e4:d7:82:48: f8:39:8d:36:75:5b:90:07:f9:22:af:a5:32:d1:6f: 31:72:28:6d:8b:64:c8:a2:8c:59:f3:07:a2:2e:e6: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:05:19:8C:C3:D1:22:F0:E0:47:EC:AE:89:47:66:D9:8D:B7:96 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.224.0/21 Signature Algorithm: sha256WithRSAEncryption 40:a9:2e:69:45:f6:0e:ae:cc:c9:97:13:3e:ba:5d:c9:e3:4e: e1:a5:5f:7d:3b:48:e4:42:10:42:d9:52:af:67:fc:c6:2d:5e: 3f:fb:9f:51:5d:3d:7b:95:f8:ac:56:99:c5:1d:50:c9:fb:6a: a8:df:19:1b:d6:ce:ee:c7:17:77:f4:a0:03:b1:f6:15:d0:01: 40:b7:c8:88:cb:5d:48:b9:83:f4:ee:3d:7d:be:0b:16:b4:6c: 88:e6:59:ce:29:bf:ef:67:c2:0c:16:ed:2c:fe:61:b3:72:e4: be:34:27:a4:c9:a1:12:ec:9c:47:af:79:8b:7d:1b:78:18:75: eb:18:83:b4:3d:d1:27:69:ff:e8:e4:c4:04:6f:f6:39:95:aa: 9a:23:c8:1f:1c:ee:63:2a:6e:96:5c:5d:64:3d:19:04:8b:2d: d6:14:2a:58:c7:fc:8b:f1:d6:cd:3e:ac:5e:2f:3e:ad:15:f3: 68:17:f3:69:d7:26:73:a7:20:d1:d8:c1:f7:5c:2b:a0:f7:d1: 78:17:77:84:0b:d6:0b:f6:67:68:53:44:61:0e:dc:c5:b9:5a: c7:ee:30:b7:93:70:03:c3:42:a7:3c:b3:7a:1c:d2:2f:c7:6a: 98:5d:ba:22:6c:a7:be:3e:b4:11:6a:18:d0:20:59:e2:4f:e4: 71:e9:27:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIrwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQyMDkwNTE5OENDM0Qx MjJGMEUwNDdFQ0FFODk0NzY2RDk4REI3OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLOibWIZ5VGDHEGssa0tnTqUFcSpwz3wtA6l5mB8cahJYYqkID Ov3G1SOtTimrlizTKKSyxRteH3tVp97jC2TL2ak/wHuc/QA+Dh8XKe8XGTdVjU/3 m0FmerRFaOBAdQO3gZdQxtXI/BcxBYAzDhTulvmhn2YiVfSbxbuK4+JC6E2/Qjvb ZLZ3piUotDitEDhaqjI/+uMLXW5Xan2aML3zkt6KF+EKRUfNe9UPmYBA42jMJ8qG Q3i5HdYFd6nwGQe2GVQXSfzuAX2VMt2IcdlGRDbyeRIK+nyfgSpJ5NeCSPg5jTZ1 W5AH+SKvpTLRbzFyKG2LZMiijFnzB6Iu5ofFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0gkFGYzD0SLw4EfsrolHZtmNt5YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBna0ZHWXpEMFNMdzRFZnNy b2xIWnRtTnQ1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2uAwDQYJKoZIhvcNAQELBQADggEBAECpLmlF9g6uzMmXEz66XcnjTuGlX307SORC EELZUq9n/MYtXj/7n1FdPXuV+KxWmcUdUMn7aqjfGRvWzu7HF3f0oAOx9hXQAUC3 yIjLXUi5g/TuPX2+Cxa0bIjmWc4pv+9nwgwW7Sz+YbNy5L40J6TJoRLsnEeveYt9 G3gYdesYg7Q90Sdp/+jkxARv9jmVqpojyB8c7mMqbpZcXWQ9GQSLLdYUKljH/Ivx 1s0+rF4vPq0V82gX82nXJnOnINHYwfdcK6D30XgXd4QL1gv2Z2hTRGEO3MW5Wsfu MLeTcAPDQqc8s3oc0i/HaphduiJsp74+tBFqGNAgWeJP5HHpJ9I= -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:59 2024 by rpki-client on console-fra.rpki-client.org