$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/77fJ3ZR6_r0oN1OYAtPA4flyH0k.roa File: 77fJ3ZR6_r0oN1OYAtPA4flyH0k.roa (raw, json) Hash identifier: 8hWuplzIlV+ngx+/bfCa5JbB+e5ZH5fI5K1hD+hfY7Q= Subject key identifier: EF:B7:C9:DD:94:7A:FE:BD:28:37:53:98:02:D3:C0:E1:F9:72:1F:49 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 226A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/77fJ3ZR6_r0oN1OYAtPA4flyH0k.roa Signing time: Mon 26 Aug 2024 05:33:59 +0000 ROA not before: Mon 26 Aug 2024 05:33:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 211.76.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8810 (0x226a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EFB7C9DD947AFEBD2837539802D3C0E1F9721F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:49:b2:d6:73:cb:9f:5b:b1:be:75:be:db: 94:6d:77:1b:01:27:b3:5f:da:76:0a:ee:e3:ab:0f: 11:37:10:63:74:62:7b:7d:0c:73:81:4a:b4:0d:46: 0d:d3:e7:bd:61:e2:99:20:27:08:6a:53:cb:60:c5: 4f:35:c1:d9:32:89:e9:c8:5f:af:ed:50:89:d0:2d: 3d:28:dc:50:24:38:56:1b:88:36:fb:b7:5c:7d:75: e8:bb:6d:66:69:20:87:d6:a1:58:ab:50:75:f2:68: f3:fc:60:07:e7:dd:fd:9a:1f:63:0d:ee:5d:62:2d: 5a:0f:3a:99:ae:60:7f:ea:e7:25:c0:d0:8e:f6:c2: 38:46:ba:0a:26:eb:70:e7:75:56:90:6e:b9:f1:df: 24:95:f2:77:21:4a:5a:b3:09:0d:2f:71:eb:23:7c: 9f:1f:2a:dc:35:92:f5:55:9f:e2:79:bf:41:61:33: 60:59:a0:1f:c6:34:47:d8:b4:7e:5f:c1:10:1a:b7: 4c:f3:62:49:69:3e:31:49:38:4c:a8:ec:ef:7c:2e: a8:75:04:e3:44:32:70:72:ce:6f:12:9a:41:a0:07: 2f:38:68:8a:92:d4:4e:30:2c:fa:75:02:d1:36:09: 61:51:80:18:e8:20:ec:2a:29:a6:ca:86:e6:2c:88: e4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B7:C9:DD:94:7A:FE:BD:28:37:53:98:02:D3:C0:E1:F9:72:1F:49 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/77fJ3ZR6_r0oN1OYAtPA4flyH0k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.48.0/22 Signature Algorithm: sha256WithRSAEncryption 02:98:2f:57:d9:34:e8:c4:b9:02:2e:d8:cd:e0:a1:1a:8c:bc: 2d:fe:42:a4:5d:ad:a4:fc:2d:56:bb:c5:e0:86:d8:cf:71:13: ec:f5:a7:fd:6a:a8:98:33:0a:e5:a8:d3:6b:fd:03:5e:fa:88: e7:84:66:b3:33:18:42:58:3b:9f:43:e8:41:36:e9:95:a6:44: 49:32:3d:38:ee:a1:95:da:67:bf:aa:ad:c0:4e:5e:20:03:f7: 00:e3:a2:47:e6:fb:a9:1b:2b:87:4e:7c:07:bc:d6:73:fd:d2: 69:b1:04:14:b6:3f:fb:93:c1:66:66:da:9f:b9:3f:da:d0:42: 09:60:bd:46:e4:73:63:ce:76:e6:57:31:d3:cc:c7:54:c1:8d: 37:d2:36:3f:c2:ce:1c:ee:cc:52:80:f0:68:39:67:62:95:ab: e8:c8:2d:a4:fd:d8:6d:9e:d4:c7:67:6e:6a:e1:cf:20:a4:91: cc:0e:08:4b:12:8d:75:86:4f:b7:48:70:97:a7:9c:04:43:ee: 8c:93:39:b7:58:34:46:73:45:16:ba:07:eb:25:2a:a2:a8:f0: eb:74:69:8c:57:5b:c0:f7:cf:cb:ed:b9:b8:d7:dc:a1:34:98: d7:70:26:c3:ef:d6:5e:74:60:fe:cd:1b:43:9f:a3:d9:08:e6: 2e:c7:03:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICImowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVGQjdDOUREOTQ3QUZF QkQyODM3NTM5ODAyRDNDMEUxRjk3MjFGNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvSkmy1nPLn1uxvnW+25RtdxsBJ7Nf2nYK7uOrDxE3EGN0Ynt9 DHOBSrQNRg3T571h4pkgJwhqU8tgxU81wdkyienIX6/tUInQLT0o3FAkOFYbiDb7 t1x9dei7bWZpIIfWoVirUHXyaPP8YAfn3f2aH2MN7l1iLVoPOpmuYH/q5yXA0I72 wjhGugom63DndVaQbrnx3ySV8nchSlqzCQ0vcesjfJ8fKtw1kvVVn+J5v0FhM2BZ oB/GNEfYtH5fwRAat0zzYklpPjFJOEyo7O98Lqh1BONEMnByzm8SmkGgBy84aIqS 1E4wLPp1AtE2CWFRgBjoIOwqKabKhuYsiOT5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU77fJ3ZR6/r0oN1OYAtPA4flyH0kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzc3ZkozWlI2X3Iwb04xT1lB dFBBNGZseUgway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TDAwDQYJKoZIhvcNAQELBQADggEBAAKYL1fZNOjEuQIu2M3goRqMvC3+QqRdraT8 LVa7xeCG2M9xE+z1p/1qqJgzCuWo02v9A176iOeEZrMzGEJYO59D6EE26ZWmREky PTjuoZXaZ7+qrcBOXiAD9wDjokfm+6kbK4dOfAe81nP90mmxBBS2P/uTwWZm2p+5 P9rQQglgvUbkc2POduZXMdPMx1TBjTfSNj/CzhzuzFKA8Gg5Z2KVq+jILaT92G2e 1MdnbmrhzyCkkcwOCEsSjXWGT7dIcJennARD7oyTObdYNEZzRRa6B+slKqKo8Ot0 aYxXW8D3z8vtubjX3KE0mNdwJsPv1l50YP7NG0Ofo9kI5i7HA+c= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:57 2024 by rpki-client on console-ams.rpki-client.org