$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IMrQKsFzrEPK5mb7OYvUtf3hY8s.roa File: IMrQKsFzrEPK5mb7OYvUtf3hY8s.roa (raw, json) Hash identifier: 23lWh/+RU7f46nk+09eUBsacIzt9OiB/5+TegHOn0sE= Subject key identifier: 20:CA:D0:2A:C1:73:AC:43:CA:E6:66:FB:39:8B:D4:B5:FD:E1:63:CB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21B5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IMrQKsFzrEPK5mb7OYvUtf3hY8s.roa Signing time: Mon 26 Aug 2024 05:33:16 +0000 ROA not before: Mon 26 Aug 2024 05:33:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 180.218.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8629 (0x21b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=20CAD02AC173AC43CAE666FB398BD4B5FDE163CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:a3:f4:61:29:dc:49:17:46:32:31:fc:e2: eb:f8:13:92:5f:bc:e0:c6:0e:fe:c4:0e:87:50:81: 44:5e:0f:df:3f:b0:82:9b:bf:5d:16:dd:df:ff:7f: f7:e9:fd:f9:69:de:c2:2d:86:6b:a3:89:b3:c6:f9: c3:77:b3:c3:a3:d7:04:7c:d2:38:5e:11:5c:6b:5a: 35:41:4f:14:c5:0a:4c:37:ab:be:dc:75:e3:c1:85: 42:e7:3b:90:e8:a3:5e:ca:b9:5d:d4:4a:c2:ae:b9: 76:81:43:ed:b5:9a:8b:1b:5b:cb:22:49:f4:9c:42: 25:79:72:06:5c:9a:09:d1:a9:af:96:86:1c:68:85: 4f:44:be:4f:7b:fc:e7:eb:cb:08:95:8b:bc:07:17: 7a:6e:f1:24:40:14:e6:27:72:cf:98:ca:5c:cb:80: 09:1d:38:40:20:26:88:31:52:ef:a3:bf:44:8d:53: 1a:68:a1:f0:2c:e0:5c:92:8f:b9:c3:6a:4f:2f:75: 66:57:32:72:94:82:53:35:f9:eb:97:eb:9c:52:59: 4f:b1:e6:aa:fb:da:55:16:70:cd:e8:6c:43:f7:db: 48:6c:6d:47:94:04:f4:22:09:58:c8:b2:92:1b:aa: a8:82:8d:ec:f1:20:56:21:f5:a1:7c:58:ed:16:70: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CA:D0:2A:C1:73:AC:43:CA:E6:66:FB:39:8B:D4:B5:FD:E1:63:CB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IMrQKsFzrEPK5mb7OYvUtf3hY8s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:15:52:36:a5:e6:5b:b4:85:fe:66:63:bc:d7:7b:01:65:de: b0:07:40:45:50:72:ba:cd:f9:4c:a4:b8:3d:0b:e6:a4:47:ce: 09:f0:34:bf:fb:0e:e6:7a:22:11:5e:bf:99:8c:0b:b9:e8:71: 98:f0:4f:f5:b4:1c:5c:05:3f:02:06:ab:6e:6f:2b:d7:ad:cd: 26:c5:59:12:7c:e9:cd:f4:60:fc:7c:14:cb:c0:24:c5:cd:51: 78:d4:44:f3:08:09:18:eb:e9:1e:bb:4a:b1:d0:2b:5a:35:6d: 7e:65:4c:7c:7b:ce:fa:16:e1:1b:80:ab:83:af:b5:5a:c2:9d: 79:68:c7:f0:81:bd:e2:89:c8:50:d9:a8:29:17:d0:23:ed:4d: 94:ea:6b:45:2f:45:8c:28:20:ff:ff:da:0f:70:94:3e:df:5a: 8c:9f:c6:e6:d5:ef:58:de:16:37:49:22:1d:0a:8e:0f:9f:ec: 44:60:6b:65:91:bf:8d:d9:c2:0c:1e:73:cc:53:4f:00:52:64: 9b:db:4d:58:f4:89:e5:eb:08:e9:2b:ec:77:14:7c:16:94:e4: 2b:53:a6:da:71:b0:98:a7:78:d3:b2:07:07:96:da:7b:25:a8: c6:db:61:07:3f:b8:d1:66:7c:a1:bd:a6:cf:e5:1d:07:64:a7: 8e:ec:f4:81 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICIbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwQ0FEMDJBQzE3M0FD NDNDQUU2NjZGQjM5OEJENEI1RkRFMTYzQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO1aP0YSncSRdGMjH84uv4E5JfvODGDv7EDodQgUReD98/sIKb v10W3d//f/fp/flp3sIthmujibPG+cN3s8Oj1wR80jheEVxrWjVBTxTFCkw3q77c dePBhULnO5Doo17KuV3USsKuuXaBQ+21mosbW8siSfScQiV5cgZcmgnRqa+Whhxo hU9Evk97/OfrywiVi7wHF3pu8SRAFOYncs+YylzLgAkdOEAgJogxUu+jv0SNUxpo ofAs4FySj7nDak8vdWZXMnKUglM1+euX65xSWU+x5qr72lUWcM3obEP320hsbUeU BPQiCVjIspIbqqiCjezxIFYh9aF8WO0WcAR5AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUIMrQKsFzrEPK5mb7OYvUtf3hY8swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lNclFLc0Z6ckVQSzVtYjdP WXZVdGYzaFk4cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC0 2jANBgkqhkiG9w0BAQsFAAOCAQEAlBVSNqXmW7SF/mZjvNd7AWXesAdARVByus35 TKS4PQvmpEfOCfA0v/sO5noiEV6/mYwLuehxmPBP9bQcXAU/Agarbm8r163NJsVZ EnzpzfRg/HwUy8Akxc1ReNRE8wgJGOvpHrtKsdArWjVtfmVMfHvO+hbhG4Crg6+1 WsKdeWjH8IG94onIUNmoKRfQI+1NlOprRS9FjCgg///aD3CUPt9ajJ/G5tXvWN4W N0kiHQqOD5/sRGBrZZG/jdnCDB5zzFNPAFJkm9tNWPSJ5esI6SvsdxR8FpTkK1Om 2nGwmKd407IHB5baeyWoxtthBz+40WZ8ob2mz+UdB2Snjuz0gQ== -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:00 2024 by rpki-client on console-fra.rpki-client.org