$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa File: mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa (raw, json) Hash identifier: 0eu0r0Waka4XKstiw9vK/LLWtGab6LdEKq3R/w7QJ+k= Subject key identifier: 99:F3:42:61:4D:29:28:3B:BD:CD:C2:68:4D:98:AA:56:6D:60:83:8B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 216D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa Signing time: Mon 26 Aug 2024 05:32:59 +0000 ROA not before: Mon 26 Aug 2024 05:32:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 180.218.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8557 (0x216d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:32:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99F342614D29283BBDCDC2684D98AA566D60838B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:1b:0d:c2:19:dd:ab:ba:a6:9a:2d:03:00: 5f:7b:4e:a9:ca:67:7f:c8:c0:aa:2d:1c:3d:7b:4e: 6a:99:83:f4:74:c8:da:21:f4:16:02:1a:d1:d2:1b: 1a:fa:b0:02:83:9f:55:d2:a4:9f:86:0d:64:a3:d2: 69:e1:f6:29:48:8d:ba:9e:cf:e2:a7:d0:01:cd:93: b9:ed:ca:36:43:20:36:3d:e7:d7:e9:fa:da:cd:b6: 1c:96:3e:11:82:b3:a4:4b:f0:74:2c:9a:f2:01:7e: c1:f6:37:18:5f:32:4a:ad:e0:6b:e2:13:22:fd:5e: 33:84:4f:42:cc:e0:23:da:df:df:f8:9a:3d:de:62: 1d:75:63:8b:02:56:6e:15:d3:b4:3b:72:84:ed:ae: 07:8d:f4:b9:6a:d1:2a:10:de:2e:9c:e0:fa:d6:69: 49:92:a0:79:13:22:2b:9e:26:9f:ea:8c:a5:0a:3b: 38:d5:92:c2:29:a4:3f:33:f2:42:68:68:4f:0a:98: c3:c6:5f:38:66:3d:f5:bd:1c:aa:76:34:8a:7d:11: 60:97:28:9f:53:fa:96:60:38:8e:82:32:fc:a7:7f: d2:cb:fd:ce:1c:ed:cc:3a:22:91:49:66:c4:bc:7e: ff:0e:fe:b3:9b:ff:35:a2:ce:f5:82:00:0b:e7:48: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F3:42:61:4D:29:28:3B:BD:CD:C2:68:4D:98:AA:56:6D:60:83:8B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.240.0/21 Signature Algorithm: sha256WithRSAEncryption 22:a9:a4:d1:a0:53:fd:07:51:ca:a5:55:a8:27:04:1c:04:5f: a1:ae:2d:68:5f:37:99:e2:e7:db:53:d8:e1:52:ff:88:31:f4: f8:95:8e:02:a4:91:d8:29:8b:dc:a2:a4:e7:00:62:31:40:45: b3:2e:2c:8c:f4:a1:c6:b3:a2:55:e8:53:7c:e9:38:49:f8:7d: e1:ee:c1:35:34:98:ec:73:51:29:0f:0d:13:e7:48:2b:4d:6a: ff:d1:2c:0d:53:7a:7e:8d:ed:0b:7c:f9:6e:c7:5d:d6:c0:de: 74:6f:bb:1d:2e:d9:5f:36:cd:04:f6:2d:f1:e7:9f:e5:d3:db: ef:c5:d5:cd:a0:00:c5:ee:ec:54:96:33:5a:0b:0d:a3:f3:99: ba:44:61:eb:5a:ff:6e:15:3e:95:a1:80:24:3a:34:ce:1c:c8: d7:a6:c6:76:5a:bf:53:5c:6a:c4:93:d9:cb:b1:0e:64:c4:f9: b4:2e:6c:c8:0e:7c:83:9b:89:9a:af:b4:f0:53:be:d5:da:1c: c8:c4:dc:a3:5f:e7:d5:78:54:ab:32:d2:ff:36:4d:92:96:91: a0:86:41:de:4c:ff:e9:a5:b0:97:b0:5e:1f:04:d9:bb:e5:43: 08:9c:10:cc:7c:d0:6e:27:83:83:21:8d:32:0c:94:da:e1:a4: aa:f2:40:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMyNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RjM0MjYxNEQyOTI4 M0JCRENEQzI2ODREOThBQTU2NkQ2MDgzOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmYBsNwhndq7qmmi0DAF97TqnKZ3/IwKotHD17TmqZg/R0yNoh 9BYCGtHSGxr6sAKDn1XSpJ+GDWSj0mnh9ilIjbqez+Kn0AHNk7ntyjZDIDY959fp +trNthyWPhGCs6RL8HQsmvIBfsH2NxhfMkqt4GviEyL9XjOET0LM4CPa39/4mj3e Yh11Y4sCVm4V07Q7coTtrgeN9Llq0SoQ3i6c4PrWaUmSoHkTIiueJp/qjKUKOzjV ksIppD8z8kJoaE8KmMPGXzhmPfW9HKp2NIp9EWCXKJ9T+pZgOI6CMvynf9LL/c4c 7cw6IpFJZsS8fv8O/rOb/zWizvWCAAvnSGzpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmfNCYU0pKDu9zcJoTZiqVm1gg4swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21mTkNZVTBwS0R1OXpjSm9U WmlxVm0xZ2c0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2vAwDQYJKoZIhvcNAQELBQADggEBACKppNGgU/0HUcqlVagnBBwEX6GuLWhfN5ni 59tT2OFS/4gx9PiVjgKkkdgpi9yipOcAYjFARbMuLIz0ocazolXoU3zpOEn4feHu wTU0mOxzUSkPDRPnSCtNav/RLA1Ten6N7Qt8+W7HXdbA3nRvux0u2V82zQT2LfHn n+XT2+/F1c2gAMXu7FSWM1oLDaPzmbpEYeta/24VPpWhgCQ6NM4cyNemxnZav1Nc asST2cuxDmTE+bQubMgOfIObiZqvtPBTvtXaHMjE3KNf59V4VKsy0v82TZKWkaCG Qd5M/+mlsJewXh8E2bvlQwicEMx80G4ng4MhjTIMlNrhpKryQJ8= -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:01 2024 by rpki-client on console-fra.rpki-client.org