$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1F1YwPMFBj7MgGx9on3fu_viw8Q.roa File: 1F1YwPMFBj7MgGx9on3fu_viw8Q.roa (raw, json) Hash identifier: clwRhkzVMZ3GXxuhEEJhaFdFWz/Nnwsib1FZV8q5PMQ= Subject key identifier: D4:5D:58:C0:F3:05:06:3E:CC:80:6C:7D:A2:7D:DF:BB:FB:E2:C3:C4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21A5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1F1YwPMFBj7MgGx9on3fu_viw8Q.roa Signing time: Mon 26 Aug 2024 05:33:12 +0000 ROA not before: Mon 26 Aug 2024 05:33:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8613 (0x21a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D45D58C0F305063ECC806C7DA27DDFBBFBE2C3C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:89:b7:51:f1:00:cc:df:91:c6:be:fd:f5:ac: 61:28:4b:4f:bb:93:af:21:e7:62:42:20:0b:5b:cd: 38:63:b9:61:2f:17:21:ae:8e:8a:b6:9e:c0:09:52: 23:69:66:07:d4:a8:1c:04:6c:de:cd:6d:db:34:7b: a1:3f:ef:7a:2f:34:14:49:52:59:85:9c:fe:5e:f1: 14:5d:9f:d6:13:94:e2:bc:f8:33:8c:d0:c9:2d:74: d8:19:3e:29:a7:46:f6:24:0c:63:16:9a:5d:ac:61: d8:ea:21:71:c8:f9:37:5f:f2:45:ed:7d:18:c6:79: 0e:b1:29:ee:24:f5:d8:1e:a6:7f:b5:ba:c7:28:cb: 9e:84:b1:ea:11:e3:d0:08:08:6b:81:18:1a:bf:d0: 26:2a:53:9d:6f:a9:85:6d:f5:90:65:d4:b5:80:b5: a5:da:33:10:6d:dd:50:35:0a:3c:42:d7:16:8f:cd: 22:b2:09:61:0d:4d:91:15:89:d0:61:89:2e:02:6d: 35:c6:e5:68:a3:15:ef:f7:79:10:7d:49:2e:d7:ba: 25:ce:67:bc:14:8b:da:e3:0d:1e:74:db:e2:28:df: 53:ac:07:a8:c0:6d:9a:ed:45:c4:c9:2c:0e:1a:dd: f7:85:65:9e:13:58:bc:e3:1e:48:c9:38:f3:c9:be: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5D:58:C0:F3:05:06:3E:CC:80:6C:7D:A2:7D:DF:BB:FB:E2:C3:C4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1F1YwPMFBj7MgGx9on3fu_viw8Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.78.0/24 Signature Algorithm: sha256WithRSAEncryption 45:15:e4:c9:66:ac:3d:32:15:8e:1d:7d:20:f4:20:82:be:d0: 6b:11:6e:f6:fe:52:ac:b6:c9:44:34:f6:f8:9b:a4:48:6d:ef: a0:12:96:c5:10:10:a1:17:1f:1d:b2:97:56:d7:03:10:e1:0a: cb:99:40:0d:aa:a8:19:3a:48:59:3f:c1:7a:f0:2f:cd:25:1a: ed:b0:21:80:3b:67:f0:58:65:ff:b1:ef:cf:62:be:9e:24:01: fb:43:8d:0b:af:5d:20:14:a4:69:00:34:a8:0d:f2:90:f9:5b: 27:3a:48:5f:66:50:bb:84:7b:2d:56:2f:69:02:22:57:15:98: 57:dc:d4:7b:eb:0a:19:86:db:a2:79:b0:58:85:b0:6a:95:32: 33:45:e9:02:cd:a1:74:e4:93:e7:79:ad:7f:21:a7:53:a1:50: b7:0d:51:e2:57:95:c9:a9:f1:7d:37:71:d3:46:fc:57:7f:90: 21:b8:cf:46:6f:5d:cf:a1:d8:21:19:2d:41:23:25:6c:cb:c5: 59:0c:ed:f4:63:4c:86:45:17:83:95:8f:22:99:b2:09:a5:f1: e7:f0:b0:48:dd:bf:a6:ed:62:19:e8:04:ae:e0:db:b0:60:dd: 4a:6b:ef:c0:ce:b3:40:11:80:e3:4e:7d:19:15:b8:a1:71:2e: b7:b5:87:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0NUQ1OEMwRjMwNTA2 M0VDQzgwNkM3REEyN0RERkJCRkJFMkMzQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUibdR8QDM35HGvv31rGEoS0+7k68h52JCIAtbzThjuWEvFyGu joq2nsAJUiNpZgfUqBwEbN7Nbds0e6E/73ovNBRJUlmFnP5e8RRdn9YTlOK8+DOM 0MktdNgZPimnRvYkDGMWml2sYdjqIXHI+Tdf8kXtfRjGeQ6xKe4k9dgepn+1usco y56EseoR49AICGuBGBq/0CYqU51vqYVt9ZBl1LWAtaXaMxBt3VA1CjxC1xaPzSKy CWENTZEVidBhiS4CbTXG5WijFe/3eRB9SS7XuiXOZ7wUi9rjDR502+Io31OsB6jA bZrtRcTJLA4a3feFZZ4TWLzjHkjJOPPJvgP3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1F1YwPMFBj7MgGx9on3fu/viw8QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFGMVl3UE1GQmo3TWdHeDlv bjNmdV92aXc4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TE4wDQYJKoZIhvcNAQELBQADggEBAEUV5MlmrD0yFY4dfSD0IIK+0GsRbvb+Uqy2 yUQ09vibpEht76ASlsUQEKEXHx2yl1bXAxDhCsuZQA2qqBk6SFk/wXrwL80lGu2w IYA7Z/BYZf+x789ivp4kAftDjQuvXSAUpGkANKgN8pD5Wyc6SF9mULuEey1WL2kC IlcVmFfc1HvrChmG26J5sFiFsGqVMjNF6QLNoXTkk+d5rX8hp1OhULcNUeJXlcmp 8X03cdNG/Fd/kCG4z0ZvXc+h2CEZLUEjJWzLxVkM7fRjTIZFF4OVjyKZsgml8efw sEjdv6btYhnoBK7g27Bg3Upr78DOs0ARgONOfRkVuKFxLre1h+I= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:40 2024 by rpki-client on console-ams.rpki-client.org