$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3Dfw3oAdthWZlp7M9jivmBbxlvk.roa File: 3Dfw3oAdthWZlp7M9jivmBbxlvk.roa (raw, json) Hash identifier: agAK7oinqXXl58aw2rB7myBJGV3+QEnctB9CGDkrDZI= Subject key identifier: DC:37:F0:DE:80:1D:B6:15:99:96:9E:CC:F6:38:AF:98:16:F1:96:F9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21EB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3Dfw3oAdthWZlp7M9jivmBbxlvk.roa Signing time: Mon 26 Aug 2024 05:33:28 +0000 ROA not before: Mon 26 Aug 2024 05:33:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8683 (0x21eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DC37F0DE801DB61599969ECCF638AF9816F196F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:09:37:52:f2:d8:2e:5b:f1:79:b9:06:92: 25:17:54:21:49:7e:b8:26:9e:35:01:c6:89:34:dc: 79:20:e4:fa:44:b9:e2:ae:83:f1:3b:d3:60:85:3b: a7:9e:6b:f2:fa:e2:7e:af:97:9a:03:14:be:37:33: 62:8f:fb:9d:45:68:ad:ac:d5:8a:e8:fb:39:3d:8b: 05:04:e2:de:b7:63:43:1f:47:7f:a7:8d:5f:e2:7e: 0c:d1:8d:c6:fe:89:26:fe:97:05:dc:be:60:ce:df: 11:a2:48:73:59:8a:40:80:10:7c:eb:c2:77:9a:80: 97:ec:dc:10:24:f7:cc:28:a8:59:a5:5d:6a:98:3f: 7a:f6:fc:50:63:e5:5f:1c:3d:bd:bc:83:30:7c:5a: 64:fc:8f:ef:e5:2b:85:a7:e1:5d:ee:64:20:d0:e1: d1:22:5d:bf:5c:84:7f:8e:39:b3:2b:f6:a2:ef:73: d9:a2:b7:58:81:6e:40:79:22:6c:d4:95:86:61:70: 0f:20:eb:f4:9d:51:ab:bd:62:ad:d4:46:9d:cf:c0: 44:12:98:97:13:39:32:bf:cf:11:64:01:48:6d:41: 97:ce:6a:40:4e:03:a9:06:e2:42:78:60:ed:63:a7: 40:53:3c:6a:de:bc:18:c1:76:ba:d4:51:52:3e:9f: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:F0:DE:80:1D:B6:15:99:96:9E:CC:F6:38:AF:98:16:F1:96:F9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3Dfw3oAdthWZlp7M9jivmBbxlvk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.186.0/23 Signature Algorithm: sha256WithRSAEncryption 66:81:1f:f7:23:bb:7a:66:9b:9c:17:3a:d7:01:01:62:e9:0f: 1e:09:e5:c1:d1:d4:a0:a2:cd:99:22:85:c5:38:63:83:59:a3: 79:8c:b0:66:d0:5d:42:db:7f:e6:e1:a0:e6:2a:26:b2:dd:43: 8e:48:94:3e:e7:fa:b4:41:7c:79:a7:e1:d2:d6:0e:f5:db:85: 07:84:5f:96:ca:50:95:31:54:58:78:c0:b0:c1:97:50:35:2d: f1:f0:bf:ba:18:64:2e:b0:17:45:ba:ce:4a:95:c0:3e:fa:4b: f5:83:8e:a8:56:12:90:cd:ea:2e:62:1f:d9:8e:ff:5b:29:b1: 1e:c4:47:d9:ec:f2:d4:ba:aa:91:2b:6b:b6:60:47:16:92:e6: d1:a9:ed:cf:c3:f5:89:45:f2:36:bd:78:ca:98:54:8e:c6:32: ae:f5:7e:ea:e7:cf:1b:7f:60:c8:03:61:f7:89:48:cf:3c:46: 3e:24:5c:a3:d7:ca:9e:b7:7a:77:2c:ec:fb:84:5a:d0:b1:4a: a5:2a:9d:d2:02:14:43:14:96:f8:be:4f:36:a3:7f:0c:5f:0f: d4:22:95:63:b7:53:4f:7b:92:4d:4a:09:45:03:57:86:eb:ed: d2:e7:f3:e1:9c:78:6d:1d:ea:e9:1e:0c:9f:59:08:94:be:fc: 18:76:ce:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERDMzdGMERFODAxREI2 MTU5OTk2OUVDQ0Y2MzhBRjk4MTZGMTk2RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtKgk3UvLYLlvxebkGkiUXVCFJfrgmnjUBxok03Hkg5PpEueKu g/E702CFO6eea/L64n6vl5oDFL43M2KP+51FaK2s1Yro+zk9iwUE4t63Y0MfR3+n jV/ifgzRjcb+iSb+lwXcvmDO3xGiSHNZikCAEHzrwneagJfs3BAk98woqFmlXWqY P3r2/FBj5V8cPb28gzB8WmT8j+/lK4Wn4V3uZCDQ4dEiXb9chH+OObMr9qLvc9mi t1iBbkB5ImzUlYZhcA8g6/SdUau9Yq3URp3PwEQSmJcTOTK/zxFkAUhtQZfOakBO A6kG4kJ4YO1jp0BTPGrevBjBdrrUUVI+n3SJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3Dfw3oAdthWZlp7M9jivmBbxlvkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNEZnczb0FkdGhXWmxwN005 aml2bUJieGx2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2rowDQYJKoZIhvcNAQELBQADggEBAGaBH/cju3pmm5wXOtcBAWLpDx4J5cHR1KCi zZkihcU4Y4NZo3mMsGbQXULbf+bhoOYqJrLdQ45IlD7n+rRBfHmn4dLWDvXbhQeE X5bKUJUxVFh4wLDBl1A1LfHwv7oYZC6wF0W6zkqVwD76S/WDjqhWEpDN6i5iH9mO /1spsR7ER9ns8tS6qpEra7ZgRxaS5tGp7c/D9YlF8ja9eMqYVI7GMq71furnzxt/ YMgDYfeJSM88Rj4kXKPXyp63encs7PuEWtCxSqUqndICFEMUlvi+TzajfwxfD9Qi lWO3U097kk1KCUUDV4br7dLn8+GceG0d6ukeDJ9ZCJS+/Bh2zl4= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org