$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa File: 3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa (raw, json) Hash identifier: Gxrx6GsSOUHUbsfxWaRC3OV0/6kDQbvBt0jeqm2hisY= Subject key identifier: DD:97:2B:5C:16:4A:47:43:37:94:E3:F9:A3:CA:F6:10:73:62:7B:90 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21E3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa Signing time: Mon 26 Aug 2024 05:33:26 +0000 ROA not before: Mon 26 Aug 2024 05:33:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.58.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8675 (0x21e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DD972B5C164A47433794E3F9A3CAF61073627B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:5e:38:7d:4d:18:57:8d:24:fe:e2:e2:d0: 74:d3:9a:4f:b2:1a:98:b8:36:83:ed:97:f7:1c:2c: a3:a7:96:d9:4b:01:b7:a1:2b:84:d1:71:64:e7:5d: d2:c5:49:59:c2:12:49:52:a8:b0:c1:0c:98:af:fd: 4c:4a:94:8d:d7:71:08:57:72:e8:28:56:3d:87:79: f9:ee:94:b0:51:99:55:3e:48:80:e1:3c:7d:60:74: 79:cc:ea:fd:a5:68:b8:2b:c3:3a:59:b5:ce:1e:ed: a8:99:d7:ac:5a:26:71:83:e7:4a:8a:6d:dc:56:df: 8f:71:8c:b6:48:46:cc:6f:c1:a8:68:1c:bd:5c:90: c7:1a:6d:74:94:66:f1:09:3a:5c:ed:a0:cf:90:cd: 6d:03:45:d1:af:98:f3:5a:14:4e:d3:de:d1:86:da: fd:3d:dd:b3:d1:73:cc:83:d6:60:73:f4:ca:b0:f6: e1:a0:f6:2d:67:40:57:17:d7:8e:25:bc:d5:1d:c9: 17:63:f2:a3:bf:54:77:3c:2f:8c:6c:27:fb:ca:b1: c0:aa:1a:da:68:91:96:01:cd:59:e8:17:1a:a5:03: dd:43:6d:b3:49:5d:2e:6b:cd:db:5e:69:2c:9d:f7: ab:2a:3f:ba:c1:6c:b8:05:5e:d0:a9:8f:a9:40:43: 02:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:97:2B:5C:16:4A:47:43:37:94:E3:F9:A3:CA:F6:10:73:62:7B:90 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.96.0/20 Signature Algorithm: sha256WithRSAEncryption 51:2f:7b:11:5e:b5:db:45:3c:03:44:83:84:23:44:96:3f:8b: 61:de:a1:8e:85:78:6c:32:f5:3e:6c:ba:c1:09:57:d1:ce:e2: 69:62:a6:1a:a7:25:5e:e6:24:4a:87:1f:d5:2d:4e:e2:66:07: c8:0b:40:ac:0f:16:9c:93:a2:51:ab:fd:a8:8c:9b:fb:39:d4: 0b:a6:0d:19:59:f4:f4:3a:85:b5:47:5b:97:dc:2c:6c:92:1a: f7:ab:16:f3:17:5e:f6:68:fd:7b:aa:46:9a:1b:06:e4:00:57: 41:86:90:fb:4a:fb:1a:26:9f:16:e1:84:4c:2b:47:f6:84:82: 6c:0c:10:7f:bc:28:81:72:0f:ea:66:22:ba:2d:70:d7:d4:c1: d0:9d:d8:d4:f0:54:ec:8b:b0:0b:bf:60:85:2d:5c:95:a8:3a: af:39:c8:aa:2e:36:c7:e8:27:84:02:18:11:01:aa:19:89:87: 94:0f:34:04:ea:fd:f8:75:9e:37:1f:a4:1a:07:84:79:46:d7: 20:38:b2:f3:64:cc:84:ab:03:2a:4d:af:d7:b3:24:bb:89:a3: 9f:e3:5f:bd:ab:c1:56:73:8c:d3:c1:5e:a4:e1:a4:22:ce:6d: 3a:73:50:6d:e0:cc:40:4a:17:ec:d4:36:21:45:54:89:26:b9: a0:14:17:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEREOTcyQjVDMTY0QTQ3 NDMzNzk0RTNGOUEzQ0FGNjEwNzM2MjdCOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLyV44fU0YV40k/uLi0HTTmk+yGpi4NoPtl/ccLKOnltlLAbeh K4TRcWTnXdLFSVnCEklSqLDBDJiv/UxKlI3XcQhXcugoVj2HefnulLBRmVU+SIDh PH1gdHnM6v2laLgrwzpZtc4e7aiZ16xaJnGD50qKbdxW349xjLZIRsxvwahoHL1c kMcabXSUZvEJOlztoM+QzW0DRdGvmPNaFE7T3tGG2v093bPRc8yD1mBz9Mqw9uGg 9i1nQFcX144lvNUdyRdj8qO/VHc8L4xsJ/vKscCqGtpokZYBzVnoFxqlA91DbbNJ XS5rzdteaSyd96sqP7rBbLgFXtCpj6lAQwJJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3ZcrXBZKR0M3lOP5o8r2EHNie5AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNaY3JYQlpLUjBNM2xPUDVv OHIyRUhOaWU1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OmAwDQYJKoZIhvcNAQELBQADggEBAFEvexFetdtFPANEg4QjRJY/i2HeoY6FeGwy 9T5susEJV9HO4mliphqnJV7mJEqHH9UtTuJmB8gLQKwPFpyTolGr/aiMm/s51Aum DRlZ9PQ6hbVHW5fcLGySGverFvMXXvZo/XuqRpobBuQAV0GGkPtK+xomnxbhhEwr R/aEgmwMEH+8KIFyD+pmIrotcNfUwdCd2NTwVOyLsAu/YIUtXJWoOq85yKouNsfo J4QCGBEBqhmJh5QPNATq/fh1njcfpBoHhHlG1yA4svNkzISrAypNr9ezJLuJo5/j X72rwVZzjNPBXqThpCLObTpzUG3gzEBKF+zUNiFFVIkmuaAUF1Q= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:44 2024 by rpki-client on console-fra.rpki-client.org