$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4hKeiLsCQ2wL8qfzVHDaBShwcys.roa File: 4hKeiLsCQ2wL8qfzVHDaBShwcys.roa (raw, json) Hash identifier: PK7Rl9+W2rgjE+cCrenTIiy0xctdPoIP7A6Wgh4KrlI= Subject key identifier: E2:12:9E:88:BB:02:43:6C:0B:F2:A7:F3:54:70:DA:05:28:70:73:2B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2296 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4hKeiLsCQ2wL8qfzVHDaBShwcys.roa Signing time: Mon 26 Aug 2024 05:34:09 +0000 ROA not before: Mon 26 Aug 2024 05:34:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8854 (0x2296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E2129E88BB02436C0BF2A7F35470DA052870732B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:38:02:24:8a:27:30:45:18:70:21:11:53: 2a:8b:85:f7:d0:9a:a4:d1:b8:e8:58:ae:c1:4d:4e: 9e:3f:1c:6e:79:bb:07:54:40:4f:49:92:24:23:1d: 93:1b:b5:59:9d:42:7c:db:f4:42:62:34:bb:df:65: 2e:7d:87:a7:a3:b4:01:48:df:15:7f:df:3e:54:00: 05:27:7e:d6:b7:9a:72:c0:0d:d6:22:3b:46:33:7a: 7b:28:52:a5:32:ed:9e:aa:f4:ca:73:a5:7a:30:a6: a0:13:1b:68:7e:e9:a7:15:96:f5:a8:82:fe:e5:c3: 8d:ee:6a:cb:d1:a6:ff:09:73:2a:1d:41:02:49:b3: 3a:e0:d8:76:dd:c4:70:20:1a:74:54:c2:82:b6:7a: 08:4b:ec:92:b4:51:7b:4d:d9:d0:fb:37:46:af:a7: 1e:d8:2d:f1:5d:cf:d4:2a:95:e2:58:c2:83:16:10: d0:1c:25:bc:32:32:c0:b6:e4:f2:1c:6e:e8:5c:ef: 39:7a:bb:51:82:0d:a8:55:4d:99:d7:66:e9:0e:3f: aa:08:40:64:60:ba:2a:a3:ac:ee:08:e7:5b:91:80: ec:7b:19:3a:79:cd:26:73:75:b5:c9:00:2d:b3:01: 54:17:c5:5b:a1:75:52:5b:f5:6f:6c:5a:54:18:45: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:12:9E:88:BB:02:43:6C:0B:F2:A7:F3:54:70:DA:05:28:70:73:2B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4hKeiLsCQ2wL8qfzVHDaBShwcys.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 20:55:50:16:4d:3d:39:2f:86:7a:e4:00:4d:b1:b8:ab:98:c0: 3b:d9:0d:30:14:ec:83:65:02:3c:16:a0:ca:a0:0d:f9:47:56: 81:0a:cf:f4:cb:62:f8:cf:cf:ff:3f:29:55:a1:15:87:50:51: c4:f0:e7:69:8c:be:cf:4d:c2:21:ba:19:67:c0:43:62:20:1f: 6b:22:f7:e2:09:08:d8:a3:77:84:33:6a:91:c6:9c:b5:a5:41: 9d:f1:af:dd:ff:e6:fb:e5:86:41:2c:7e:e8:f4:b6:c9:91:c9: 15:45:42:18:16:fa:65:34:aa:3b:78:d6:81:cb:39:87:f3:53: 07:27:7b:bf:55:f1:61:99:fc:aa:94:d6:6b:08:f3:61:e9:67: 68:9a:10:b8:99:3a:62:5b:ee:2c:bf:8e:57:34:2b:07:11:98: 52:af:f3:45:f6:98:56:49:0b:90:0b:bd:45:2b:74:e7:a5:04: 16:a3:80:a7:f3:45:78:45:1b:59:5c:1d:7c:3e:3f:3c:d1:3a: fd:51:17:db:b9:81:09:c8:aa:6a:57:97:3b:57:fc:20:62:54: fd:d7:99:cf:fb:9d:77:94:56:8f:46:fe:89:ca:03:a7:de:bb: a7:c3:32:05:22:16:03:fe:42:e1:9f:44:19:f0:1b:b8:8f:a8: 27:57:03:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyMTI5RTg4QkIwMjQz NkMwQkYyQTdGMzU0NzBEQTA1Mjg3MDczMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVMDgCJIonMEUYcCERUyqLhffQmqTRuOhYrsFNTp4/HG55uwdU QE9JkiQjHZMbtVmdQnzb9EJiNLvfZS59h6ejtAFI3xV/3z5UAAUnfta3mnLADdYi O0YzensoUqUy7Z6q9MpzpXowpqATG2h+6acVlvWogv7lw43uasvRpv8JcyodQQJJ szrg2HbdxHAgGnRUwoK2eghL7JK0UXtN2dD7N0avpx7YLfFdz9QqleJYwoMWENAc JbwyMsC25PIcbuhc7zl6u1GCDahVTZnXZukOP6oIQGRguiqjrO4I51uRgOx7GTp5 zSZzdbXJAC2zAVQXxVuhdVJb9W9sWlQYRW1tAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4hKeiLsCQ2wL8qfzVHDaBShwcyswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRoS2VpTHNDUTJ3TDhxZnpW SERhQlNod2N5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXT TCAwDQYJKoZIhvcNAQELBQADggEBACBVUBZNPTkvhnrkAE2xuKuYwDvZDTAU7INl AjwWoMqgDflHVoEKz/TLYvjPz/8/KVWhFYdQUcTw52mMvs9NwiG6GWfAQ2IgH2si 9+IJCNijd4QzapHGnLWlQZ3xr93/5vvlhkEsfuj0tsmRyRVFQhgW+mU0qjt41oHL OYfzUwcne79V8WGZ/KqU1msI82HpZ2iaELiZOmJb7iy/jlc0KwcRmFKv80X2mFZJ C5ALvUUrdOelBBajgKfzRXhFG1lcHXw+PzzROv1RF9u5gQnIqmpXlztX/CBiVP3X mc/7nXeUVo9G/onKA6feu6fDMgUiFgP+QuGfRBnwG7iPqCdXAzM= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:40 2024 by rpki-client on console-ams.rpki-client.org