$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4x6ttm7cPIY6W5JilqHxGYdxLrY.roa File: 4x6ttm7cPIY6W5JilqHxGYdxLrY.roa (raw, json) Hash identifier: 5nOwK/oaors1NsQKd55SFaWQnvFjQIEBcAMH9X/rgns= Subject key identifier: E3:1E:AD:B6:6E:DC:3C:86:3A:5B:92:62:96:A1:F1:19:87:71:2E:B6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 218D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4x6ttm7cPIY6W5JilqHxGYdxLrY.roa Signing time: Mon 26 Aug 2024 05:33:06 +0000 ROA not before: Mon 26 Aug 2024 05:33:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 119.77.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8589 (0x218d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E31EADB66EDC3C863A5B926296A1F11987712EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:bd:35:a6:a9:b7:d0:ee:98:68:8b:8e:62: 44:74:f2:68:ba:2b:a8:3d:fd:9b:b7:87:d9:14:bd: 64:57:df:a0:9f:4e:9c:e1:71:45:e0:47:56:98:f8: 78:18:2c:b2:8d:59:14:19:f7:90:47:40:16:5d:68: 96:1b:ac:6c:26:8a:c7:c4:6e:6d:e2:34:70:f9:3a: 18:31:43:7f:cb:83:fe:e2:77:a8:e9:a0:c4:16:46: 4a:21:b3:73:a6:f3:ff:48:75:4a:5a:45:77:ea:25: 94:02:fe:7b:ae:e8:27:03:15:b7:a6:9c:67:ad:53: 55:e4:ff:66:77:0a:c5:f0:b7:1c:b4:33:b8:97:e8: bf:10:63:c1:7e:0a:f8:5b:d8:dc:dc:cb:e7:cf:40: 83:4c:51:42:89:7f:41:b9:ca:04:92:a3:aa:81:16: eb:8f:2e:db:64:12:1b:8a:ee:7e:a6:df:ee:83:c2: e1:96:d6:b5:58:30:a6:7d:15:c0:a6:51:45:64:95: e0:09:7c:f8:59:c5:7a:86:d3:e8:2f:77:f5:01:3f: 96:d5:ea:75:51:72:d3:0e:d0:01:7f:aa:2d:cf:57: 24:c2:d3:14:93:06:69:07:23:96:db:60:ea:42:bf: 95:3d:a5:5c:bd:77:5e:38:86:d4:05:c5:cf:86:e4: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1E:AD:B6:6E:DC:3C:86:3A:5B:92:62:96:A1:F1:19:87:71:2E:B6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4x6ttm7cPIY6W5JilqHxGYdxLrY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.132.0/22 Signature Algorithm: sha256WithRSAEncryption 90:f6:a1:b8:55:45:06:e2:da:8d:98:96:2f:a4:90:cb:68:4b: 5c:02:49:7a:f4:06:c6:50:ae:24:78:c7:ab:c1:a6:d9:b4:07: 8f:72:24:4c:a6:ad:7f:34:3b:13:b7:1f:3e:d9:9b:bd:2b:9a: d9:08:22:4b:31:b3:bd:d8:65:b9:95:31:4a:f5:07:61:86:46: ca:1f:47:43:a9:50:43:6c:cd:e7:db:00:fc:cb:0b:cd:4c:4f: 24:75:0e:84:44:a7:00:64:10:e2:a3:48:2e:d7:5a:69:e0:d8: 3f:63:e4:57:df:97:33:d2:46:81:ba:18:97:05:c0:99:be:da: bf:a6:0d:9c:e2:78:f4:f1:50:80:32:d4:82:b5:be:40:1c:7d: 75:dd:85:0a:c4:c9:c8:e7:1a:1f:d8:96:21:d6:a9:82:e1:22: de:8b:24:d7:5b:ac:69:98:98:95:8f:e6:9b:bc:f3:4b:70:29: 05:16:fa:41:1f:01:54:bb:ce:c3:06:3a:ae:32:f4:01:eb:b1: ec:b2:01:b9:f0:70:fc:8b:89:f0:02:6d:09:8a:e5:0f:50:d2: 54:5b:4a:26:8a:fb:9d:3f:2d:cd:8e:92:05:cd:78:30:cd:c3: 98:3d:ce:19:10:d9:27:e1:93:75:b8:48:b2:a9:36:0c:44:de: 1a:9d:44:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzMUVBREI2NkVEQzND ODYzQTVCOTI2Mjk2QTFGMTE5ODc3MTJFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDapL01pqm30O6YaIuOYkR08mi6K6g9/Zu3h9kUvWRX36CfTpzh cUXgR1aY+HgYLLKNWRQZ95BHQBZdaJYbrGwmisfEbm3iNHD5OhgxQ3/Lg/7id6jp oMQWRkohs3Om8/9IdUpaRXfqJZQC/nuu6CcDFbemnGetU1Xk/2Z3CsXwtxy0M7iX 6L8QY8F+Cvhb2Nzcy+fPQINMUUKJf0G5ygSSo6qBFuuPLttkEhuK7n6m3+6DwuGW 1rVYMKZ9FcCmUUVkleAJfPhZxXqG0+gvd/UBP5bV6nVRctMO0AF/qi3PVyTC0xST BmkHI5bbYOpCv5U9pVy9d144htQFxc+G5EzRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4x6ttm7cPIY6W5JilqHxGYdxLrYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzR4NnR0bTdjUElZNlc1Smls cUh4R1lkeExyWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3 TYQwDQYJKoZIhvcNAQELBQADggEBAJD2obhVRQbi2o2Yli+kkMtoS1wCSXr0BsZQ riR4x6vBptm0B49yJEymrX80OxO3Hz7Zm70rmtkIIksxs73YZbmVMUr1B2GGRsof R0OpUENszefbAPzLC81MTyR1DoREpwBkEOKjSC7XWmng2D9j5FfflzPSRoG6GJcF wJm+2r+mDZziePTxUIAy1IK1vkAcfXXdhQrEycjnGh/YliHWqYLhIt6LJNdbrGmY mJWP5pu880twKQUW+kEfAVS7zsMGOq4y9AHrseyyAbnwcPyLifACbQmK5Q9Q0lRb SiaK+50/Lc2OkgXNeDDNw5g9zhkQ2Sfhk3W4SLKpNgxE3hqdRC8= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:24 2024 by rpki-client on console-ams.rpki-client.org