$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Mw2Iz97KkIc7C6aT9ueH6pCfNU.roa File: 8Mw2Iz97KkIc7C6aT9ueH6pCfNU.roa (raw, json) Hash identifier: snCj11iO+jVFz7yEIBJZz60YrrN/ZDS2u/jFItMoDxk= Subject key identifier: F0:CC:36:23:3F:7B:2A:42:1C:EC:2E:9A:4F:DB:9E:1F:AA:42:7C:D5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 221E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Mw2Iz97KkIc7C6aT9ueH6pCfNU.roa Signing time: Mon 26 Aug 2024 05:33:41 +0000 ROA not before: Mon 26 Aug 2024 05:33:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8734 (0x221e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F0CC36233F7B2A421CEC2E9A4FDB9E1FAA427CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:c3:6d:09:72:36:41:1c:0b:2c:09:93:61: 7d:62:67:0f:7c:01:65:fd:b5:33:ed:db:eb:d7:72: a2:c4:dd:42:67:25:c2:eb:76:dc:41:c9:fa:cf:00: 90:95:b2:e3:c7:d0:2e:b5:80:05:6b:39:59:d4:f5: 8c:01:cd:0a:c7:9b:29:94:d5:3a:84:6f:db:04:4b: 1a:3c:e4:4a:ab:37:20:55:79:e3:58:c8:82:52:d1: df:ce:77:23:98:f2:2c:ec:62:ad:40:18:24:2b:c3: 7b:d1:10:85:bb:4a:5d:01:9b:ff:53:6e:4e:be:d3: 69:95:96:08:33:1b:4a:f6:81:08:45:5e:97:2c:1f: 3e:39:31:cd:44:75:cb:98:5d:c4:7a:17:1d:7d:bc: 39:5a:4c:f3:33:c2:a4:9e:60:fe:51:a1:31:2e:b2: 96:2a:02:b9:6d:08:b0:9c:56:4d:42:36:45:25:41: e3:8b:cd:0b:67:0b:58:17:a4:1e:be:7a:9a:70:79: c9:56:e5:01:0f:34:cb:86:8d:fd:8c:22:ba:26:a8: 3d:81:d6:85:a6:4a:64:9a:a2:e7:f8:da:a6:29:7a: 0c:58:02:82:c3:d3:7b:61:06:f2:c2:c6:37:60:f1: d3:9f:a5:99:de:65:cb:35:8f:a5:f4:00:09:b6:09: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CC:36:23:3F:7B:2A:42:1C:EC:2E:9A:4F:DB:9E:1F:AA:42:7C:D5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Mw2Iz97KkIc7C6aT9ueH6pCfNU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:7b:fa:d0:03:01:54:71:82:98:f3:a7:6f:f5:b4:6f:4c:eb: 22:12:fa:07:57:f0:6f:b1:c0:88:d3:b8:d1:0d:73:e3:5e:b1: f3:4b:7d:fb:68:a6:df:47:e6:cc:50:78:70:8f:cb:9e:69:0b: 3c:0e:9c:8d:9c:6c:3c:f9:78:7a:b1:90:16:96:26:0c:67:05: 22:55:83:ed:e2:d9:a2:ca:e6:d8:c9:bb:b8:27:d3:e3:85:9f: ab:50:61:12:db:5d:74:41:96:e1:28:6f:4b:ef:ae:25:66:62: 13:0b:62:c2:97:b7:44:80:ae:d6:1f:9e:1e:bd:5e:3b:4e:5a: f5:bd:53:01:81:64:64:ff:94:18:4c:07:8e:7e:2a:06:4f:72: c5:ec:66:5f:3c:84:85:5c:84:f5:1b:6b:8e:d3:d1:fa:a7:66: 07:6d:63:22:d1:02:37:ac:a2:03:52:48:a4:2a:13:31:0e:db: 66:9a:e8:b6:74:5d:2e:8a:e3:a0:7f:ad:5b:84:a7:66:4c:55: 54:d9:1c:36:3b:b7:87:ea:f5:52:b3:c0:ff:10:e8:38:99:22: 87:f3:fd:90:38:fe:d3:8b:81:20:af:d3:b8:3b:b2:11:c8:b8: 8c:8e:c2:83:a0:32:7d:b4:83:6d:11:d4:de:56:af:d9:b8:12: 4b:e6:58:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYwQ0MzNjIzM0Y3QjJB NDIxQ0VDMkU5QTRGREI5RTFGQUE0MjdDRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhT8NtCXI2QRwLLAmTYX1iZw98AWX9tTPt2+vXcqLE3UJnJcLr dtxByfrPAJCVsuPH0C61gAVrOVnU9YwBzQrHmymU1TqEb9sESxo85EqrNyBVeeNY yIJS0d/OdyOY8izsYq1AGCQrw3vREIW7Sl0Bm/9Tbk6+02mVlggzG0r2gQhFXpcs Hz45Mc1EdcuYXcR6Fx19vDlaTPMzwqSeYP5RoTEuspYqArltCLCcVk1CNkUlQeOL zQtnC1gXpB6+eppweclW5QEPNMuGjf2MIromqD2B1oWmSmSaouf42qYpegxYAoLD 03thBvLCxjdg8dOfpZneZcs1j6X0AAm2CUcnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8Mw2Iz97KkIc7C6aT9ueH6pCfNUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhNdzJJejk3S2tJYzdDNmFU OXVlSDZwQ2ZOVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2pAwDQYJKoZIhvcNAQELBQADggEBAH57+tADAVRxgpjzp2/1tG9M6yIS+gdX8G+x wIjTuNENc+NesfNLfftopt9H5sxQeHCPy55pCzwOnI2cbDz5eHqxkBaWJgxnBSJV g+3i2aLK5tjJu7gn0+OFn6tQYRLbXXRBluEob0vvriVmYhMLYsKXt0SArtYfnh69 XjtOWvW9UwGBZGT/lBhMB45+KgZPcsXsZl88hIVchPUba47T0fqnZgdtYyLRAjes ogNSSKQqEzEO22aa6LZ0XS6K46B/rVuEp2ZMVVTZHDY7t4fq9VKzwP8Q6DiZIofz /ZA4/tOLgSCv07g7shHIuIyOwoOgMn20g20R1N5Wr9m4EkvmWKM= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org