$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Arjcv61war_nnInkG5A0pg2hKQg.roa File: Arjcv61war_nnInkG5A0pg2hKQg.roa (raw, json) Hash identifier: gy3H0cBDT7yJs90Xy72q4zffmTBPdYEIRYOITxdwY7w= Subject key identifier: 02:B8:DC:BF:AD:70:6A:BF:E7:9C:89:E4:1B:90:34:A6:0D:A1:29:08 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 222C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Arjcv61war_nnInkG5A0pg2hKQg.roa Signing time: Mon 26 Aug 2024 05:33:45 +0000 ROA not before: Mon 26 Aug 2024 05:33:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.16.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8748 (0x222c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=02B8DCBFAD706ABFE79C89E41B9034A60DA12908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:8a:a2:8e:a3:a2:40:86:8e:94:83:77:74: c1:37:8d:f9:1b:72:05:0b:df:f3:10:0d:4b:e1:0a: 84:21:84:2c:3f:6c:31:1a:29:60:02:9d:4b:f2:58: 29:ed:11:67:ba:4b:90:61:2b:15:3d:0f:b1:a6:05: d6:c2:f2:54:e0:9a:98:b9:3a:4f:3c:78:e4:bc:76: 58:e6:73:70:ae:45:43:f7:d6:ca:6e:3e:03:65:b6: 70:c2:f3:22:fe:4a:0b:6a:db:27:36:0b:f9:b4:2b: b1:15:eb:60:c6:16:2d:7f:23:94:cf:46:6f:0c:3b: 81:48:25:ca:c1:27:ac:19:c2:8c:fc:dd:9b:6f:01: 57:0f:d1:ab:fd:e4:af:fc:cf:c3:c8:0d:cb:c8:dd: 2b:16:5f:8a:0e:13:22:95:ff:a6:d6:4d:6c:73:ad: f1:37:60:b1:ee:33:be:36:2f:10:83:04:8d:d7:10: 34:70:a8:27:1d:d7:5d:6f:eb:6b:3b:6a:01:c5:8b: ec:57:34:2c:6f:b2:a4:0d:d0:31:e8:85:21:de:60: c4:83:b7:85:24:1e:f6:02:b4:ea:9b:a5:d1:a2:dd: 48:b3:06:e1:0e:12:5e:40:5d:a6:68:ee:30:22:48: 5a:8a:6a:57:ca:45:91:ac:38:84:20:8e:24:9d:a2: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:DC:BF:AD:70:6A:BF:E7:9C:89:E4:1B:90:34:A6:0D:A1:29:08 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Arjcv61war_nnInkG5A0pg2hKQg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.16.0/20 Signature Algorithm: sha256WithRSAEncryption 56:c1:77:df:29:1d:16:16:f5:26:83:14:85:37:c3:ee:15:f1: ad:6f:0e:3d:2b:c9:7f:18:4a:10:8c:90:04:d1:8b:a6:92:87: 67:25:f9:34:46:35:56:a4:95:f3:ec:43:8c:b0:cc:b0:14:92: 30:fe:5f:67:9c:52:8b:f6:4a:d6:07:14:e6:bf:26:da:01:ac: b9:06:c6:db:21:da:a3:e5:cc:87:00:4b:3d:56:9a:40:15:20: 5e:b2:b0:c1:d9:4a:44:1b:44:3c:55:50:68:f2:c2:e8:91:5c: ce:e8:06:bc:27:88:cc:2a:ff:f8:cc:c7:29:be:ce:f1:5c:5b: 04:42:77:9b:22:eb:bc:e4:fc:99:7a:cd:e3:1a:2d:02:0e:4e: 64:64:52:bd:cc:b2:0c:d8:ae:f7:a8:0c:a4:88:dc:2b:62:d6: 25:a0:f2:16:c7:df:84:7d:ee:25:17:64:d3:f2:1a:29:44:88: a0:ce:9e:35:64:98:f5:96:24:5f:e2:08:32:bf:ba:44:d0:a0: 2b:2c:62:f8:b9:61:4b:84:ed:ad:a4:39:50:4c:28:d7:af:45: bb:cc:f3:51:59:82:5a:55:b9:4e:fc:f1:8d:cb:a5:db:2f:0a: 79:ff:ce:01:6e:99:90:a3:85:cd:dc:f7:b4:e2:06:10:c1:2c: 25:36:fa:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyQjhEQ0JGQUQ3MDZB QkZFNzlDODlFNDFCOTAzNEE2MERBMTI5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu/YqijqOiQIaOlIN3dME3jfkbcgUL3/MQDUvhCoQhhCw/bDEa KWACnUvyWCntEWe6S5BhKxU9D7GmBdbC8lTgmpi5Ok88eOS8dljmc3CuRUP31spu PgNltnDC8yL+Sgtq2yc2C/m0K7EV62DGFi1/I5TPRm8MO4FIJcrBJ6wZwoz83Ztv AVcP0av95K/8z8PIDcvI3SsWX4oOEyKV/6bWTWxzrfE3YLHuM742LxCDBI3XEDRw qCcd111v62s7agHFi+xXNCxvsqQN0DHohSHeYMSDt4UkHvYCtOqbpdGi3UizBuEO El5AXaZo7jAiSFqKalfKRZGsOIQgjiSdopD1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUArjcv61war/nnInkG5A0pg2hKQgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FyamN2NjF3YXJfbm5JbmtH NUEwcGcyaEtRZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 2hAwDQYJKoZIhvcNAQELBQADggEBAFbBd98pHRYW9SaDFIU3w+4V8a1vDj0ryX8Y ShCMkATRi6aSh2cl+TRGNVaklfPsQ4ywzLAUkjD+X2ecUov2StYHFOa/JtoBrLkG xtsh2qPlzIcASz1WmkAVIF6ysMHZSkQbRDxVUGjywuiRXM7oBrwniMwq//jMxym+ zvFcWwRCd5si67zk/Jl6zeMaLQIOTmRkUr3MsgzYrveoDKSI3Cti1iWg8hbH34R9 7iUXZNPyGilEiKDOnjVkmPWWJF/iCDK/ukTQoCssYvi5YUuE7a2kOVBMKNevRbvM 81FZglpVuU788Y3LpdsvCnn/zgFumZCjhc3c97TiBhDBLCU2+qo= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org