$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bd3rXRkHlmGseRUYHYBYITrUWwU.roa File: Bd3rXRkHlmGseRUYHYBYITrUWwU.roa (raw, json) Hash identifier: lMH8Pjb0SfH2J5YGO0Ux/c1kL1TwMTxCTiu+wGkWQYs= Subject key identifier: 05:DD:EB:5D:19:07:96:61:AC:79:15:18:1D:80:58:21:3A:D4:5B:05 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21A9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bd3rXRkHlmGseRUYHYBYITrUWwU.roa Signing time: Mon 26 Aug 2024 05:33:13 +0000 ROA not before: Mon 26 Aug 2024 05:33:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 114.198.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8617 (0x21a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=05DDEB5D19079661AC7915181D8058213AD45B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:83:8b:85:74:b6:d1:b4:e3:d8:0f:c5:c5: 8c:88:31:c1:f2:e0:04:e6:9e:3a:af:72:01:7d:26: 98:76:fe:1f:36:7b:d2:56:54:fa:b8:2f:cb:b0:d0: e9:8e:77:ec:45:cb:12:77:37:2d:14:42:36:b4:0a: 7c:71:af:f9:0a:0b:9e:0e:78:84:53:c4:e5:5a:82: 59:02:fa:d0:49:1f:2f:84:15:9c:0d:fd:d9:da:3c: 99:3b:72:f0:c8:e1:b1:10:7f:1c:a1:a4:fb:a4:f5: 25:a2:7b:38:36:94:63:b1:1b:fb:d1:5c:c6:de:a6: 7a:3b:13:47:fa:fd:d9:46:ac:1a:b2:6d:7f:48:ba: 19:f6:03:bc:90:c5:01:69:8a:e0:25:42:c3:ea:48: 4c:04:5a:01:44:8a:64:68:28:c0:9b:a4:44:58:a8: 79:1d:d1:90:ee:12:5c:ab:82:84:84:49:6b:bc:69: 18:48:3b:e0:86:10:b1:a5:18:22:8e:ed:01:da:04: 2b:95:b5:4c:24:95:1a:1e:9a:53:6a:6a:c4:96:fa: 63:de:3d:39:61:0e:e2:76:8b:4e:b8:08:f0:56:3f: 79:dc:7d:77:7b:79:17:5f:ec:41:05:29:67:f9:01: ab:47:88:02:1f:42:9e:67:3f:3a:71:97:18:d7:77: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DD:EB:5D:19:07:96:61:AC:79:15:18:1D:80:58:21:3A:D4:5B:05 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bd3rXRkHlmGseRUYHYBYITrUWwU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.164.0/24 Signature Algorithm: sha256WithRSAEncryption 41:da:f9:c8:05:61:80:7a:4d:90:dd:72:29:65:fa:4a:3e:3f: 4b:2a:42:7f:67:c0:fa:4f:dd:b0:ae:b0:b5:06:d9:e4:0f:f0: df:96:1b:a7:0b:5e:89:a5:6e:3f:d3:1a:0f:e5:e1:23:a3:65: 6d:1b:69:08:bf:aa:a9:b4:4a:96:23:bb:11:cd:9c:4e:3a:69: 65:e6:52:e6:32:42:aa:59:92:88:d6:03:2a:4d:f4:95:06:c6: e7:cc:85:86:0e:8a:4e:d3:c8:e1:70:af:29:c2:2a:06:90:62: 85:c4:4d:57:fb:ed:b2:23:fd:bc:bd:e7:bf:4c:35:eb:eb:d8: 6f:d6:fe:4f:a1:50:06:a1:70:65:10:95:2c:df:b1:14:b6:b6: b3:18:98:92:49:da:b9:fb:6e:d4:12:dd:ea:47:85:7f:fe:ac: 91:26:fc:c8:3d:da:e8:72:ee:b7:79:30:df:2a:fa:41:3d:b8: 37:08:7d:15:2e:de:46:54:ac:64:39:56:2f:5f:1d:b0:25:35: cd:8a:fa:ab:3b:32:ff:47:6a:cf:56:0a:85:49:7d:dc:18:c1: f6:a4:16:39:d3:e3:87:18:74:12:c7:ad:3c:c1:f1:c9:b6:b7: 48:92:ba:9b:4f:01:a7:e9:e1:1f:00:3a:c6:bd:ba:23:55:62: 69:7c:18:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1RERFQjVEMTkwNzk2 NjFBQzc5MTUxODFEODA1ODIxM0FENDVCMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbqIOLhXS20bTj2A/FxYyIMcHy4ATmnjqvcgF9Jph2/h82e9JW VPq4L8uw0OmOd+xFyxJ3Ny0UQja0Cnxxr/kKC54OeIRTxOVaglkC+tBJHy+EFZwN /dnaPJk7cvDI4bEQfxyhpPuk9SWiezg2lGOxG/vRXMbepno7E0f6/dlGrBqybX9I uhn2A7yQxQFpiuAlQsPqSEwEWgFEimRoKMCbpERYqHkd0ZDuElyrgoSESWu8aRhI O+CGELGlGCKO7QHaBCuVtUwklRoemlNqasSW+mPePTlhDuJ2i064CPBWP3ncfXd7 eRdf7EEFKWf5AatHiAIfQp5nPzpxlxjXd+v1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBd3rXRkHlmGseRUYHYBYITrUWwUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JkM3JYUmtIbG1Hc2VSVVlI WUJZSVRyVVd3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABy xqQwDQYJKoZIhvcNAQELBQADggEBAEHa+cgFYYB6TZDdcill+ko+P0sqQn9nwPpP 3bCusLUG2eQP8N+WG6cLXomlbj/TGg/l4SOjZW0baQi/qqm0SpYjuxHNnE46aWXm UuYyQqpZkojWAypN9JUGxufMhYYOik7TyOFwrynCKgaQYoXETVf77bIj/by9579M Nevr2G/W/k+hUAahcGUQlSzfsRS2trMYmJJJ2rn7btQS3epHhX/+rJEm/Mg92uhy 7rd5MN8q+kE9uDcIfRUu3kZUrGQ5Vi9fHbAlNc2K+qs7Mv9Has9WCoVJfdwYwfak FjnT44cYdBLHrTzB8cm2t0iSuptPAafp4R8AOsa9uiNVYml8GIQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org