$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E56v7MBFMdc4SmHZjwBLGOFrhgY.roa File: E56v7MBFMdc4SmHZjwBLGOFrhgY.roa (raw, json) Hash identifier: T/G0p1uCvDTvxE4auLOzUPB45SuiiWlxDxtM2Xn6s60= Subject key identifier: 13:9E:AF:EC:C0:45:31:D7:38:4A:61:D9:8F:00:4B:18:E1:6B:86:06 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21F3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E56v7MBFMdc4SmHZjwBLGOFrhgY.roa Signing time: Mon 26 Aug 2024 05:33:30 +0000 ROA not before: Mon 26 Aug 2024 05:33:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.64.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8691 (0x21f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=139EAFECC04531D7384A61D98F004B18E16B8606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:07:31:e9:21:6a:41:2e:2b:e5:66:83:b4: 44:f9:1a:13:56:80:57:ee:79:86:41:4b:01:a1:fc: 30:c6:85:8c:47:8d:cb:11:61:3d:89:14:78:7e:22: 56:c3:49:0b:58:89:1e:39:49:f6:b3:92:33:05:49: 4c:1c:43:30:a2:0c:0c:1d:37:76:ff:21:b6:1e:fa: 66:ee:e8:32:bd:dc:7c:3b:98:25:b9:ba:61:10:8b: 0d:36:46:0b:f0:7e:33:ed:63:2b:81:b4:a4:e8:f7: 97:50:f8:e8:6a:a2:0f:d6:6a:fc:42:8c:cd:72:e9: 8b:28:d9:db:8a:03:65:48:61:fa:0f:1b:4f:97:9c: be:96:1a:45:e6:75:1a:aa:c6:41:e3:4e:05:27:4d: ec:ff:b5:ae:d7:e5:9c:bf:bd:33:fa:e5:29:cc:83: bf:b4:3c:88:13:5c:4d:9c:b9:fa:0a:36:d6:59:48: 5d:3c:73:fb:ae:a3:ea:1a:d4:b5:3b:ce:51:09:8a: c9:67:02:03:39:3f:fb:72:7c:dc:05:59:b8:9b:a9: 8f:c7:1d:2f:30:61:b0:b1:76:5d:f9:a3:f2:c9:9c: 80:da:7c:02:b6:71:48:97:e6:b1:68:c9:ef:30:40: ee:83:f1:a1:70:06:81:b9:6a:b2:dd:1b:8f:5a:d7: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9E:AF:EC:C0:45:31:D7:38:4A:61:D9:8F:00:4B:18:E1:6B:86:06 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E56v7MBFMdc4SmHZjwBLGOFrhgY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.24.0/21 Signature Algorithm: sha256WithRSAEncryption 73:43:73:34:1a:79:2b:c5:36:d7:46:dc:1a:09:d8:0b:2b:52: bd:b5:72:fe:ae:19:5f:4b:7e:75:79:a6:de:60:ef:a2:b2:9e: 6a:7e:5b:b7:5e:af:89:7f:36:fa:c5:fd:6a:ad:d0:38:37:8f: ac:85:c1:c4:15:90:80:dd:a1:12:ae:f0:00:5e:3e:27:1f:5b: bb:15:0e:18:c0:f6:34:02:19:15:cd:0d:7f:8e:ce:71:f1:97: f9:54:56:66:33:33:94:52:66:de:0a:8d:a0:5a:e7:5b:49:c6: 14:c3:21:1a:4b:cb:3a:0f:ba:8c:de:3a:38:98:72:b5:32:dc: 42:dc:0f:db:ba:74:47:8e:9a:a3:df:9d:94:21:73:04:f1:08: 4b:69:ae:48:3d:dc:2a:cf:12:28:50:15:a7:70:54:85:2f:9d: b8:36:7d:23:04:bb:52:ce:5d:94:22:38:f9:2c:9b:f8:b2:11: 79:d9:d3:64:d2:23:78:bd:42:17:8a:52:8d:08:8b:db:07:c8: 96:5f:cc:e0:6d:e8:18:41:ef:15:ee:8f:7a:2e:d7:cc:05:8e: 97:7a:8b:79:1a:1e:a5:15:28:27:da:09:a2:a3:95:9c:65:80: 1f:1f:1f:78:fd:11:09:fd:0e:19:b1:cb:37:39:ee:00:73:f3: cd:d8:a5:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzOUVBRkVDQzA0NTMx RDczODRBNjFEOThGMDA0QjE4RTE2Qjg2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHYwcx6SFqQS4r5WaDtET5GhNWgFfueYZBSwGh/DDGhYxHjcsR YT2JFHh+IlbDSQtYiR45SfazkjMFSUwcQzCiDAwdN3b/IbYe+mbu6DK93Hw7mCW5 umEQiw02RgvwfjPtYyuBtKTo95dQ+Ohqog/WavxCjM1y6Yso2duKA2VIYfoPG0+X nL6WGkXmdRqqxkHjTgUnTez/ta7X5Zy/vTP65SnMg7+0PIgTXE2cufoKNtZZSF08 c/uuo+oa1LU7zlEJislnAgM5P/tyfNwFWbibqY/HHS8wYbCxdl35o/LJnIDafAK2 cUiX5rFoye8wQO6D8aFwBoG5arLdG49a17wJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUE56v7MBFMdc4SmHZjwBLGOFrhgYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0U1NnY3TUJGTWRjNFNtSFpq d0JMR09GcmhnWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 QBgwDQYJKoZIhvcNAQELBQADggEBAHNDczQaeSvFNtdG3BoJ2AsrUr21cv6uGV9L fnV5pt5g76Kynmp+W7der4l/NvrF/Wqt0Dg3j6yFwcQVkIDdoRKu8ABePicfW7sV DhjA9jQCGRXNDX+OznHxl/lUVmYzM5RSZt4KjaBa51tJxhTDIRpLyzoPuozeOjiY crUy3ELcD9u6dEeOmqPfnZQhcwTxCEtprkg93CrPEihQFadwVIUvnbg2fSMEu1LO XZQiOPksm/iyEXnZ02TSI3i9QheKUo0Ii9sHyJZfzOBt6BhB7xXuj3ou18wFjpd6 i3kaHqUVKCfaCaKjlZxlgB8fH3j9EQn9Dhmxyzc57gBz883YpfA= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:54 2024 by rpki-client on console-fra.rpki-client.org