$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FDcDBoHpkEcNvPjA6xUxH-pTgdI.roa File: FDcDBoHpkEcNvPjA6xUxH-pTgdI.roa (raw, json) Hash identifier: kDOhhNOoD3jScHkt/FU9eXaNl2eCgGIJpgCZ4SmhwHA= Subject key identifier: 14:37:03:06:81:E9:90:47:0D:BC:F8:C0:EB:15:31:1F:EA:53:81:D2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21FB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FDcDBoHpkEcNvPjA6xUxH-pTgdI.roa Signing time: Mon 26 Aug 2024 05:33:32 +0000 ROA not before: Mon 26 Aug 2024 05:33:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8699 (0x21fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1437030681E990470DBCF8C0EB15311FEA5381D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:ce:79:7c:57:37:ac:e5:f3:a1:51:f6:2d: a2:75:fb:cb:88:d8:df:40:b9:48:91:1f:e5:ff:f7: 0f:a0:94:74:7e:85:c6:ca:db:58:72:bf:d5:82:5a: 84:a9:32:86:61:f0:fe:ec:e4:b0:2f:1d:d8:16:e6: 1c:78:69:e4:30:ea:ff:f1:4f:6b:f8:85:66:1b:b1: 4b:5b:b6:0d:c2:44:41:7b:b4:df:c9:c9:db:42:5a: 4a:a5:52:7c:ff:c1:8a:fa:7e:d4:d5:bd:f5:f0:14: 9c:46:da:25:a0:2f:2b:0c:61:0c:44:87:6b:ef:a2: 41:a8:74:98:e5:7c:94:33:c7:88:e5:99:cb:7b:c6: 86:76:3d:ff:8c:74:70:2b:9b:06:90:0a:ad:e6:16: 1b:47:9e:dc:f5:75:2a:65:b7:d3:4d:35:36:9e:95: bc:8f:a6:da:03:bb:05:d1:ae:23:60:b8:1b:9a:73: 9e:a9:e9:63:ab:13:1a:1b:1a:70:b3:27:d5:15:b5: 4a:83:b2:c9:ee:94:64:d6:64:48:0e:95:07:f0:02: 26:3d:c2:2f:5c:75:6c:be:10:9a:9a:68:94:d7:3d: 47:27:61:fc:1b:7b:c8:06:fa:79:2b:fb:45:32:29: 65:d6:bd:5c:f3:48:e1:6d:71:b4:0a:c8:d9:b2:25: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:37:03:06:81:E9:90:47:0D:BC:F8:C0:EB:15:31:1F:EA:53:81:D2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FDcDBoHpkEcNvPjA6xUxH-pTgdI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/22 Signature Algorithm: sha256WithRSAEncryption 68:5a:2b:8e:1c:49:c1:5d:d3:4d:ca:ab:11:40:5b:24:d8:9e: 3b:be:37:8c:74:19:69:13:07:7e:ab:d8:19:e8:68:61:c0:18: 61:bc:4a:f0:ed:47:43:18:38:8b:8d:08:04:ec:cc:8b:e5:b8: 0c:fb:91:72:18:a9:ba:d5:71:f9:39:1f:61:dd:b0:54:e5:8d: c2:ad:e2:26:15:a6:12:54:dc:94:c9:05:05:fa:37:de:5c:1b: 95:45:60:b0:55:c8:b7:ee:2a:7b:d1:98:5a:7f:1c:f7:20:2f: d3:3d:44:d5:5a:2b:16:bd:da:ca:d5:38:1a:f9:2b:3e:aa:42: 79:31:0d:3b:f1:9e:5a:c1:9b:5f:1c:f7:c4:c4:03:77:87:03: fa:99:8e:84:fa:ad:bf:b5:6b:b3:a6:38:49:df:01:e4:61:ca: 23:2b:43:a3:02:db:f0:e6:92:60:95:15:88:4d:c1:f8:74:95: b8:37:2f:da:cd:7b:a0:a5:4f:5a:19:82:a4:1a:cd:8c:de:9a: 1b:92:69:f7:15:72:c3:ca:36:49:cf:36:d3:20:5d:30:45:4d: 5a:5a:21:72:6b:0d:8a:1f:27:b0:4d:9c:f3:db:34:3c:8a:43: 5b:12:2d:5a:8a:a4:5b:e1:2d:39:b1:2a:71:ef:b1:38:e9:b4: fd:d0:93:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0MzcwMzA2ODFFOTkw NDcwREJDRjhDMEVCMTUzMTFGRUE1MzgxRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn3855fFc3rOXzoVH2LaJ1+8uI2N9AuUiRH+X/9w+glHR+hcbK 21hyv9WCWoSpMoZh8P7s5LAvHdgW5hx4aeQw6v/xT2v4hWYbsUtbtg3CREF7tN/J ydtCWkqlUnz/wYr6ftTVvfXwFJxG2iWgLysMYQxEh2vvokGodJjlfJQzx4jlmct7 xoZ2Pf+MdHArmwaQCq3mFhtHntz1dSplt9NNNTaelbyPptoDuwXRriNguBuac56p 6WOrExobGnCzJ9UVtUqDssnulGTWZEgOlQfwAiY9wi9cdWy+EJqaaJTXPUcnYfwb e8gG+nkr+0UyKWXWvVzzSOFtcbQKyNmyJSSDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFDcDBoHpkEcNvPjA6xUxH+pTgdIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZEY0RCb0hwa0VjTnZQakE2 eFV4SC1wVGdkSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2pAwDQYJKoZIhvcNAQELBQADggEBAGhaK44cScFd003KqxFAWyTYnju+N4x0GWkT B36r2BnoaGHAGGG8SvDtR0MYOIuNCATszIvluAz7kXIYqbrVcfk5H2HdsFTljcKt 4iYVphJU3JTJBQX6N95cG5VFYLBVyLfuKnvRmFp/HPcgL9M9RNVaKxa92srVOBr5 Kz6qQnkxDTvxnlrBm18c98TEA3eHA/qZjoT6rb+1a7OmOEnfAeRhyiMrQ6MC2/Dm kmCVFYhNwfh0lbg3L9rNe6ClT1oZgqQazYzemhuSafcVcsPKNknPNtMgXTBFTVpa IXJrDYofJ7BNnPPbNDyKQ1sSLVqKpFvhLTmxKnHvsTjptP3Qk4s= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org