$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IEBKGpREtaHfm48j5GOw2WBuXVY.roa File: IEBKGpREtaHfm48j5GOw2WBuXVY.roa (raw, json) Hash identifier: Qa4KRI7O/52o9I5kLFN3SsN4SMvetFQFD1CSxOHxHSs= Subject key identifier: 20:40:4A:1A:94:44:B5:A1:DF:9B:8F:23:E4:63:B0:D9:60:6E:5D:56 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2289 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IEBKGpREtaHfm48j5GOw2WBuXVY.roa Signing time: Mon 26 Aug 2024 05:34:07 +0000 ROA not before: Mon 26 Aug 2024 05:34:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8841 (0x2289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=20404A1A9444B5A1DF9B8F23E463B0D9606E5D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:06:dc:e7:16:b9:ad:b5:96:d9:af:a7:ba: bf:6e:01:ab:7d:9d:0d:b2:65:81:20:a8:a1:db:7f: dd:db:12:7e:56:ad:3b:d1:6a:2a:e1:be:0b:4f:06: c0:7c:db:bc:c5:71:b7:6a:10:36:21:f4:02:07:0f: 5d:93:c0:82:d0:77:e1:18:1e:dc:30:a8:8f:01:65: c6:01:c2:74:95:bd:f0:93:d7:13:b5:44:fb:b6:ca: 41:f6:37:93:50:44:75:29:6c:31:4f:b4:dd:ee:f6: 0a:35:31:41:7d:e4:2e:44:b5:1b:26:ce:44:a9:8f: 5c:6f:cd:5b:f4:78:74:5e:91:ca:8c:b7:44:32:aa: a0:a6:53:c7:fd:87:d8:2c:13:8d:bd:d7:3d:28:75: 2c:04:b5:56:99:0f:24:00:50:79:35:9a:72:b7:18: 63:09:de:86:49:ba:d2:54:eb:cd:e3:4b:aa:aa:3f: d2:2c:7c:ef:30:40:05:ba:3a:ec:e2:01:27:a4:35: 56:b2:b7:4e:2a:d7:59:2b:be:e3:ee:59:f9:19:a3: 9f:53:31:de:6b:6b:96:23:52:ca:75:20:5f:57:d3: 2f:5e:23:7a:84:92:67:0c:8a:cd:9b:3c:a6:0b:ca: 17:2e:98:74:77:f0:8f:fd:77:d5:50:a4:50:34:32: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:4A:1A:94:44:B5:A1:DF:9B:8F:23:E4:63:B0:D9:60:6E:5D:56 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IEBKGpREtaHfm48j5GOw2WBuXVY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.189.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:ca:36:03:4b:18:0a:c9:cf:f5:83:5f:54:0d:20:98:f9:f4: 3e:1b:5d:b2:2d:1d:d6:38:55:92:63:f9:b9:c1:dd:f8:c0:b2: d1:67:4c:6d:62:fa:f9:95:71:b7:98:42:64:96:76:ed:10:2c: b6:82:15:70:5d:bd:f7:76:1e:7a:89:5a:83:30:27:98:52:cc: f1:75:a8:c8:3e:9d:40:80:c8:da:7d:48:b4:fb:4c:0c:47:0e: 0e:31:a4:be:eb:29:3e:73:1e:25:87:94:3a:8c:54:bf:fe:16: 5d:58:ad:3f:c3:6d:20:b0:5c:41:e1:c0:e1:95:fc:4d:a7:73: 29:ea:f0:05:6c:47:3c:78:f7:4b:ab:bd:17:dc:54:6d:62:55: 98:a3:c3:ce:f2:8c:b0:41:39:e8:6f:90:7e:94:ff:dc:00:4f: 0b:1c:a1:08:c2:d1:ca:ed:d1:0c:40:db:9f:6e:dc:10:ee:9f: 58:7d:9b:42:dc:f3:04:5a:41:60:ab:17:cd:eb:67:c6:c2:a0: fb:a7:7e:7c:76:5f:49:af:50:2c:f9:ac:67:45:2d:70:c0:7b: b5:55:1a:89:35:4d:cd:e9:67:fa:e1:f0:b4:8b:df:c5:dd:7e: fa:8a:86:fa:03:76:ad:49:1d:a8:e5:eb:33:94:b8:45:66:75: bd:26:68:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwNDA0QTFBOTQ0NEI1 QTFERjlCOEYyM0U0NjNCMEQ5NjA2RTVENTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr1Abc5xa5rbWW2a+nur9uAat9nQ2yZYEgqKHbf93bEn5WrTvR airhvgtPBsB827zFcbdqEDYh9AIHD12TwILQd+EYHtwwqI8BZcYBwnSVvfCT1xO1 RPu2ykH2N5NQRHUpbDFPtN3u9go1MUF95C5EtRsmzkSpj1xvzVv0eHRekcqMt0Qy qqCmU8f9h9gsE4291z0odSwEtVaZDyQAUHk1mnK3GGMJ3oZJutJU683jS6qqP9Is fO8wQAW6OuziASekNVayt04q11krvuPuWfkZo59TMd5ra5YjUsp1IF9X0y9eI3qE kmcMis2bPKYLyhcumHR38I/9d9VQpFA0MuT3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIEBKGpREtaHfm48j5GOw2WBuXVYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lFQktHcFJFdGFIZm00OGo1 R093MldCdVhWWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2r0wDQYJKoZIhvcNAQELBQADggEBADvKNgNLGArJz/WDX1QNIJj59D4bXbItHdY4 VZJj+bnB3fjAstFnTG1i+vmVcbeYQmSWdu0QLLaCFXBdvfd2HnqJWoMwJ5hSzPF1 qMg+nUCAyNp9SLT7TAxHDg4xpL7rKT5zHiWHlDqMVL/+Fl1YrT/DbSCwXEHhwOGV /E2ncynq8AVsRzx490urvRfcVG1iVZijw87yjLBBOehvkH6U/9wATwscoQjC0crt 0QxA259u3BDun1h9m0Lc8wRaQWCrF83rZ8bCoPunfnx2X0mvUCz5rGdFLXDAe7VV Gok1Tc3pZ/rh8LSL38XdfvqKhvoDdq1JHajl6zOUuEVmdb0maDk= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org