$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KCoMo38zCyOG7cu9Xy8ipjXo_mk.roa File: KCoMo38zCyOG7cu9Xy8ipjXo_mk.roa (raw, json) Hash identifier: UhnD0PLGq7ObJnj3tRZeFTdvywfHdAHN+4TUwvcUNAs= Subject key identifier: 28:2A:0C:A3:7F:33:0B:23:86:ED:CB:BD:5F:2F:22:A6:35:E8:FE:69 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2180 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KCoMo38zCyOG7cu9Xy8ipjXo_mk.roa Signing time: Mon 26 Aug 2024 05:33:03 +0000 ROA not before: Mon 26 Aug 2024 05:33:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.60.208.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8576 (0x2180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=282A0CA37F330B2386EDCBBD5F2F22A635E8FE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:5f:0b:1b:86:e6:5f:2c:95:ac:9b:69:7e: 8f:6b:48:b5:c6:16:9d:b1:ed:28:41:bb:4d:62:07: b9:c6:d8:43:a2:ec:7f:e9:31:3c:c4:ab:4f:43:12: 15:95:9f:ba:1d:b8:8c:86:18:09:67:07:65:6a:8e: b3:b8:c3:33:52:d1:9c:80:ed:7b:91:84:e3:51:c6: 80:be:36:31:07:fd:6d:6f:89:7c:f7:5a:5a:c5:f6: 97:8a:db:54:74:11:1c:93:b5:95:be:ee:8e:67:90: 75:1a:82:f1:ec:c9:9b:e5:be:d9:64:03:e0:36:21: b7:cb:c4:7c:c6:ee:9a:2a:e1:16:83:43:c7:d4:b9: cc:06:ff:cc:b0:7f:84:fc:50:cb:2e:19:55:2d:ba: e7:c1:7b:10:1c:07:2a:db:c4:78:53:a3:b5:a3:53: 62:39:14:90:c9:74:31:20:a5:d4:64:25:e3:4f:99: c1:36:91:54:78:9b:c7:c8:aa:6d:c0:f0:0f:b5:8b: 48:38:94:ac:0f:8b:5e:52:47:60:aa:c7:c3:6d:a9: 74:56:11:9a:ef:b8:c1:42:4a:56:b6:45:d5:dc:b5: 20:b5:1c:cc:dd:64:06:60:05:c1:56:21:d0:73:ad: 2c:75:d7:7b:11:f0:91:7b:86:8f:af:21:d3:21:43: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:0C:A3:7F:33:0B:23:86:ED:CB:BD:5F:2F:22:A6:35:E8:FE:69 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KCoMo38zCyOG7cu9Xy8ipjXo_mk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.208.0/20 Signature Algorithm: sha256WithRSAEncryption 81:06:af:5f:a4:dc:fd:37:ac:3f:d6:83:51:7b:a8:b7:fb:8f: 5e:5c:f3:00:b6:cf:1b:8b:11:06:d0:72:62:6e:a6:94:89:63: 91:8d:d9:e5:60:cb:cc:f1:58:96:e1:2e:8e:93:a7:00:d0:01: e0:24:dc:cc:8e:b7:5a:bb:4b:1f:c9:d2:cd:84:1d:8b:28:a1: cd:fb:0e:29:2e:67:47:5e:a9:99:3d:6c:6d:60:18:47:ee:08: a7:d1:d4:86:4c:42:fd:a3:15:31:3f:31:5b:41:e4:1b:72:84: 9e:7d:3d:55:56:09:5c:27:45:14:85:79:1c:25:d6:d6:e1:9e: 0c:a3:92:45:e6:22:2e:47:d3:5b:8d:ec:29:eb:e0:f7:7f:3c: 99:b1:42:28:5f:61:a2:39:db:e9:54:85:09:c2:5f:64:d9:53: e8:8e:5c:e8:cc:2c:47:52:58:08:f1:d2:1d:6a:27:6b:e6:65: 10:1f:70:ef:76:a9:2b:e1:02:2b:65:6b:09:7c:b9:a2:26:27: c9:2d:a1:27:04:2b:97:c0:2f:87:93:89:7e:75:1d:34:a4:8e: c1:bd:a7:6c:7c:79:11:6d:19:06:82:68:05:13:ca:5b:38:e7: 44:a9:fa:0d:37:38:a2:c7:05:b4:60:12:53:1b:9d:f7:bd:30: 01:8f:9e:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI4MkEwQ0EzN0YzMzBC MjM4NkVEQ0JCRDVGMkYyMkE2MzVFOEZFNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2f18LG4bmXyyVrJtpfo9rSLXGFp2x7ShBu01iB7nG2EOi7H/p MTzEq09DEhWVn7oduIyGGAlnB2VqjrO4wzNS0ZyA7XuRhONRxoC+NjEH/W1viXz3 WlrF9peK21R0ERyTtZW+7o5nkHUagvHsyZvlvtlkA+A2IbfLxHzG7poq4RaDQ8fU ucwG/8ywf4T8UMsuGVUtuufBexAcByrbxHhTo7WjU2I5FJDJdDEgpdRkJeNPmcE2 kVR4m8fIqm3A8A+1i0g4lKwPi15SR2Cqx8NtqXRWEZrvuMFCSla2RdXctSC1HMzd ZAZgBcFWIdBzrSx113sR8JF7ho+vIdMhQ45JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKCoMo38zCyOG7cu9Xy8ipjXo/mkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tDb01vMzh6Q3lPRzdjdTlY eThpcGpYb19tay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PNAwDQYJKoZIhvcNAQELBQADggEBAIEGr1+k3P03rD/Wg1F7qLf7j15c8wC2zxuL EQbQcmJuppSJY5GN2eVgy8zxWJbhLo6TpwDQAeAk3MyOt1q7Sx/J0s2EHYsooc37 DikuZ0deqZk9bG1gGEfuCKfR1IZMQv2jFTE/MVtB5BtyhJ59PVVWCVwnRRSFeRwl 1tbhngyjkkXmIi5H01uN7Cnr4Pd/PJmxQihfYaI52+lUhQnCX2TZU+iOXOjMLEdS WAjx0h1qJ2vmZRAfcO92qSvhAitlawl8uaImJ8ktoScEK5fAL4eTiX51HTSkjsG9 p2x8eRFtGQaCaAUTyls450Sp+g03OKLHBbRgElMbnfe9MAGPnms= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org