$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QfcC5nz_GzgmAGMOHXwC2iuGk4Q.roa File: QfcC5nz_GzgmAGMOHXwC2iuGk4Q.roa (raw, json) Hash identifier: p6j16csCZWlIw1icmNSLohi8b/Xx9HsRQYLvIUDQT6A= Subject key identifier: 41:F7:02:E6:7C:FF:1B:38:26:00:63:0E:1D:7C:02:DA:2B:86:93:84 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21A6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QfcC5nz_GzgmAGMOHXwC2iuGk4Q.roa Signing time: Mon 26 Aug 2024 05:33:12 +0000 ROA not before: Mon 26 Aug 2024 05:33:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8614 (0x21a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=41F702E67CFF1B382600630E1D7C02DA2B869384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:64:48:37:26:33:e4:39:83:1c:40:92:02: 92:0a:01:78:01:70:aa:cf:23:a4:19:b9:b5:2a:df: 3a:fb:9d:c6:9a:c2:52:0b:ed:71:4f:15:34:df:2b: 62:45:8f:00:5f:94:46:b2:f7:2d:e2:be:c4:41:5f: 63:98:cb:75:f5:13:0e:ba:2e:0e:3e:46:67:27:67: d9:da:fa:a6:c8:10:66:2b:5e:d0:1e:0b:04:74:68: a3:58:b5:5c:0e:0b:47:42:b2:20:08:13:14:95:f6: 66:a1:1e:79:0a:12:48:6c:23:db:25:21:81:54:50: 39:3f:e2:80:c2:88:8f:51:5d:0e:55:bc:c6:c0:19: 8d:c3:83:dd:db:cf:13:91:da:a7:2a:f1:6f:f4:67: 95:68:cc:07:f7:03:72:8f:78:4d:5f:a4:7e:97:f5: e0:99:9f:e8:a4:d4:7a:3e:4c:ea:9a:43:8f:14:22: 2d:e2:17:d4:c3:e7:4a:d9:8b:01:46:23:6f:82:c6: 42:e1:d0:95:c5:97:f0:31:3e:d1:15:3a:79:d1:31: 35:58:5f:22:21:6a:56:3b:f8:02:f0:6e:a0:5b:ba: 86:a2:fb:92:33:90:72:15:af:f2:94:36:8a:40:14: fa:4f:6c:8c:8c:46:fa:a3:f4:ea:75:5e:ae:c2:7f: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F7:02:E6:7C:FF:1B:38:26:00:63:0E:1D:7C:02:DA:2B:86:93:84 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QfcC5nz_GzgmAGMOHXwC2iuGk4Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.132.0/23 Signature Algorithm: sha256WithRSAEncryption 99:98:8b:d2:45:a1:5f:6d:55:f8:97:43:d9:b8:f3:99:b2:a9: e0:e0:0b:e4:75:65:15:0e:c1:36:dd:61:b1:62:b9:c0:e5:1d: fd:d6:7e:b6:a8:93:63:4c:6f:4e:10:8e:e8:0c:99:63:42:25: 22:46:c3:54:29:e7:0a:40:9d:3b:f0:28:80:f9:e8:ed:2b:51: 61:06:8d:4c:04:b2:bb:9f:fa:6e:36:a3:42:00:c7:49:67:bb: 3b:f3:22:b6:b7:fc:f0:6c:3b:fa:7f:6d:b1:53:ab:c6:16:a4: ab:0a:97:b6:cf:5d:6b:01:b0:b3:fa:14:83:72:b9:ec:39:81: 0f:cd:83:03:2f:2e:50:c1:62:0e:16:87:79:34:9f:68:8b:6a: 73:db:e5:e6:1a:80:de:65:29:03:ea:f2:63:58:1a:8b:16:78: e2:55:97:1a:90:5c:60:8e:13:55:34:f5:cc:92:d0:77:5a:d5: 97:fe:3c:bb:6f:4d:4f:d2:df:ed:1f:f5:36:ca:d3:78:ed:02: 3e:58:b1:4e:ff:cd:04:61:b3:73:5e:3c:2e:00:94:aa:81:3f: ce:85:c8:52:ea:be:f8:88:43:c7:02:32:da:26:15:cd:96:89: 16:47:a9:2d:a3:78:89:7d:cb:2f:42:b3:fb:c6:19:ad:9e:3d: 3a:7f:c7:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxRjcwMkU2N0NGRjFC MzgyNjAwNjMwRTFEN0MwMkRBMkI4NjkzODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHWWRINyYz5DmDHECSApIKAXgBcKrPI6QZubUq3zr7ncaawlIL 7XFPFTTfK2JFjwBflEay9y3ivsRBX2OYy3X1Ew66Lg4+RmcnZ9na+qbIEGYrXtAe CwR0aKNYtVwOC0dCsiAIExSV9mahHnkKEkhsI9slIYFUUDk/4oDCiI9RXQ5VvMbA GY3Dg93bzxOR2qcq8W/0Z5VozAf3A3KPeE1fpH6X9eCZn+ik1Ho+TOqaQ48UIi3i F9TD50rZiwFGI2+CxkLh0JXFl/AxPtEVOnnRMTVYXyIhalY7+ALwbqBbuoai+5Iz kHIVr/KUNopAFPpPbIyMRvqj9Op1Xq7CfwvDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQfcC5nz/GzgmAGMOHXwC2iuGk4QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FmY0M1bnpfR3pnbUFHTU9I WHdDMml1R2s0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2oQwDQYJKoZIhvcNAQELBQADggEBAJmYi9JFoV9tVfiXQ9m485myqeDgC+R1ZRUO wTbdYbFiucDlHf3Wfraok2NMb04QjugMmWNCJSJGw1Qp5wpAnTvwKID56O0rUWEG jUwEsruf+m42o0IAx0lnuzvzIra3/PBsO/p/bbFTq8YWpKsKl7bPXWsBsLP6FINy uew5gQ/NgwMvLlDBYg4Wh3k0n2iLanPb5eYagN5lKQPq8mNYGosWeOJVlxqQXGCO E1U09cyS0Hda1Zf+PLtvTU/S3+0f9TbK03jtAj5YsU7/zQRhs3NePC4AlKqBP86F yFLqvviIQ8cCMtomFc2WiRZHqS2jeIl9yy9Cs/vGGa2ePTp/x58= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org