$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa File: TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa (raw, json) Hash identifier: ozD2qAW+5XXQzi4+1WldMkrQwL0U+6XP1ea20wkZVBQ= Subject key identifier: 4C:A8:51:C2:3A:B0:BA:A7:FA:7B:75:AC:0F:1B:43:1B:2A:F3:3F:55 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2259 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa Signing time: Mon 26 Aug 2024 05:33:54 +0000 ROA not before: Mon 26 Aug 2024 05:33:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8793 (0x2259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4CA851C23AB0BAA7FA7B75AC0F1B431B2AF33F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:c4:63:f7:04:ba:59:e6:04:05:65:9c:da: e9:62:5b:f9:20:92:45:5f:40:6e:9a:31:b9:d9:36: e1:0a:b7:46:f7:97:7b:29:a1:80:6f:fd:bf:e8:2d: b2:33:12:30:24:96:33:8d:0f:0c:97:49:2f:df:3c: e7:26:a4:79:8e:59:76:98:91:ec:b4:81:d5:a4:ce: 06:bc:34:39:6c:05:07:ca:f0:dc:ba:2d:6d:52:2b: 4c:ee:88:00:c9:13:2c:b8:a3:e0:0a:b5:71:5f:f9: 43:d4:f3:e8:c7:42:a3:19:cb:20:c0:ed:89:13:c3: 69:fd:83:a3:21:69:f0:7b:6d:b0:8d:91:15:eb:81: 71:a6:f4:5b:36:c8:6d:71:96:aa:3d:45:b9:0d:2e: 9a:ff:df:38:9d:d2:8a:e8:2d:a9:b6:7a:3b:c8:4a: 28:71:d9:aa:ea:43:40:a1:13:78:81:ec:a8:1a:03: 7e:5a:3b:e2:e8:e4:be:3e:a9:57:d2:b7:15:eb:9b: a8:36:9a:0f:91:1d:30:7c:b2:48:a7:6d:59:0c:a7: d2:1f:07:b3:2d:60:9d:95:7a:62:2f:98:2c:4a:ae: 68:e4:bd:7e:ca:3e:26:a1:d9:95:8c:84:5d:c2:bc: 71:e7:9f:76:8f:5c:8f:81:7c:10:21:59:48:f2:89: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A8:51:C2:3A:B0:BA:A7:FA:7B:75:AC:0F:1B:43:1B:2A:F3:3F:55 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.133.0/24 Signature Algorithm: sha256WithRSAEncryption 80:29:14:c7:7b:13:f1:0c:ef:94:b8:34:9c:b4:62:6c:f1:aa: 63:07:68:74:8b:0f:99:7a:9a:16:55:25:f4:6f:0c:ea:40:26: d3:63:39:4c:11:9f:e7:30:95:8c:46:62:29:35:a4:9a:50:fd: 47:2d:37:8c:7e:2c:d6:cd:12:12:59:a6:fd:74:95:11:82:ea: 61:b3:e5:2d:01:96:2b:fe:ed:7b:3b:c3:15:ee:3f:7b:0d:e6: 62:15:d1:19:00:84:34:48:e7:a4:9a:e1:60:f8:69:9a:40:8d: 3a:33:9f:8c:ff:66:8b:2b:ab:76:71:6e:04:f3:02:9d:bc:40: c2:b6:1b:ba:1c:50:48:36:a4:21:39:08:3a:8e:d7:5e:aa:85: 54:45:c2:83:a3:fa:4b:05:9f:51:7d:07:d8:90:b8:e9:e2:f4: ab:a2:83:bd:f5:07:44:ce:13:e5:86:c1:18:8a:8c:ee:c8:5f: f9:10:50:70:86:9a:2f:56:c1:fa:ab:1d:48:67:44:5c:73:46: d0:3d:79:a7:82:bc:c2:1f:64:25:39:d4:1c:7a:4c:4b:2a:3b: f5:ba:6f:53:be:e7:91:99:5e:e6:db:3b:e9:fd:4a:27:83:5a: 46:6b:b9:77:ea:eb:f0:e1:49:a7:81:79:05:c5:3e:22:6d:9d: c8:d5:59:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDQTg1MUMyM0FCMEJB QTdGQTdCNzVBQzBGMUI0MzFCMkFGMzNGNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqcMRj9wS6WeYEBWWc2uliW/kgkkVfQG6aMbnZNuEKt0b3l3sp oYBv/b/oLbIzEjAkljONDwyXSS/fPOcmpHmOWXaYkey0gdWkzga8NDlsBQfK8Ny6 LW1SK0zuiADJEyy4o+AKtXFf+UPU8+jHQqMZyyDA7YkTw2n9g6MhafB7bbCNkRXr gXGm9Fs2yG1xlqo9RbkNLpr/3zid0oroLam2ejvISihx2arqQ0ChE3iB7KgaA35a O+Lo5L4+qVfStxXrm6g2mg+RHTB8skinbVkMp9IfB7MtYJ2VemIvmCxKrmjkvX7K Piah2ZWMhF3CvHHnn3aPXI+BfBAhWUjyiRdLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTKhRwjqwuqf6e3WsDxtDGyrzP1UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RLaFJ3anF3dXFmNmUzV3NE eHRER3lyelAxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2oUwDQYJKoZIhvcNAQELBQADggEBAIApFMd7E/EM75S4NJy0YmzxqmMHaHSLD5l6 mhZVJfRvDOpAJtNjOUwRn+cwlYxGYik1pJpQ/UctN4x+LNbNEhJZpv10lRGC6mGz 5S0Bliv+7Xs7wxXuP3sN5mIV0RkAhDRI56Sa4WD4aZpAjTozn4z/Zosrq3ZxbgTz Ap28QMK2G7ocUEg2pCE5CDqO116qhVRFwoOj+ksFn1F9B9iQuOni9Kuig731B0TO E+WGwRiKjO7IX/kQUHCGmi9WwfqrHUhnRFxzRtA9eaeCvMIfZCU51Bx6TEsqO/W6 b1O+55GZXubbO+n9SieDWkZruXfq6/DhSaeBeQXFPiJtncjVWSI= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:44 2024 by rpki-client on console-fra.rpki-client.org