$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TtIgR3DuRf_E6FPSNdVr2MO2-H0.roa File: TtIgR3DuRf_E6FPSNdVr2MO2-H0.roa (raw, json) Hash identifier: QF7Nua4BKcsL3+xC7fiLry0XU6qdOaEWD8hy0FEj+KI= Subject key identifier: 4E:D2:20:47:70:EE:45:FF:C4:E8:53:D2:35:D5:6B:D8:C3:B6:F8:7D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 218F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TtIgR3DuRf_E6FPSNdVr2MO2-H0.roa Signing time: Mon 26 Aug 2024 05:33:06 +0000 ROA not before: Mon 26 Aug 2024 05:33:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8591 (0x218f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4ED2204770EE45FFC4E853D235D56BD8C3B6F87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:04:db:f2:f1:cc:60:22:78:3a:a7:b4:29: 7d:96:07:50:49:14:40:c7:99:12:37:a9:e9:28:89: c6:99:f4:9d:8b:90:3d:85:01:4b:7c:da:9f:39:89: de:b6:6f:2a:0c:f9:6d:5b:76:f2:1d:89:99:09:14: e1:b0:01:b7:0e:ce:8a:11:c8:17:35:13:8b:18:47: 2b:b5:e4:cf:c1:40:02:37:24:3a:32:ec:65:19:36: 99:9d:6c:d1:34:40:58:bd:c1:f1:70:7d:f8:f1:8a: ea:a8:19:fc:b0:a0:8a:c1:d0:cf:98:0f:bf:76:53: 79:0b:c5:c1:9d:f1:44:d2:5d:a3:49:9f:64:52:c5: 59:bb:91:98:49:b5:b9:62:54:bc:4b:bf:da:70:2d: 10:73:c9:91:e4:08:4a:38:66:d8:b3:ca:3e:f8:98: 85:fb:07:bf:23:24:cf:fa:6c:12:cd:35:ca:2a:65: cf:9e:a1:84:0e:11:24:fc:ac:b6:66:b9:8a:89:71: 24:7c:7d:fd:5e:96:80:7c:ce:e0:25:1a:a2:77:47: 99:1b:d6:2a:d2:e5:e9:f3:1a:1a:1c:68:f9:49:70: 02:4e:e6:31:c3:23:74:74:a1:2f:08:2d:44:fa:7d: 9d:91:83:5a:29:71:bc:39:e3:4f:96:71:4b:10:a8: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D2:20:47:70:EE:45:FF:C4:E8:53:D2:35:D5:6B:D8:C3:B6:F8:7D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TtIgR3DuRf_E6FPSNdVr2MO2-H0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.192.0/19 Signature Algorithm: sha256WithRSAEncryption 52:71:ae:23:58:d2:38:e9:72:c6:8c:18:dc:8a:aa:0d:04:e3: ae:32:1f:94:62:9f:85:06:a7:a6:be:b7:75:de:0c:28:81:18: b6:23:c9:1c:b6:16:b4:51:94:62:c4:8f:3e:f2:72:6d:51:95: c6:59:df:e2:62:94:85:90:98:66:ac:96:f8:17:fe:7e:7b:fc: f2:cf:4a:06:fc:42:bb:1a:38:e6:84:79:3e:e5:96:ad:f3:2d: 89:d2:aa:e3:1a:79:fa:8f:77:a6:f2:a5:3d:cf:fc:83:c5:64: c2:d7:d8:ab:95:1b:c1:bb:d9:98:20:f4:af:fa:65:d0:f0:ce: fd:c6:41:1f:31:b5:ae:0e:ff:52:d3:42:6a:b4:84:21:be:40: 45:7c:99:cb:84:5a:fd:c6:ef:dd:f3:b8:72:25:de:a1:e1:1c: 9f:db:c4:1b:3b:86:9a:f9:53:8a:85:13:8f:02:00:e6:8d:9e: 95:16:b5:27:51:a2:72:ff:9f:8e:1f:fb:55:38:c9:38:20:e2: dc:15:6d:74:3b:d6:dd:4a:2d:95:d2:ad:23:ff:63:30:9a:96: d8:55:04:01:5b:5d:0b:15:9f:a9:8e:2f:bb:74:27:b5:ff:ce: cc:e9:ae:e8:02:14:59:98:e2:06:3f:3a:54:63:ae:02:35:7f: a8:ed:df:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFRDIyMDQ3NzBFRTQ1 RkZDNEU4NTNEMjM1RDU2QkQ4QzNCNkY4N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCktgTb8vHMYCJ4Oqe0KX2WB1BJFEDHmRI3qekoicaZ9J2LkD2F AUt82p85id62byoM+W1bdvIdiZkJFOGwAbcOzooRyBc1E4sYRyu15M/BQAI3JDoy 7GUZNpmdbNE0QFi9wfFwffjxiuqoGfywoIrB0M+YD792U3kLxcGd8UTSXaNJn2RS xVm7kZhJtbliVLxLv9pwLRBzyZHkCEo4Ztizyj74mIX7B78jJM/6bBLNNcoqZc+e oYQOEST8rLZmuYqJcSR8ff1eloB8zuAlGqJ3R5kb1irS5enzGhocaPlJcAJO5jHD I3R0oS8ILUT6fZ2Rg1opcbw540+WcUsQqDf7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTtIgR3DuRf/E6FPSNdVr2MO2+H0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1R0SWdSM0R1UmZfRTZGUFNO ZFZyMk1PMi1IMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0 2sAwDQYJKoZIhvcNAQELBQADggEBAFJxriNY0jjpcsaMGNyKqg0E464yH5Rin4UG p6a+t3XeDCiBGLYjyRy2FrRRlGLEjz7ycm1RlcZZ3+JilIWQmGaslvgX/n57/PLP Sgb8QrsaOOaEeT7llq3zLYnSquMaefqPd6bypT3P/IPFZMLX2KuVG8G72Zgg9K/6 ZdDwzv3GQR8xta4O/1LTQmq0hCG+QEV8mcuEWv3G793zuHIl3qHhHJ/bxBs7hpr5 U4qFE48CAOaNnpUWtSdRonL/n44f+1U4yTgg4twVbXQ71t1KLZXSrSP/YzCalthV BAFbXQsVn6mOL7t0J7X/zszprugCFFmY4gY/OlRjrgI1f6jt3+Y= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org