$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YoAqEbJPzByAZ1HW1wDtAqvmds8.roa File: YoAqEbJPzByAZ1HW1wDtAqvmds8.roa (raw, json) Hash identifier: X4vP5MKR+/4YL6Eq+kb44u50WGvi1jboam1ayFjovqM= Subject key identifier: 62:80:2A:11:B2:4F:CC:1C:80:67:51:D6:D7:00:ED:02:AB:E6:76:CF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21E7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YoAqEbJPzByAZ1HW1wDtAqvmds8.roa Signing time: Mon 26 Aug 2024 05:33:27 +0000 ROA not before: Mon 26 Aug 2024 05:33:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8679 (0x21e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=62802A11B24FCC1C806751D6D700ED02ABE676CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:29:99:a5:a9:58:7f:ed:2f:1e:60:e3:76: 94:85:ca:9b:14:76:8d:f4:1a:9f:5d:a6:92:ff:74: 1e:3e:eb:2a:f4:ca:d1:7e:b3:61:fb:5a:03:3e:49: 8a:3a:c7:54:99:26:b0:18:1d:a7:d6:f6:ef:e3:28: 4d:8c:fa:89:ec:b2:cc:1d:ae:4d:d0:16:32:a0:35: b4:d9:90:f8:11:38:8d:c5:3b:a5:f2:b7:a8:6d:23: e8:75:68:a1:57:ff:39:55:98:c5:43:08:64:e8:3c: 23:6c:97:9e:0c:82:94:db:df:a3:2a:37:a7:31:fe: c5:23:91:9f:b3:57:73:ed:56:01:9c:74:07:27:e2: 27:cb:f8:ae:8e:d1:8d:35:3c:fa:5d:26:16:9f:c3: 97:4f:c6:36:01:fe:e2:89:da:1f:03:3a:db:19:f8: ef:fa:4b:98:38:e6:61:a8:ce:53:06:85:03:41:f7: 51:0c:f3:42:6c:9e:88:2e:88:b7:b5:a3:db:9e:c0: 70:7a:c9:99:50:cf:e5:8c:63:83:5c:4e:97:2d:e7: 85:02:02:e3:e1:57:66:4c:aa:12:3a:f0:1e:a3:3a: 00:64:4c:8a:3e:38:70:3e:0a:74:df:af:3d:c2:08: cb:f0:79:33:7f:cd:43:8a:98:09:77:b2:3a:27:b0: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:80:2A:11:B2:4F:CC:1C:80:67:51:D6:D7:00:ED:02:AB:E6:76:CF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YoAqEbJPzByAZ1HW1wDtAqvmds8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.135.0/24 Signature Algorithm: sha256WithRSAEncryption 15:86:11:3c:7f:71:c7:f1:38:53:33:56:33:10:59:67:f0:f5: e2:5b:2f:6b:ca:dd:a6:cb:0c:49:d1:25:4d:00:84:ee:60:c5: aa:d8:b6:c8:f8:d4:c6:21:5d:1b:be:ad:8a:cd:a1:68:0e:75: d5:ed:aa:a3:9f:34:6f:b3:f9:c8:2c:85:75:2c:4a:e5:2c:01: d3:b0:72:cd:6c:27:5f:7f:27:9b:9d:ec:74:02:76:01:08:ea: 48:68:a0:6a:85:02:55:74:0c:a4:47:97:97:16:d7:7c:4d:71: 00:87:8e:85:84:42:a4:b2:78:07:96:f3:98:3d:8f:ab:31:a7: f6:96:6c:aa:1b:2c:b9:7c:27:e7:4f:0a:dc:d6:04:e3:67:67: 3f:64:89:8c:ee:49:28:d1:f4:29:75:2e:11:88:19:d6:44:57: 92:f6:52:88:ba:4d:56:3e:68:eb:3b:d8:30:e4:82:76:fa:6a: ea:bb:90:26:88:f4:bc:bc:11:ef:8a:de:59:55:a3:e6:80:bc: 5a:3d:06:a8:af:dd:be:5e:51:af:3d:05:f3:73:ce:db:19:bd: 0d:1c:39:2d:bc:ae:57:5b:da:ee:7e:53:81:8d:59:50:96:8b: d2:e1:cd:6c:cc:66:e8:79:5a:49:a7:c6:a0:5c:7c:a2:a5:0b: 12:47:15:81 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyODAyQTExQjI0RkND MUM4MDY3NTFENkQ3MDBFRDAyQUJFNjc2Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC29SmZpalYf+0vHmDjdpSFypsUdo30Gp9dppL/dB4+6yr0ytF+ s2H7WgM+SYo6x1SZJrAYHafW9u/jKE2M+onssswdrk3QFjKgNbTZkPgROI3FO6Xy t6htI+h1aKFX/zlVmMVDCGToPCNsl54MgpTb36MqN6cx/sUjkZ+zV3PtVgGcdAcn 4ifL+K6O0Y01PPpdJhafw5dPxjYB/uKJ2h8DOtsZ+O/6S5g45mGozlMGhQNB91EM 80JsnoguiLe1o9uewHB6yZlQz+WMY4NcTpct54UCAuPhV2ZMqhI68B6jOgBkTIo+ OHA+CnTfrz3CCMvweTN/zUOKmAl3sjonsD2RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYoAqEbJPzByAZ1HW1wDtAqvmds8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1lvQXFFYkpQekJ5QVoxSFcx d0R0QXF2bWRzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2ocwDQYJKoZIhvcNAQELBQADggEBABWGETx/ccfxOFMzVjMQWWfw9eJbL2vK3abL DEnRJU0AhO5gxarYtsj41MYhXRu+rYrNoWgOddXtqqOfNG+z+cgshXUsSuUsAdOw cs1sJ19/J5ud7HQCdgEI6khooGqFAlV0DKRHl5cW13xNcQCHjoWEQqSyeAeW85g9 j6sxp/aWbKobLLl8J+dPCtzWBONnZz9kiYzuSSjR9Cl1LhGIGdZEV5L2Uoi6TVY+ aOs72DDkgnb6auq7kCaI9Ly8Ee+K3llVo+aAvFo9Bqiv3b5eUa89BfNzztsZvQ0c OS28rldb2u5+U4GNWVCWi9LhzWzMZuh5WkmnxqBcfKKlCxJHFYE= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org