$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ayYrqe1YOvcEo0l_28na5I9yNx0.roa File: ayYrqe1YOvcEo0l_28na5I9yNx0.roa (raw, json) Hash identifier: tsXomhG+tNOaLyowB6InlnvTCfvsnYn8HkGjfERigC0= Subject key identifier: 6B:26:2B:A9:ED:58:3A:F7:04:A3:49:7F:DB:C9:DA:E4:8F:72:37:1D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21BD Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ayYrqe1YOvcEo0l_28na5I9yNx0.roa Signing time: Mon 26 Aug 2024 05:33:18 +0000 ROA not before: Mon 26 Aug 2024 05:33:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 61.61.208.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8637 (0x21bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6B262BA9ED583AF704A3497FDBC9DAE48F72371D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:42:b6:e5:76:d4:69:67:ab:3e:9a:b9:a5: 83:6e:93:1d:8e:02:84:ad:b1:54:8d:5e:11:60:e7: b2:2f:48:f3:af:06:17:47:e2:6a:df:53:e1:85:f0: 18:13:4c:81:ff:e9:e4:78:34:92:7e:f8:8b:61:a7: 21:d2:86:62:93:5c:b2:fa:74:eb:2f:c5:44:ba:13: 1d:0e:12:cc:a4:df:ba:f7:81:ef:88:89:17:8d:38: 8d:33:ff:70:6c:36:c9:16:2c:1a:d8:3c:e8:f7:6e: 4b:7c:c7:99:00:b0:cd:63:08:30:d3:2b:2e:15:da: f5:c2:b9:46:1d:7e:03:7e:af:3c:33:71:c9:b9:3a: 3d:ed:76:67:2c:ce:e2:5a:c8:e0:80:67:8e:07:a8: 37:c4:20:b1:d3:0c:63:e0:dc:d0:6f:50:2d:38:6e: d9:e7:7f:b6:6b:20:93:13:dd:36:2f:ab:ed:4c:23: 9f:ea:1f:f3:73:38:2e:0e:a7:a3:f1:0e:ce:f2:2e: 2d:db:92:79:8d:c5:7b:7d:55:a8:02:70:01:0d:cf: 1f:8b:14:ba:43:74:04:41:a6:c6:cd:97:b9:99:aa: 32:f4:03:9b:d0:ba:0d:a7:96:72:37:91:11:76:15: 56:0f:d2:f9:78:e0:3a:8d:3e:4e:fc:8d:8f:51:04: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:26:2B:A9:ED:58:3A:F7:04:A3:49:7F:DB:C9:DA:E4:8F:72:37:1D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ayYrqe1YOvcEo0l_28na5I9yNx0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/24 Signature Algorithm: sha256WithRSAEncryption 64:34:b3:78:3a:11:60:0e:37:b7:91:db:e6:25:d9:ea:2e:26: 46:3c:80:cc:ed:8f:1e:29:22:12:64:5e:ff:5d:91:cd:c4:72: ba:7e:3d:5b:00:57:99:93:20:df:16:e2:28:04:a1:dc:5f:1c: b2:d5:bb:1f:5f:55:a9:e1:55:64:66:08:e7:27:fd:28:46:2c: 33:3d:8e:a7:85:e5:bc:0d:b7:7a:28:3c:b6:47:39:0b:24:1f: 56:60:4b:f0:df:de:cd:4d:22:62:33:33:bc:6d:f1:21:ff:db: 64:61:e9:20:41:e1:7c:39:b8:48:ae:f9:cb:ec:6f:35:f2:c4: 90:c1:d6:d8:88:25:28:63:61:51:32:f8:2a:50:a2:09:48:15: 38:c5:21:1c:3a:5d:2e:fa:a7:5f:04:ee:91:79:74:8b:cc:89: 61:d4:e4:e7:f9:19:ed:58:95:3f:81:c1:36:e4:fc:2a:3f:dd: 98:14:48:2b:5c:f3:f6:a7:74:64:e3:fb:cd:2c:fd:92:81:3e: c5:d0:f2:e2:53:35:de:3e:1d:bc:43:a7:69:3c:f0:42:3f:ff: 1c:8d:f6:77:1f:15:7f:d4:d5:95:e3:c0:b4:7d:dc:2b:c3:f7: b8:c0:6e:01:bc:c5:3e:f6:9c:46:fc:bc:21:93:d2:01:c9:f5: e4:e2:5e:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCMjYyQkE5RUQ1ODNB RjcwNEEzNDk3RkRCQzlEQUU0OEY3MjM3MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnSEK25XbUaWerPpq5pYNukx2OAoStsVSNXhFg57IvSPOvBhdH 4mrfU+GF8BgTTIH/6eR4NJJ++IthpyHShmKTXLL6dOsvxUS6Ex0OEsyk37r3ge+I iReNOI0z/3BsNskWLBrYPOj3bkt8x5kAsM1jCDDTKy4V2vXCuUYdfgN+rzwzccm5 Oj3tdmcszuJayOCAZ44HqDfEILHTDGPg3NBvUC04btnnf7ZrIJMT3TYvq+1MI5/q H/NzOC4Op6PxDs7yLi3bknmNxXt9VagCcAENzx+LFLpDdARBpsbNl7mZqjL0A5vQ ug2nlnI3kRF2FVYP0vl44DqNPk78jY9RBLibAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUayYrqe1YOvcEo0l/28na5I9yNx0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2F5WXJxZTFZT3ZjRW8wbF8y OG5hNUk5eU54MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 PdAwDQYJKoZIhvcNAQELBQADggEBAGQ0s3g6EWAON7eR2+Yl2eouJkY8gMztjx4p IhJkXv9dkc3Ecrp+PVsAV5mTIN8W4igEodxfHLLVux9fVanhVWRmCOcn/ShGLDM9 jqeF5bwNt3ooPLZHOQskH1ZgS/Df3s1NImIzM7xt8SH/22Rh6SBB4Xw5uEiu+cvs bzXyxJDB1tiIJShjYVEy+CpQoglIFTjFIRw6XS76p18E7pF5dIvMiWHU5Of5Ge1Y lT+BwTbk/Co/3ZgUSCtc8/andGTj+80s/ZKBPsXQ8uJTNd4+HbxDp2k88EI//xyN 9ncfFX/U1ZXjwLR93CvD97jAbgG8xT72nEb8vCGT0gHJ9eTiXkw= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org