$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cbxUc6BFjMZE5q-iztLiD-QNLAs.roa File: cbxUc6BFjMZE5q-iztLiD-QNLAs.roa (raw, json) Hash identifier: ZJOj6uq5/JVylKH8nhKZrwVQCcNJuo7pSDU0PLLf9y4= Subject key identifier: 71:BC:54:73:A0:45:8C:C6:44:E6:AF:A2:CE:D2:E2:0F:E4:0D:2C:0B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2212 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cbxUc6BFjMZE5q-iztLiD-QNLAs.roa Signing time: Mon 26 Aug 2024 05:33:38 +0000 ROA not before: Mon 26 Aug 2024 05:33:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 180.218.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8722 (0x2212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=71BC5473A0458CC644E6AFA2CED2E20FE40D2C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:f3:f9:4a:21:78:6d:28:f3:81:b9:b3:22: 4e:1e:db:1d:18:16:3c:ee:5d:5f:a1:bf:52:ae:92: b0:bf:38:4e:cd:29:b9:23:dc:60:7a:8f:31:db:46: dd:03:7a:e6:4a:3a:72:80:f6:ff:ca:9c:8a:0b:2f: b1:22:24:25:7f:df:9d:75:a3:c5:a2:dc:20:45:9f: 1e:a5:5f:9e:90:55:fa:4e:57:8a:ac:5c:f3:c0:05: b4:ee:46:fc:44:e6:69:16:b4:3b:dd:35:49:5d:5a: 6e:7b:16:71:ad:2d:3d:b6:c5:7f:29:a5:a7:24:19: 72:ab:aa:72:5f:df:6b:ac:07:f0:ba:f6:ff:0e:f3: eb:58:55:3c:af:56:86:a5:ad:73:4b:52:a9:b4:4d: f1:6f:24:e9:c8:67:da:92:eb:15:ad:09:bc:74:b8: 4c:42:59:c5:dc:c3:d7:4b:3b:6a:5e:7c:1b:85:42: 92:74:34:2f:a2:c1:57:aa:57:65:72:a0:c1:46:0a: 90:6a:7c:94:3c:73:45:02:6a:08:92:33:6c:32:6b: 01:14:9b:6a:cd:27:68:3e:7a:34:a8:e5:87:54:a3: 62:ff:9d:db:d2:ae:a0:8f:92:75:5b:db:83:81:9c: 37:ae:f8:e3:c5:bd:41:f2:6f:7f:70:ad:ca:c4:ea: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BC:54:73:A0:45:8C:C6:44:E6:AF:A2:CE:D2:E2:0F:E4:0D:2C:0B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cbxUc6BFjMZE5q-iztLiD-QNLAs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.44.0/22 Signature Algorithm: sha256WithRSAEncryption 51:c7:7d:95:a9:5b:4b:fa:a2:93:19:ee:2a:65:02:00:6d:a9: 2c:51:3d:17:d0:dc:b5:bd:67:87:c6:a2:53:91:95:b4:96:e7: 6f:c6:58:93:87:5a:e0:71:81:ec:57:15:c2:ae:27:ce:c7:64: 5a:30:83:ed:fa:e2:55:7a:bc:09:5e:ee:d5:66:ba:42:57:b0: 43:e0:b7:e0:6e:cd:42:e8:08:f2:a5:e8:df:e1:d0:9d:b1:d7: 76:e9:16:4d:bd:74:b2:26:b9:f7:e7:b1:4d:35:11:25:c5:5b: 8e:c5:3d:f2:9f:76:d7:a0:a8:53:ef:d8:32:a0:67:8f:38:42: 3c:f8:a5:26:c6:e9:f4:e9:cd:25:45:31:fd:ca:c4:2f:61:2d: 5c:d5:8c:3a:0c:f9:17:21:8b:98:f2:63:f3:8c:bb:09:89:4a: a1:a8:69:64:03:9d:af:66:a4:49:71:89:98:3b:88:2c:8e:ca: e2:a2:79:38:a4:62:72:91:81:e3:05:46:da:0a:c8:15:1e:1b: 4e:2b:9f:31:04:20:08:47:9f:80:67:9c:66:39:64:39:65:2f: 53:81:df:c4:d6:22:a5:03:7f:3f:59:3f:57:cc:79:1c:30:ca: 6c:e8:c1:d1:21:1a:e3:bf:05:0a:ea:03:4d:b2:fb:2b:07:ab: e9:89:a8:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIhIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxQkM1NDczQTA0NThD QzY0NEU2QUZBMkNFRDJFMjBGRTQwRDJDMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPDfP5SiF4bSjzgbmzIk4e2x0YFjzuXV+hv1KukrC/OE7NKbkj 3GB6jzHbRt0DeuZKOnKA9v/KnIoLL7EiJCV/3511o8Wi3CBFnx6lX56QVfpOV4qs XPPABbTuRvxE5mkWtDvdNUldWm57FnGtLT22xX8ppackGXKrqnJf32usB/C69v8O 8+tYVTyvVoalrXNLUqm0TfFvJOnIZ9qS6xWtCbx0uExCWcXcw9dLO2pefBuFQpJ0 NC+iwVeqV2VyoMFGCpBqfJQ8c0UCagiSM2wyawEUm2rNJ2g+ejSo5YdUo2L/ndvS rqCPknVb24OBnDeu+OPFvUHyb39wrcrE6slPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcbxUc6BFjMZE5q+iztLiD+QNLAswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NieFVjNkJGak1aRTVxLWl6 dExpRC1RTkxBcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2iwwDQYJKoZIhvcNAQELBQADggEBAFHHfZWpW0v6opMZ7iplAgBtqSxRPRfQ3LW9 Z4fGolORlbSW52/GWJOHWuBxgexXFcKuJ87HZFowg+364lV6vAle7tVmukJXsEPg t+BuzULoCPKl6N/h0J2x13bpFk29dLImuffnsU01ESXFW47FPfKfdtegqFPv2DKg Z484Qjz4pSbG6fTpzSVFMf3KxC9hLVzVjDoM+Rchi5jyY/OMuwmJSqGoaWQDna9m pElxiZg7iCyOyuKieTikYnKRgeMFRtoKyBUeG04rnzEEIAhHn4BnnGY5ZDllL1OB 38TWIqUDfz9ZP1fMeRwwymzowdEhGuO/BQrqA02y+ysHq+mJqEg= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org