$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1zI0o2VoAVSKRpRYtkWBCqe96w.roa File: d1zI0o2VoAVSKRpRYtkWBCqe96w.roa (raw, json) Hash identifier: lrp2jOx33bOoJtL2NDBfPCUMcf9t+yfRHn49gbP4ZO8= Subject key identifier: 77:5C:C8:D2:8D:95:A0:05:52:29:1A:51:62:D9:16:04:2A:9E:F7:AC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22C9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1zI0o2VoAVSKRpRYtkWBCqe96w.roa Signing time: Mon 26 Aug 2024 05:34:22 +0000 ROA not before: Mon 26 Aug 2024 05:34:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8905 (0x22c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=775CC8D28D95A00552291A5162D916042A9EF7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:bf:4a:02:c6:7d:42:c6:7f:1d:39:4c:18: 17:72:7d:9d:35:b7:2d:6e:cd:37:6a:aa:7d:22:5a: 5c:22:35:f6:0b:52:4d:dd:36:b0:c6:4a:06:19:fc: 9c:5b:85:b4:19:b7:19:cd:85:20:5c:a7:ea:0c:7d: eb:b3:96:4c:bd:7c:dc:73:8b:bc:4e:8f:46:dc:37: 72:84:72:3d:e8:67:41:5e:1e:19:b0:29:f9:6b:d2: 63:69:ec:fb:fe:c4:26:7a:d4:cf:32:c6:05:a1:a8: ee:55:04:90:8f:a2:35:a7:26:fc:72:d5:6a:d8:e8: 21:03:ac:d2:14:3a:b1:be:c0:27:11:d2:6e:ba:bd: bb:1c:6a:3d:81:51:22:12:88:78:06:77:a9:ae:e3: 14:eb:4b:a3:a5:89:e4:0b:88:01:ac:14:4c:44:4f: ae:8d:c0:7a:fb:2e:98:b0:7c:2c:ee:c9:20:fc:2c: 02:56:52:70:ee:c4:0f:9f:bf:c0:e8:ae:64:2f:de: 8d:cb:99:74:49:7f:07:22:c3:39:f3:94:0b:40:19: 66:29:28:2b:37:82:05:8f:97:dc:a1:3d:a8:59:fc: ff:ef:81:c2:f9:f9:c5:25:09:ec:63:e4:0c:77:02: 5f:46:7a:ed:41:8b:4e:f0:f5:41:6b:5a:cc:0c:4d: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5C:C8:D2:8D:95:A0:05:52:29:1A:51:62:D9:16:04:2A:9E:F7:AC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1zI0o2VoAVSKRpRYtkWBCqe96w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.168.0/21 Signature Algorithm: sha256WithRSAEncryption 84:da:ce:5d:8e:84:b0:6b:88:40:64:02:0e:e7:33:c4:d5:26: 5e:1a:e5:65:4f:86:88:7b:dd:d4:1f:2f:50:81:b5:a5:f5:fd: c7:00:46:3f:81:ad:04:73:46:47:ff:9f:f1:26:3d:b2:11:30: 18:46:00:00:f0:34:d9:54:1a:c0:75:c6:d7:3e:86:af:d7:22: f0:87:71:5a:cd:26:44:fb:3c:d2:9b:c0:fc:7c:10:11:a6:05: 24:34:26:17:cb:0c:ae:92:8e:a1:1e:f5:95:f4:1d:5c:ab:e7: b2:57:b1:2d:5b:b9:87:dd:b8:92:0e:22:77:cb:15:1a:15:9b: 8c:55:29:0d:4e:a2:6f:56:37:50:98:70:b7:4f:0c:57:76:c6: c0:58:14:23:91:5b:c7:a2:44:b3:ed:97:cb:6c:d5:c6:21:3a: 59:41:36:3c:01:1a:e7:47:21:f4:62:a0:ad:8c:83:3d:bf:18: c7:00:61:ff:47:52:f3:7a:9f:ab:dc:da:79:6a:bb:64:c6:04: 62:3f:71:c7:4f:58:e2:96:01:59:da:24:e2:c5:d3:29:f6:c8: 84:98:f6:da:9c:7d:3a:2a:e6:40:21:80:a2:4c:b9:c4:93:ba: 3c:ab:93:9c:8f:f7:f4:4d:89:82:64:c3:c2:eb:68:b3:07:c4: d4:c4:3e:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3NUNDOEQyOEQ5NUEw MDU1MjI5MUE1MTYyRDkxNjA0MkE5RUY3QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIIr9KAsZ9QsZ/HTlMGBdyfZ01ty1uzTdqqn0iWlwiNfYLUk3d NrDGSgYZ/JxbhbQZtxnNhSBcp+oMfeuzlky9fNxzi7xOj0bcN3KEcj3oZ0FeHhmw Kflr0mNp7Pv+xCZ61M8yxgWhqO5VBJCPojWnJvxy1WrY6CEDrNIUOrG+wCcR0m66 vbscaj2BUSISiHgGd6mu4xTrS6OlieQLiAGsFExET66NwHr7LpiwfCzuySD8LAJW UnDuxA+fv8DormQv3o3LmXRJfwciwznzlAtAGWYpKCs3ggWPl9yhPahZ/P/vgcL5 +cUlCexj5Ax3Al9Geu1Bi07w9UFrWswMTYrhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd1zI0o2VoAVSKRpRYtkWBCqe96wwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2QxekkwbzJWb0FWU0tScFJZ dGtXQkNxZTk2dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2qgwDQYJKoZIhvcNAQELBQADggEBAITazl2OhLBriEBkAg7nM8TVJl4a5WVPhoh7 3dQfL1CBtaX1/ccARj+BrQRzRkf/n/EmPbIRMBhGAADwNNlUGsB1xtc+hq/XIvCH cVrNJkT7PNKbwPx8EBGmBSQ0JhfLDK6SjqEe9ZX0HVyr57JXsS1buYfduJIOInfL FRoVm4xVKQ1Oom9WN1CYcLdPDFd2xsBYFCORW8eiRLPtl8ts1cYhOllBNjwBGudH IfRioK2Mgz2/GMcAYf9HUvN6n6vc2nlqu2TGBGI/ccdPWOKWAVnaJOLF0yn2yISY 9tqcfToq5kAhgKJMucSTujyrk5yP9/RNiYJkw8LraLMHxNTEPrk= -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:00 2024 by rpki-client on console-fra.rpki-client.org