$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mdbKJfWw89p4toX-7SFy56ntPgQ.roa File: mdbKJfWw89p4toX-7SFy56ntPgQ.roa (raw, json) Hash identifier: irvriP2bpaaCu5E0LNtdCg5BKlRLgV9YVxqcMB8ix3E= Subject key identifier: 99:D6:CA:25:F5:B0:F3:DA:78:B6:85:FE:ED:21:72:E7:A9:ED:3E:04 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 217F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mdbKJfWw89p4toX-7SFy56ntPgQ.roa Signing time: Mon 26 Aug 2024 05:33:03 +0000 ROA not before: Mon 26 Aug 2024 05:33:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 211.76.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8575 (0x217f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99D6CA25F5B0F3DA78B685FEED2172E7A9ED3E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:10:88:6f:b6:fb:72:bb:18:0a:1e:10:e4: f8:24:63:4a:1a:1a:80:9c:c2:54:f8:6c:65:be:b6: ce:04:ce:68:d0:cc:96:52:30:ac:d3:cf:68:34:32: 9c:bd:49:6d:80:87:d9:48:b4:68:59:f0:bb:a3:25: 19:74:66:c5:2c:2e:a5:a4:c5:8a:a0:d6:57:90:d1: 47:f1:8a:f9:54:9e:52:62:71:1c:69:c9:99:1d:89: c8:56:c7:cf:bf:bc:1d:be:47:9f:60:17:31:86:c6: 75:18:1b:69:8a:91:33:b7:18:ed:16:b2:b8:54:15: e7:6f:59:9f:d3:87:fe:c9:d7:de:65:47:e6:ca:6a: 9b:84:d2:16:cd:c4:07:ff:b9:5e:7e:4f:a6:a3:a2: ae:f7:0d:73:33:47:93:3b:b2:17:89:6d:16:ec:86: e3:67:16:24:97:c7:cc:07:a4:f5:09:7f:85:4a:e0: 90:7f:7f:55:49:0e:b9:95:bb:8f:f6:62:1a:aa:5a: 98:df:39:94:6a:dd:02:10:68:91:15:30:87:a1:58: af:5f:9f:20:bf:61:8e:52:52:c5:41:56:d4:b5:f9: 2e:43:f1:ce:c5:9f:68:13:79:63:16:54:c3:9b:c0: 8f:f3:7d:96:01:1a:ed:1c:24:ad:95:c7:f5:fe:58: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D6:CA:25:F5:B0:F3:DA:78:B6:85:FE:ED:21:72:E7:A9:ED:3E:04 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mdbKJfWw89p4toX-7SFy56ntPgQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.77.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f1:12:89:fa:0c:6b:45:a8:6c:7d:40:e5:41:24:25:3d:b5: f2:f3:39:24:a1:76:43:16:a7:01:0c:41:28:84:b7:1a:65:73: 9d:d3:e9:c8:2c:c6:3d:83:15:f9:48:30:21:45:2f:28:9b:0d: c9:41:9d:ac:3e:b2:0b:cb:ae:d1:ea:ea:ce:40:78:de:e8:dc: f6:c1:dc:0d:4b:d3:7a:34:83:77:4b:28:50:7a:e5:cc:65:94: cf:77:78:b4:c5:84:e1:eb:a3:89:1e:58:e7:b1:e3:0e:3f:9e: 38:5e:04:49:ce:a1:d3:8d:cf:9e:fe:79:23:b6:b7:57:21:49: b0:c3:9d:05:eb:2f:88:51:2c:37:20:a8:c2:9a:a4:b3:e6:af: b9:48:f5:d8:d1:ac:26:32:d2:fe:e6:97:ef:7d:5e:59:1d:22: d7:93:e5:ad:ff:39:f2:de:e1:fd:ce:3b:67:b3:60:86:9e:89: 22:ea:75:67:f0:b3:5d:b5:7f:95:9b:e8:c2:34:18:89:59:ae: a5:85:18:84:b1:0d:e2:ab:cd:58:e4:76:cc:24:b4:d1:d4:9c: e0:fb:b0:cf:ff:c6:a1:fc:98:2f:c2:22:df:c0:84:c2:03:77: 09:15:d5:b4:d8:99:40:21:51:a4:de:34:46:98:1d:af:49:df: ac:0f:ba:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RDZDQTI1RjVCMEYz REE3OEI2ODVGRUVEMjE3MkU3QTlFRDNFMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSYRCIb7b7crsYCh4Q5PgkY0oaGoCcwlT4bGW+ts4EzmjQzJZS MKzTz2g0Mpy9SW2Ah9lItGhZ8LujJRl0ZsUsLqWkxYqg1leQ0UfxivlUnlJicRxp yZkdichWx8+/vB2+R59gFzGGxnUYG2mKkTO3GO0WsrhUFedvWZ/Th/7J195lR+bK apuE0hbNxAf/uV5+T6ajoq73DXMzR5M7sheJbRbshuNnFiSXx8wHpPUJf4VK4JB/ f1VJDrmVu4/2YhqqWpjfOZRq3QIQaJEVMIehWK9fnyC/YY5SUsVBVtS1+S5D8c7F n2gTeWMWVMObwI/zfZYBGu0cJK2Vx/X+WPbXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmdbKJfWw89p4toX+7SFy56ntPgQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21kYktKZld3ODlwNHRvWC03 U0Z5NTZudFBnUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TE0wDQYJKoZIhvcNAQELBQADggEBADzxEon6DGtFqGx9QOVBJCU9tfLzOSShdkMW pwEMQSiEtxplc53T6cgsxj2DFflIMCFFLyibDclBnaw+sgvLrtHq6s5AeN7o3PbB 3A1L03o0g3dLKFB65cxllM93eLTFhOHro4keWOex4w4/njheBEnOodONz57+eSO2 t1chSbDDnQXrL4hRLDcgqMKapLPmr7lI9djRrCYy0v7ml+99XlkdIteT5a3/OfLe 4f3OO2ezYIaeiSLqdWfws121f5Wb6MI0GIlZrqWFGISxDeKrzVjkdswktNHUnOD7 sM//xqH8mC/CIt/AhMIDdwkV1bTYmUAhUaTeNEaYHa9J36wPuuY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org