$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mz7_Mp3cllHAB-tziku5J3VJHtg.roa File: mz7_Mp3cllHAB-tziku5J3VJHtg.roa (raw, json) Hash identifier: UQg8s38idpaw2grET5MCzE211RHFfrtM5B6m9pn5u+o= Subject key identifier: 9B:3E:FF:32:9D:DC:96:51:C0:07:EB:73:8A:4B:B9:27:75:49:1E:D8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2257 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mz7_Mp3cllHAB-tziku5J3VJHtg.roa Signing time: Mon 26 Aug 2024 05:33:53 +0000 ROA not before: Mon 26 Aug 2024 05:33:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.60.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8791 (0x2257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B3EFF329DDC9651C007EB738A4BB92775491ED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:31:e2:1e:ea:52:54:5e:e1:e8:d5:10:4e: 11:82:39:14:4f:44:20:80:1d:e6:1f:83:69:e0:60: 48:2b:e2:02:14:b2:1c:72:cc:79:16:0a:33:67:60: 9e:19:1d:84:5e:04:08:f8:ca:6b:a8:31:9f:64:3d: 57:25:bb:57:24:4a:0c:bd:28:fe:c0:af:ac:5b:ad: 2c:9e:f4:50:32:91:11:f3:d1:96:c9:01:eb:95:18: b8:b9:b4:96:a2:f4:ad:fe:64:13:f8:5c:de:5d:71: 12:03:e8:11:92:5e:d0:25:42:89:39:bb:21:09:45: 4d:e4:0a:95:94:5a:2e:7b:2f:34:9e:e2:4b:8b:1e: 5b:b9:96:9f:7e:8b:fe:22:24:77:1f:f0:bd:c3:db: f2:c6:c8:1f:56:86:d9:8b:71:8b:cb:ba:4f:b8:69: d6:10:d9:cb:e9:a7:f3:e2:74:e1:cb:b2:3e:16:2b: be:48:5f:9e:3d:e7:ed:55:f4:d7:ae:b3:4a:48:40: f4:67:6b:6e:c7:0f:12:69:4e:5a:88:74:dd:b3:8d: fe:4a:1d:c5:74:88:25:00:68:25:f7:ad:d4:57:64: be:db:34:71:34:12:5a:0e:56:d0:39:33:71:97:3d: 3e:2e:13:9c:f7:31:58:f2:3c:e0:c4:c2:6d:bd:92: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3E:FF:32:9D:DC:96:51:C0:07:EB:73:8A:4B:B9:27:75:49:1E:D8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mz7_Mp3cllHAB-tziku5J3VJHtg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.216.0/21 Signature Algorithm: sha256WithRSAEncryption a1:8e:d7:d1:b9:4a:20:2a:e5:42:30:6e:d0:92:96:1e:2c:38: dc:f4:20:3f:d4:28:d2:0a:b2:d3:c1:46:50:98:ec:8b:26:ff: 58:f9:d8:a0:06:1e:ff:98:21:30:f8:5a:2c:db:e0:31:bb:0b: 50:4f:f8:14:cf:f6:78:aa:3b:8a:6e:9a:9d:2b:5f:f9:e8:30: e1:00:d9:2d:d5:6d:80:86:36:cc:43:2e:d6:9e:04:69:f5:c2: d2:0e:87:b5:be:61:b7:9a:81:03:4e:46:bb:73:16:da:32:92: d7:fa:c8:84:35:2e:6f:92:dc:bf:46:25:d5:88:92:54:38:42: 6c:37:fb:61:d9:0c:94:ac:fc:16:c8:2b:d1:c9:2d:85:1f:47: 69:e8:56:95:59:4d:65:2b:25:8f:6b:49:6b:6d:a9:5a:0f:20: 7c:72:c0:d9:2f:41:b0:69:a3:3c:15:71:48:e7:aa:9e:a6:5d: ba:29:64:3e:15:9b:01:dc:5f:08:24:76:16:88:49:69:f9:c5: a6:95:e7:de:01:61:64:39:41:55:4c:c8:b2:cc:b0:07:c9:97: 8e:b0:8c:af:5a:22:31:2e:56:14:ab:43:40:c5:e1:a8:5e:31: b1:75:8f:9a:0e:77:17:0a:d8:b7:81:e4:90:56:f2:5d:3d:a0: 7b:3b:57:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCM0VGRjMyOUREQzk2 NTFDMDA3RUI3MzhBNEJCOTI3NzU0OTFFRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsOjHiHupSVF7h6NUQThGCORRPRCCAHeYfg2ngYEgr4gIUshxy zHkWCjNnYJ4ZHYReBAj4ymuoMZ9kPVclu1ckSgy9KP7Ar6xbrSye9FAykRHz0ZbJ AeuVGLi5tJai9K3+ZBP4XN5dcRID6BGSXtAlQok5uyEJRU3kCpWUWi57LzSe4kuL Hlu5lp9+i/4iJHcf8L3D2/LGyB9WhtmLcYvLuk+4adYQ2cvpp/PidOHLsj4WK75I X5495+1V9Neus0pIQPRna27HDxJpTlqIdN2zjf5KHcV0iCUAaCX3rdRXZL7bNHE0 EloOVtA5M3GXPT4uE5z3MVjyPODEwm29kt59AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmz7/Mp3cllHAB+tziku5J3VJHtgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL216N19NcDNjbGxIQUItdHpp a3U1SjNWSkh0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 PNgwDQYJKoZIhvcNAQELBQADggEBAKGO19G5SiAq5UIwbtCSlh4sONz0ID/UKNIK stPBRlCY7Ism/1j52KAGHv+YITD4Wizb4DG7C1BP+BTP9niqO4pump0rX/noMOEA 2S3VbYCGNsxDLtaeBGn1wtIOh7W+YbeagQNORrtzFtoyktf6yIQ1Lm+S3L9GJdWI klQ4Qmw3+2HZDJSs/BbIK9HJLYUfR2noVpVZTWUrJY9rSWttqVoPIHxywNkvQbBp ozwVcUjnqp6mXbopZD4VmwHcXwgkdhaISWn5xaaV594BYWQ5QVVMyLLMsAfJl46w jK9aIjEuVhSrQ0DF4aheMbF1j5oOdxcK2LeB5JBW8l09oHs7V7k= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:45 2024 by rpki-client on console-fra.rpki-client.org