$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smKBg5LelxAwBlBR5ax5gezNOjg.roa File: smKBg5LelxAwBlBR5ax5gezNOjg.roa (raw, json) Hash identifier: +3YJTotj31esz78UY5/SZRYOr1yoICLKVejVD3Ei2O0= Subject key identifier: B2:62:81:83:92:DE:97:10:30:06:50:51:E5:AC:79:81:EC:CD:3A:38 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2160 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smKBg5LelxAwBlBR5ax5gezNOjg.roa Signing time: Mon 26 Aug 2024 05:32:56 +0000 ROA not before: Mon 26 Aug 2024 05:32:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8544 (0x2160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:32:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B262818392DE971030065051E5AC7981ECCD3A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:24:69:13:eb:53:f9:c0:e0:4f:02:3f:80: 81:c6:25:a1:c9:49:f7:8f:93:07:aa:7b:13:94:10: 9b:96:65:d0:58:9a:d1:31:e0:da:9c:77:d0:fe:35: 37:c7:ba:80:09:b7:6e:e6:26:46:e3:91:c9:37:9d: 5e:c0:30:b3:ef:6d:ae:dc:53:1c:b2:39:37:08:3e: 8a:86:79:00:ba:87:e4:82:a8:ec:a7:8d:48:13:fa: 70:9b:8f:69:d1:e7:5a:a7:62:20:83:ff:fa:13:b4: 17:6b:8e:e2:fa:b5:7f:ab:f8:39:9f:d8:c8:85:d2: 8c:db:c2:35:d6:9f:3c:d6:08:f3:16:cc:cd:03:a9: 84:4b:c0:cf:29:ab:88:05:b9:10:ba:b3:98:62:1b: 92:e7:af:de:8c:aa:93:a0:ed:0f:d6:e1:d2:1f:c8: 29:f6:65:6d:fe:16:5f:ac:f3:d2:9e:60:2f:64:f7: 9c:1c:72:97:9d:a7:8a:d3:21:37:7b:c6:40:3a:02: cd:24:27:d3:5f:97:23:77:6a:75:fd:b6:d9:d8:d8: 10:60:05:fd:25:e1:99:6a:e2:6f:44:b8:13:65:9d: b8:a8:0a:82:dc:eb:49:61:7e:49:1c:a7:ff:d4:44: 4a:06:e1:d4:0e:8d:38:aa:72:ef:84:4b:d5:f2:8d: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:62:81:83:92:DE:97:10:30:06:50:51:E5:AC:79:81:EC:CD:3A:38 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smKBg5LelxAwBlBR5ax5gezNOjg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.137.0/24 Signature Algorithm: sha256WithRSAEncryption 22:fa:b4:2d:c4:6b:79:7c:f4:4f:d6:c3:24:bf:fe:75:a3:bb: a2:09:57:c4:cb:38:21:aa:1f:72:54:b1:66:1a:03:50:fd:28: ca:1c:25:44:da:a8:85:3e:b6:1c:12:7e:a6:aa:47:f8:f9:16: c5:60:9c:30:24:9c:1f:12:8f:bf:a1:c1:0f:f5:7e:32:fd:3a: 85:b6:45:28:9a:39:03:25:43:73:2b:f9:ad:25:1f:89:e4:09: fe:55:7f:e8:91:6c:bf:a9:94:20:92:f0:67:c6:57:17:da:c1: fb:0f:67:dc:4d:99:db:c7:38:f0:db:ea:9b:36:8d:19:91:b8: e4:0f:50:e2:46:f0:30:7d:7f:09:5e:ae:5d:33:7a:18:84:9e: a6:fe:ea:40:cb:3c:e0:d5:b4:36:74:19:ee:27:a8:08:f6:31: 4d:88:5b:a9:66:07:f3:5d:2e:db:23:73:da:e6:a5:0d:65:a9: 54:a1:86:ae:d4:5c:0b:a4:22:1f:c3:5a:ba:03:af:26:6d:2a: ca:c5:ba:2f:67:81:3b:c9:70:96:87:00:b6:1a:7b:8b:46:1d: 4e:ed:dc:6e:69:5c:09:77:d5:21:e2:be:66:69:19:1d:c7:4f: ba:5f:fa:81:21:a9:4b:14:fb:a9:70:03:7a:7b:0e:37:2c:14: 7b:be:dc:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMyNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyNjI4MTgzOTJERTk3 MTAzMDA2NTA1MUU1QUM3OTgxRUNDRDNBMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaSiRpE+tT+cDgTwI/gIHGJaHJSfePkweqexOUEJuWZdBYmtEx 4Nqcd9D+NTfHuoAJt27mJkbjkck3nV7AMLPvba7cUxyyOTcIPoqGeQC6h+SCqOyn jUgT+nCbj2nR51qnYiCD//oTtBdrjuL6tX+r+Dmf2MiF0ozbwjXWnzzWCPMWzM0D qYRLwM8pq4gFuRC6s5hiG5Lnr96MqpOg7Q/W4dIfyCn2ZW3+Fl+s89KeYC9k95wc cpedp4rTITd7xkA6As0kJ9NflyN3anX9ttnY2BBgBf0l4Zlq4m9EuBNlnbioCoLc 60lhfkkcp//UREoG4dQOjTiqcu+ES9XyjawhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsmKBg5LelxAwBlBR5ax5gezNOjgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NtS0JnNUxlbHhBd0JsQlI1 YXg1Z2V6Tk9qZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2okwDQYJKoZIhvcNAQELBQADggEBACL6tC3Ea3l89E/WwyS//nWju6IJV8TLOCGq H3JUsWYaA1D9KMocJUTaqIU+thwSfqaqR/j5FsVgnDAknB8Sj7+hwQ/1fjL9OoW2 RSiaOQMlQ3Mr+a0lH4nkCf5Vf+iRbL+plCCS8GfGVxfawfsPZ9xNmdvHOPDb6ps2 jRmRuOQPUOJG8DB9fwlerl0zehiEnqb+6kDLPODVtDZ0Ge4nqAj2MU2IW6lmB/Nd Ltsjc9rmpQ1lqVShhq7UXAukIh/DWroDryZtKsrFui9ngTvJcJaHALYae4tGHU7t 3G5pXAl31SHivmZpGR3HT7pf+oEhqUsU+6lwA3p7DjcsFHu+3Es= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:46 2024 by rpki-client on console-fra.rpki-client.org