$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa File: tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa (raw, json) Hash identifier: uZwBjgEdQ42h5gvB42ydkeC4w2GZpvssN9xwttqDwi8= Subject key identifier: B4:99:F3:85:6E:08:70:D5:DF:73:E3:1B:4F:68:D3:C1:F1:91:D1:C7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2265 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa Signing time: Mon 26 Aug 2024 05:33:57 +0000 ROA not before: Mon 26 Aug 2024 05:33:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8805 (0x2265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B499F3856E0870D5DF73E31B4F68D3C1F191D1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:1f:69:0b:4b:81:5f:c4:29:13:3a:73:09: a7:ef:b4:62:c7:fa:de:cc:12:19:17:ee:58:9c:48: 71:41:18:e3:a5:f0:18:41:35:0d:3d:b7:e2:72:2a: 43:86:cc:a0:de:6f:8c:a5:1e:16:5a:0d:89:e0:ef: 9d:34:9c:be:06:a8:eb:55:86:9b:bc:27:bd:b6:6d: 04:01:71:69:53:90:be:93:11:31:dd:da:1e:23:7c: 6a:bc:40:9a:09:12:20:eb:31:ed:f0:64:b3:26:77: 09:c6:cb:d5:90:2a:65:0f:49:1f:32:e1:9d:84:d7: 52:13:df:88:f8:c8:91:52:14:f8:75:ae:33:e9:4d: 24:bf:4e:54:b8:60:33:10:b8:2e:4c:d8:c3:c3:6c: ea:f2:5a:6b:96:c5:9e:fe:00:b3:99:76:74:31:45: 94:9c:ef:1c:23:07:35:59:40:a5:67:a9:37:c1:03: 83:e2:d3:c8:de:c8:55:ba:73:0f:7c:6b:d8:5a:95: c0:14:38:98:32:08:1e:11:70:0a:1b:57:9f:89:ac: a3:98:6a:a9:f1:7e:69:89:15:8e:f9:1c:84:85:04: cc:52:25:ac:e5:b2:b8:8b:3e:f3:3f:75:9f:67:e3: 8a:e5:6d:3c:be:8f:5d:03:a8:d7:54:ef:e1:0c:dd: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:99:F3:85:6E:08:70:D5:DF:73:E3:1B:4F:68:D3:C1:F1:91:D1:C7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.136.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7a:4e:d7:e2:81:1c:58:e0:c2:94:f2:86:66:38:53:48:65: a8:4c:2b:56:c1:3e:2f:8e:25:b4:02:5a:6d:20:e3:55:fd:31: 56:8b:a1:4a:8c:ca:11:dd:a1:b5:9d:95:7f:73:50:13:b1:55: 05:86:2a:f1:b2:c2:8e:1a:12:98:bd:6e:6f:fd:88:22:67:35: 64:e3:33:bc:8b:cc:24:e5:2b:8f:2a:e7:09:a4:e2:7d:48:6d: b5:dd:f0:0d:06:27:0f:e8:4e:a0:a5:bb:f7:70:8f:ef:2e:47: 01:8f:f3:99:80:74:70:9f:86:cc:60:4b:f7:56:a1:89:be:9a: 40:ec:98:7f:a9:f2:e7:b1:d6:a0:68:4e:c3:ed:5c:42:c9:7d: e8:bb:91:49:df:b9:90:f5:4e:22:95:79:34:b4:ed:cf:39:99: e4:8f:57:5a:89:11:5e:ff:fa:5b:1b:b3:af:f6:d4:a9:e2:f3: 69:ac:e6:dd:e1:2f:c1:e0:bd:37:54:23:f8:c3:25:8f:1d:24: df:03:ae:e5:0a:db:eb:98:2b:c8:3f:e2:d2:87:2a:e5:83:40: ee:11:0c:81:d2:37:b3:37:5e:4d:d5:19:90:fc:14:dd:67:75: 02:07:e7:d7:d4:e7:90:3a:6b:26:a1:87:04:e4:6e:7a:1c:9e: d6:03:ce:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICImUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0OTlGMzg1NkUwODcw RDVERjczRTMxQjRGNjhEM0MxRjE5MUQxQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgph9pC0uBX8QpEzpzCafvtGLH+t7MEhkX7licSHFBGOOl8BhB NQ09t+JyKkOGzKDeb4ylHhZaDYng7500nL4GqOtVhpu8J722bQQBcWlTkL6TETHd 2h4jfGq8QJoJEiDrMe3wZLMmdwnGy9WQKmUPSR8y4Z2E11IT34j4yJFSFPh1rjPp TSS/TlS4YDMQuC5M2MPDbOryWmuWxZ7+ALOZdnQxRZSc7xwjBzVZQKVnqTfBA4Pi 08jeyFW6cw98a9halcAUOJgyCB4RcAobV5+JrKOYaqnxfmmJFY75HISFBMxSJazl sriLPvM/dZ9n44rlbTy+j10DqNdU7+EM3X9BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtJnzhW4IcNXfc+MbT2jTwfGR0ccwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RKbnpoVzRJY05YZmMtTWJU MmpUd2ZHUjBjYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2ogwDQYJKoZIhvcNAQELBQADggEBAFN6TtfigRxY4MKU8oZmOFNIZahMK1bBPi+O JbQCWm0g41X9MVaLoUqMyhHdobWdlX9zUBOxVQWGKvGywo4aEpi9bm/9iCJnNWTj M7yLzCTlK48q5wmk4n1IbbXd8A0GJw/oTqClu/dwj+8uRwGP85mAdHCfhsxgS/dW oYm+mkDsmH+p8uex1qBoTsPtXELJfei7kUnfuZD1TiKVeTS07c85meSPV1qJEV7/ +lsbs6/21Kni82ms5t3hL8HgvTdUI/jDJY8dJN8DruUK2+uYK8g/4tKHKuWDQO4R DIHSN7M3Xk3VGZD8FN1ndQIH59fU55A6ayahhwTkbnocntYDztY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org