$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ucFOXayFAMP6m9AYcByrRX8L9dc.roa File: ucFOXayFAMP6m9AYcByrRX8L9dc.roa (raw, json) Hash identifier: f60VOp765tUDD1ZPMlxNYT/0ga21PGbu4vqwoNOz75c= Subject key identifier: B9:C1:4E:5D:AC:85:00:C3:FA:9B:D0:18:70:1C:AB:45:7F:0B:F5:D7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21C4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ucFOXayFAMP6m9AYcByrRX8L9dc.roa Signing time: Mon 26 Aug 2024 05:33:20 +0000 ROA not before: Mon 26 Aug 2024 05:33:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 61.58.112.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8644 (0x21c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B9C14E5DAC8500C3FA9BD018701CAB457F0BF5D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:a6:e3:53:03:13:90:a6:87:f9:91:50:e3: ce:56:b8:56:a3:6c:a7:46:36:91:13:6f:91:d8:4c: 49:48:ac:57:fe:f1:19:4f:b3:7a:87:e4:9a:fa:0a: 10:84:65:54:00:36:6e:45:f7:27:68:63:79:df:09: 81:ce:3c:cc:f7:e3:7b:a8:4a:80:9f:69:ca:1c:0b: a0:0a:3d:36:cf:f0:a1:f1:3c:f2:78:c9:64:97:c5: 48:b1:51:5c:8b:fb:50:06:28:ba:2b:5d:f1:30:b0: d5:de:30:eb:94:f3:6f:45:c4:88:58:d4:4d:cd:8a: eb:e5:08:95:6b:05:c3:de:ce:80:c3:d2:0a:41:e0: 73:1a:10:3b:42:e3:f1:b8:90:b0:2d:2d:22:4c:22: c2:ce:c7:ef:f1:60:d9:ad:84:2e:5f:3a:dd:03:81: 9f:66:23:18:5a:5c:d5:6d:22:09:d8:fb:80:e7:c1: 9b:d2:9c:b1:65:a2:ea:ae:3d:e2:35:9a:9a:47:f9: 5f:1a:b9:fe:16:7c:5e:cd:73:c3:b0:9b:cb:75:05: 01:01:24:e5:68:4d:26:bb:a2:77:bc:9e:c5:42:c7: a3:22:d7:6c:d6:6b:ed:fa:09:f6:fe:35:13:e7:07: 35:39:6b:c3:22:27:e5:d6:a7:b1:da:6f:04:8a:35: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C1:4E:5D:AC:85:00:C3:FA:9B:D0:18:70:1C:AB:45:7F:0B:F5:D7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ucFOXayFAMP6m9AYcByrRX8L9dc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.112.0/20 Signature Algorithm: sha256WithRSAEncryption 56:f7:cd:a0:58:19:41:16:89:6f:dc:0e:01:c3:7b:5a:84:1f: 2d:b8:e7:a2:4a:33:f8:27:0e:1a:97:56:e0:6b:7c:69:97:af: 3a:cc:8d:b2:bd:1c:2a:f0:9d:f4:67:e8:94:c9:29:28:c1:d2: 62:14:ec:fe:86:cb:43:6d:49:dd:d2:88:9b:66:fe:2f:d4:f6: fa:2b:0f:00:68:5f:77:89:93:4c:f1:a8:b8:c7:3e:c2:b6:d6: da:c9:07:24:ef:f9:1b:9b:9f:5b:70:b5:00:3c:4a:a8:c9:50: 2e:b2:a8:14:14:6b:5b:7b:05:78:ec:29:90:5e:6f:24:60:27: ad:ba:3c:a6:dd:dc:e7:85:ac:db:db:13:d0:16:bf:f4:0d:98: 58:f9:ce:23:9e:14:3c:39:27:39:13:9a:c6:25:fb:23:f3:c8: 55:03:3d:df:88:0f:05:2d:c9:c1:91:e7:a6:73:2b:20:33:06: 66:fd:f5:12:da:ba:f0:a5:da:1b:78:84:8f:b1:30:11:e7:6c: 5a:1a:70:57:c9:c0:bf:fe:1e:c5:c3:10:12:83:0a:ff:5b:54: 78:4b:4a:43:9d:2f:1d:eb:84:b0:4f:0e:df:30:5b:98:88:32: 2b:3c:04:ad:57:36:e6:25:f5:d6:87:7c:06:c0:1d:b1:a0:6f: 7f:8e:46:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI5QzE0RTVEQUM4NTAw QzNGQTlCRDAxODcwMUNBQjQ1N0YwQkY1RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVFqbjUwMTkKaH+ZFQ485WuFajbKdGNpETb5HYTElIrFf+8RlP s3qH5Jr6ChCEZVQANm5F9ydoY3nfCYHOPMz343uoSoCfacocC6AKPTbP8KHxPPJ4 yWSXxUixUVyL+1AGKLorXfEwsNXeMOuU829FxIhY1E3NiuvlCJVrBcPezoDD0gpB 4HMaEDtC4/G4kLAtLSJMIsLOx+/xYNmthC5fOt0DgZ9mIxhaXNVtIgnY+4DnwZvS nLFlouquPeI1mppH+V8auf4WfF7Nc8Owm8t1BQEBJOVoTSa7one8nsVCx6Mi12zW a+36Cfb+NRPnBzU5a8MiJ+XWp7HabwSKNUdzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUucFOXayFAMP6m9AYcByrRX8L9dcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VjRk9YYXlGQU1QNm05QVlj QnlyUlg4TDlkYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OnAwDQYJKoZIhvcNAQELBQADggEBAFb3zaBYGUEWiW/cDgHDe1qEHy2456JKM/gn DhqXVuBrfGmXrzrMjbK9HCrwnfRn6JTJKSjB0mIU7P6Gy0NtSd3SiJtm/i/U9vor DwBoX3eJk0zxqLjHPsK21trJByTv+Rubn1twtQA8SqjJUC6yqBQUa1t7BXjsKZBe byRgJ626PKbd3OeFrNvbE9AWv/QNmFj5ziOeFDw5JzkTmsYl+yPzyFUDPd+IDwUt ycGR56ZzKyAzBmb99RLauvCl2ht4hI+xMBHnbFoacFfJwL/+HsXDEBKDCv9bVHhL SkOdLx3rhLBPDt8wW5iIMis8BK1XNuYl9daHfAbAHbGgb3+ORu8= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:46 2024 by rpki-client on console-fra.rpki-client.org