$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xgix7pZT2GkHa3WCnceGSpI7dw0.roa File: xgix7pZT2GkHa3WCnceGSpI7dw0.roa (raw, json) Hash identifier: IOmUlDZY08zPUwBics/O0n9mbg5vQ4QUlPYj0ji31DU= Subject key identifier: C6:08:B1:EE:96:53:D8:69:07:6B:75:82:9D:C7:86:4A:92:3B:77:0D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 224B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xgix7pZT2GkHa3WCnceGSpI7dw0.roa Signing time: Mon 26 Aug 2024 05:33:51 +0000 ROA not before: Mon 26 Aug 2024 05:33:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 61.64.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8779 (0x224b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C608B1EE9653D869076B75829DC7864A923B770D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:e6:90:cf:d0:d9:84:32:df:a3:23:ba:b6: ee:da:02:17:71:f1:fc:1a:9f:ea:51:ed:5f:a4:eb: dd:2e:6c:3b:6c:89:d8:25:a7:f2:f9:4e:64:74:25: 4c:b8:82:47:2f:91:1b:e5:72:a7:f3:76:60:15:ee: f5:89:95:dd:53:a1:a2:a4:4e:11:4b:9f:f1:27:e5: cd:8b:87:fa:18:23:32:f8:f5:ac:c8:d5:3c:9b:ab: 5e:b4:a5:83:66:d8:44:a8:75:72:ca:8d:ba:79:eb: ab:5e:61:b2:80:51:b5:9c:4a:57:ae:49:59:97:2c: 92:42:6d:36:e3:b3:0d:20:d5:35:5c:71:ec:3c:e7: a8:fb:72:42:ac:84:96:d1:e5:39:ee:05:ea:ab:ee: e6:2d:e8:b9:33:39:86:35:da:81:cc:d3:0e:b7:ba: 75:93:e0:df:f3:c6:60:86:1e:50:cf:5a:19:1a:4d: 2c:03:35:5e:df:17:b4:29:3d:3d:c7:37:cf:2e:12: 19:fe:02:d2:c4:e1:80:d0:1c:29:c1:1b:a7:b6:4a: 8b:c9:46:fe:93:b3:23:28:1a:4c:9e:ab:d0:18:0d: a5:e9:1f:a8:03:ee:26:6c:fe:c4:e8:1b:83:c6:38: 42:2c:ec:ab:b0:de:c2:0b:78:0d:4a:15:0c:b1:bf: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:08:B1:EE:96:53:D8:69:07:6B:75:82:9D:C7:86:4A:92:3B:77:0D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xgix7pZT2GkHa3WCnceGSpI7dw0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.0.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:ee:c2:1a:75:61:68:a5:65:f5:c8:e0:8a:dc:4a:51:dc:60: 2a:4a:a2:8a:ee:ff:da:76:6d:e9:c1:2b:20:c0:66:0b:b1:f1: 22:fa:1a:de:fe:d3:1f:c1:3a:67:9c:4f:ff:6a:cf:94:e9:bb: 4a:68:e9:79:25:27:55:a9:77:37:58:bc:ad:3b:35:d8:09:0d: 20:ed:7c:80:24:89:37:04:e7:ae:5d:83:f0:55:74:cb:f8:85: b0:af:0e:53:d6:24:ae:1b:34:c4:a6:85:63:f2:99:cb:8e:2c: a8:21:68:52:c2:cc:83:90:32:f1:50:1b:a8:d6:7e:17:85:06: ed:54:de:17:3a:8a:e5:fd:4d:45:91:16:35:0a:fc:a2:65:b9: e3:27:bd:2e:7a:06:de:ac:8d:cc:7b:ec:ce:99:98:17:e1:d2: 8a:a4:f5:a8:f5:ba:2f:b2:3f:9c:b6:c9:af:4f:05:ba:0f:8b: 71:34:30:0c:61:f6:0b:58:11:a0:a9:a3:cf:43:fd:8c:c6:2b: 22:9b:b0:f0:22:e3:53:e9:34:fc:53:7a:23:dd:a0:f2:60:d8: bb:94:7b:af:c2:b2:8a:d9:a7:f3:e2:37:01:f4:12:aa:e4:5d: 71:89:34:cd:e6:45:0d:55:d3:55:c7:8b:1b:27:d1:40:e4:7c: e9:f7:32:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2MDhCMUVFOTY1M0Q4 NjkwNzZCNzU4MjlEQzc4NjRBOTIzQjc3MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGL+aQz9DZhDLfoyO6tu7aAhdx8fwan+pR7V+k690ubDtsidgl p/L5TmR0JUy4gkcvkRvlcqfzdmAV7vWJld1ToaKkThFLn/En5c2Lh/oYIzL49azI 1Tybq160pYNm2ESodXLKjbp566teYbKAUbWcSleuSVmXLJJCbTbjsw0g1TVccew8 56j7ckKshJbR5TnuBeqr7uYt6LkzOYY12oHM0w63unWT4N/zxmCGHlDPWhkaTSwD NV7fF7QpPT3HN88uEhn+AtLE4YDQHCnBG6e2SovJRv6TsyMoGkyeq9AYDaXpH6gD 7iZs/sToG4PGOEIs7Kuw3sILeA1KFQyxv1/vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxgix7pZT2GkHa3WCnceGSpI7dw0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hnaXg3cFpUMkdrSGEzV0Nu Y2VHU3BJN2R3MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 QAAwDQYJKoZIhvcNAQELBQADggEBABzuwhp1YWilZfXI4IrcSlHcYCpKooru/9p2 benBKyDAZgux8SL6Gt7+0x/BOmecT/9qz5Tpu0po6XklJ1WpdzdYvK07NdgJDSDt fIAkiTcE565dg/BVdMv4hbCvDlPWJK4bNMSmhWPymcuOLKghaFLCzIOQMvFQG6jW fheFBu1U3hc6iuX9TUWRFjUK/KJlueMnvS56Bt6sjcx77M6ZmBfh0oqk9aj1ui+y P5y2ya9PBboPi3E0MAxh9gtYEaCpo89D/YzGKyKbsPAi41PpNPxTeiPdoPJg2LuU e6/CsorZp/PiNwH0EqrkXXGJNM3mRQ1V01XHixsn0UDkfOn3MmE= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:27 2024 by rpki-client on console-ams.rpki-client.org