$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcmEbczd7gY33gqdl94lDZLRW4c.roa File: CcmEbczd7gY33gqdl94lDZLRW4c.roa (raw, json) Hash identifier: 2JbPTj0jQ7KGfNnTizc4C8hx/xtX1qtCBIUIu3EQTj4= Subject key identifier: 09:C9:84:6D:CC:DD:EE:06:37:DE:0A:9D:97:DE:25:0D:92:D1:5B:87 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2175 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcmEbczd7gY33gqdl94lDZLRW4c.roa Signing time: Mon 26 Aug 2024 05:33:01 +0000 ROA not before: Mon 26 Aug 2024 05:33:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 49.158.192.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8565 (0x2175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=09C9846DCCDDEE0637DE0A9D97DE250D92D15B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:f3:1c:fc:4c:0b:0a:46:59:73:ba:2d:de: 1b:a5:e1:98:cd:05:e1:06:c6:db:34:57:17:48:de: 92:9e:79:da:ff:a9:8e:1a:65:2d:60:02:e3:00:0f: ab:aa:64:d2:ee:63:b3:4b:01:cc:cc:b5:0a:30:0c: 94:bc:42:5f:e6:73:23:9b:90:1e:db:d0:37:ff:95: 8f:10:50:4c:02:3d:d4:1b:d6:43:e2:57:7c:3c:27: 75:a8:d6:b6:15:ff:6f:cf:6e:51:ba:2a:19:73:41: 50:d5:43:39:a5:b6:c1:31:55:e7:7a:7a:0a:3b:f9: 4a:b0:87:d8:1a:1b:93:29:df:e6:2e:e3:95:3e:e0: 17:dd:f6:d6:a9:a1:4b:62:60:56:11:6e:1d:17:17: 5e:0a:e7:3e:08:2c:e9:db:e6:9e:0d:df:6e:20:f4: 11:9b:dd:a1:9e:c5:08:99:a8:8c:01:b4:99:96:c8: 21:87:76:33:4c:2c:74:3f:98:fd:33:62:04:57:fd: 96:6b:74:38:46:e0:ca:8d:96:9c:8d:88:a6:b5:09: 86:e1:17:f8:ee:88:62:e5:69:05:f9:4c:4d:3f:46: ef:45:f7:15:be:e4:c1:8e:a8:da:01:9f:66:c0:0d: b7:56:68:90:21:4e:86:87:a6:39:86:4e:e1:72:96: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C9:84:6D:CC:DD:EE:06:37:DE:0A:9D:97:DE:25:0D:92:D1:5B:87 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcmEbczd7gY33gqdl94lDZLRW4c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.192.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:9d:0c:0b:ec:5f:7c:c9:92:f1:fe:92:01:3a:89:71:2a:1b: 12:b9:50:40:bd:e0:cf:b3:c9:cf:f3:9a:8b:4e:7d:5e:d5:22: c7:a9:7a:79:84:1d:b8:99:63:ac:d0:87:68:9d:2a:20:5c:a4: da:5a:5e:73:63:95:a5:4e:0b:ee:42:a0:b2:7a:ba:84:40:97: f0:ae:ba:7c:ff:cc:dd:17:b7:7e:89:89:70:51:11:7c:ca:a3: 47:ac:78:aa:81:65:3a:c8:e3:72:39:05:3f:bd:10:ee:4f:bb: 95:4f:3c:5e:fc:3d:53:aa:38:c7:47:8c:40:e5:e0:cf:f3:c3: ea:1d:49:12:97:9d:37:7d:bc:b3:ac:19:ed:7c:fe:5f:4f:06: e7:49:b7:7b:0e:13:17:57:35:00:b2:3b:9d:2c:04:75:c0:e7: 1d:ce:90:21:a9:c9:fa:c1:4a:62:7f:d1:d4:e7:e9:8f:40:54: ad:0c:c1:7d:ee:cf:32:b8:13:94:67:03:29:b5:76:dc:0a:15: 81:97:83:9f:b3:b2:1c:f0:7b:a2:19:f0:b0:05:57:a4:57:0f: 73:85:dc:b9:9f:b5:d6:92:38:e4:2f:06:09:3e:b2:bc:73:6f: 2d:1d:40:0f:ee:62:20:35:8d:8e:10:6f:74:9f:41:03:97:69: 2f:5b:08:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5Qzk4NDZEQ0NEREVF MDYzN0RFMEE5RDk3REUyNTBEOTJEMTVCODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA8fMc/EwLCkZZc7ot3hul4ZjNBeEGxts0VxdI3pKeedr/qY4a ZS1gAuMAD6uqZNLuY7NLAczMtQowDJS8Ql/mcyObkB7b0Df/lY8QUEwCPdQb1kPi V3w8J3Wo1rYV/2/PblG6KhlzQVDVQzmltsExVed6ego7+Uqwh9gaG5Mp3+Yu45U+ 4Bfd9tapoUtiYFYRbh0XF14K5z4ILOnb5p4N324g9BGb3aGexQiZqIwBtJmWyCGH djNMLHQ/mP0zYgRX/ZZrdDhG4MqNlpyNiKa1CYbhF/juiGLlaQX5TE0/Ru9F9xW+ 5MGOqNoBn2bADbdWaJAhToaHpjmGTuFylr8XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCcmEbczd7gY33gqdl94lDZLRW4cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NjbUViY3pkN2dZMzNncWRs OTRsRFpMUlc0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx nsAwDQYJKoZIhvcNAQELBQADggEBAGudDAvsX3zJkvH+kgE6iXEqGxK5UEC94M+z yc/zmotOfV7VIsepenmEHbiZY6zQh2idKiBcpNpaXnNjlaVOC+5CoLJ6uoRAl/Cu unz/zN0Xt36JiXBREXzKo0eseKqBZTrI43I5BT+9EO5Pu5VPPF78PVOqOMdHjEDl 4M/zw+odSRKXnTd9vLOsGe18/l9PBudJt3sOExdXNQCyO50sBHXA5x3OkCGpyfrB SmJ/0dTn6Y9AVK0MwX3uzzK4E5RnAym1dtwKFYGXg5+zshzwe6IZ8LAFV6RXD3OF 3LmftdaSOOQvBgk+srxzby0dQA/uYiA1jY4Qb3SfQQOXaS9bCFY= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:58 2024 by rpki-client on console-ams.rpki-client.org