$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QbcBJkwmT2RhieGw-WPUuwszmKY.roa File: QbcBJkwmT2RhieGw-WPUuwszmKY.roa (raw, json) Hash identifier: Fu/XzTNZ15cvlSg3zRhQcKDLGBYaq8i6/+1mZbU3T2I= Subject key identifier: 41:B7:01:26:4C:26:4F:64:61:89:E1:B0:F9:63:D4:BB:0B:33:98:A6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EAB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QbcBJkwmT2RhieGw-WPUuwszmKY.roa Signing time: Fri 01 Sep 2023 10:16:19 +0000 ROA not before: Fri 01 Sep 2023 10:16:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7851 (0x1eab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=41B701264C264F646189E1B0F963D4BB0B3398A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:86:43:72:94:a1:f4:e6:45:b8:3e:7b:e4:62: 8f:39:16:d4:b1:58:12:4a:fc:e4:a2:88:cd:a9:06: 8b:14:5d:96:0e:9b:ce:c7:9a:02:cd:04:0d:af:eb: fa:05:91:62:11:01:11:fe:f8:6c:db:76:1d:4f:62: ec:cb:ca:cb:77:48:0e:35:eb:34:25:46:9b:46:a2: f3:28:11:0b:31:e3:0e:2d:41:d8:9a:c2:23:fa:31: fd:b1:19:76:56:2a:fb:59:d1:97:35:45:1d:e0:81: 8b:0a:a5:c0:ea:42:fe:d6:e6:b3:78:c9:55:fc:e9: 7e:a6:80:63:a2:90:aa:06:cf:70:cb:af:60:5a:1f: c7:ac:08:94:31:e0:0c:e1:72:5b:bf:66:03:32:c6: 16:6c:98:2b:49:be:ed:8f:29:e0:dc:09:f4:a8:d9: bd:b4:d1:06:bc:49:d7:54:cb:d5:a3:5c:60:da:7e: 1d:a2:37:10:77:84:c6:23:ad:f2:79:90:d7:a4:b7: 9b:b6:ea:52:a9:18:bb:71:3b:c7:3f:f5:7c:8e:3f: f2:d9:f2:b0:d2:43:6d:21:fb:7f:61:54:bd:27:a1: 40:02:5b:8d:48:4a:0e:b6:20:78:cb:72:02:46:7b: b1:16:2c:55:b5:6b:19:ea:df:0c:9c:35:4b:fe:3a: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B7:01:26:4C:26:4F:64:61:89:E1:B0:F9:63:D4:BB:0B:33:98:A6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QbcBJkwmT2RhieGw-WPUuwszmKY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.8.0/21 Signature Algorithm: sha256WithRSAEncryption 38:04:65:1c:fb:9a:c4:7e:08:b2:91:11:61:31:74:91:b4:98: 9e:56:56:13:d3:3f:7e:14:f9:7d:33:0c:6b:fe:df:e4:e7:00: e4:33:7d:d0:72:d6:bf:a9:fc:55:28:2b:87:72:fb:12:16:22: 54:a0:db:bc:e5:c7:8e:0c:76:ff:e4:df:48:fa:1a:f7:cb:1d: 02:10:7f:73:a9:d5:d3:3c:72:79:8d:0a:d9:f1:f4:2d:fd:8b: 30:b9:e5:e5:22:02:9f:4f:14:5d:8b:aa:f4:d6:27:77:3d:1b: 34:ce:53:fd:7d:9b:78:8c:ca:0c:6b:72:f9:a8:50:8a:99:6c: c0:3c:fb:70:52:79:c3:d3:e5:02:ea:81:28:0a:02:ce:6c:28: 72:d1:8e:d9:bc:9b:6d:b7:3d:fd:19:8f:bb:3d:e4:3f:b8:bf: 42:1f:ea:a4:2f:91:64:41:4e:bd:1a:3a:48:65:26:9c:5f:1c: a0:2d:27:b6:89:be:eb:41:7e:6f:5a:d7:62:d4:f5:54:f3:e4: d0:13:13:7b:e4:f2:92:6a:18:cd:72:61:93:c1:fd:0f:c2:f7: a9:b6:a0:cd:a1:a7:25:ae:52:67:88:ac:64:75:51:ae:79:20: d6:95:82:cd:ff:54:3a:6a:05:20:44:59:90:dc:ca:83:13:38: 46:b1:7f:27 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQxQjcwMTI2NEMyNjRG NjQ2MTg5RTFCMEY5NjNENEJCMEIzMzk4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwhkNylKH05kW4PnvkYo85FtSxWBJK/OSiiM2pBosUXZYOm87H mgLNBA2v6/oFkWIRARH++Gzbdh1PYuzLyst3SA416zQlRptGovMoEQsx4w4tQdia wiP6Mf2xGXZWKvtZ0Zc1RR3ggYsKpcDqQv7W5rN4yVX86X6mgGOikKoGz3DLr2Ba H8esCJQx4Azhclu/ZgMyxhZsmCtJvu2PKeDcCfSo2b200Qa8SddUy9WjXGDafh2i NxB3hMYjrfJ5kNekt5u26lKpGLtxO8c/9XyOP/LZ8rDSQ20h+39hVL0noUACW41I Sg62IHjLcgJGe7EWLFW1axnq3wycNUv+OmsdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQbcBJkwmT2RhieGw+WPUuwszmKYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FiY0JKa3dtVDJSaGllR3ct V1BVdXdzem1LWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nwgwDQYJKoZIhvcNAQELBQADggEBADgEZRz7msR+CLKREWExdJG0mJ5WVhPTP34U +X0zDGv+3+TnAOQzfdBy1r+p/FUoK4dy+xIWIlSg27zlx44Mdv/k30j6GvfLHQIQ f3Op1dM8cnmNCtnx9C39izC55eUiAp9PFF2LqvTWJ3c9GzTOU/19m3iMygxrcvmo UIqZbMA8+3BSecPT5QLqgSgKAs5sKHLRjtm8m223Pf0Zj7s95D+4v0If6qQvkWRB Tr0aOkhlJpxfHKAtJ7aJvutBfm9a12LU9VTz5NATE3vk8pJqGM1yYZPB/Q/C96m2 oM2hpyWuUmeIrGR1Ua55INaVgs3/VDpqBSBEWZDcyoMTOEaxfyc= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org