$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bd9EEb3tvZ_wVix8jZGx_RSFNnY.roa File: bd9EEb3tvZ_wVix8jZGx_RSFNnY.roa (raw, json) Hash identifier: TIRwTHUMDajItdAFzkBbffqgLpBe36X6aEiGW3GFgAc= Subject key identifier: 6D:DF:44:11:BD:ED:BD:9F:F0:56:2C:7C:8D:91:B1:FD:14:85:36:76 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21DB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bd9EEb3tvZ_wVix8jZGx_RSFNnY.roa Signing time: Mon 26 Aug 2024 05:33:24 +0000 ROA not before: Mon 26 Aug 2024 05:33:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 49.158.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8667 (0x21db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6DDF4411BDEDBD9FF0562C7C8D91B1FD14853676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:b3:30:01:8d:f8:6f:bb:90:78:17:3b:9f: f8:d1:6e:e4:7e:d3:5e:b1:ba:b9:4e:84:16:ca:90: 9a:2f:e6:7e:50:30:25:01:f6:f6:3c:d1:60:72:da: b6:95:98:d5:93:d2:45:d0:6c:bc:c5:a9:fc:bc:46: 8b:6f:8c:73:eb:46:2b:d7:2d:2d:9c:52:17:12:af: 8a:40:c1:8c:3a:39:63:59:25:2f:a4:d0:c9:e6:8d: 36:ec:f3:0e:09:e4:d0:7a:66:96:e1:69:24:6d:da: 2d:d1:7b:10:a0:4f:6d:77:7e:3a:c7:a6:4a:47:fb: 0d:48:ce:cf:07:75:cb:24:e5:bc:57:df:5b:43:01: d3:1d:65:1e:fd:2f:dd:01:57:05:38:e8:5a:0e:d8: b2:9a:18:53:d5:62:1c:06:03:0b:07:dc:d4:76:ab: 1c:f8:8e:65:11:b4:01:e0:50:9d:24:32:57:bf:73: 27:81:b8:85:f5:47:0f:4d:a3:ca:80:31:54:b7:16: 60:c5:c6:a8:29:e3:be:b2:55:08:c7:f8:ec:76:05: e3:56:9c:07:5a:92:44:a6:2d:3d:95:83:7e:53:78: 73:3e:f8:47:52:0e:6d:cc:23:6e:ce:65:d7:72:b9: 72:24:74:52:72:83:44:d4:92:9b:73:84:03:a3:88: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DF:44:11:BD:ED:BD:9F:F0:56:2C:7C:8D:91:B1:FD:14:85:36:76 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bd9EEb3tvZ_wVix8jZGx_RSFNnY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.148.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:c7:65:e4:4d:e0:ea:80:ea:ce:82:66:ec:b1:10:9a:3c:7c: 52:29:63:b3:61:0a:13:c6:d7:1e:1c:75:ca:95:99:84:92:bc: 74:40:8c:32:31:5f:e9:f6:e2:de:7a:b5:75:92:44:68:1d:f8: c6:9f:71:93:d4:36:8c:ea:c3:4b:28:22:39:53:b1:35:05:36: 53:99:95:fe:69:00:e2:5e:c7:44:eb:0f:dc:c0:2c:bf:74:02: 7d:d8:7f:36:21:4f:8d:b9:7a:69:3e:79:36:b1:92:bd:de:a4: b1:6f:41:b5:a9:7c:c9:0c:01:bc:96:ed:e2:fa:0f:71:a6:44: bd:8d:88:8a:e6:fc:f1:be:99:e2:97:e4:4d:15:f3:17:4a:98: 9c:38:16:2e:49:9f:00:04:bb:d3:02:42:05:34:ec:22:90:45: a8:f7:95:97:b3:80:4a:b8:9c:b3:a1:04:a5:fb:65:c4:39:f3: 0a:6a:c1:45:a1:0e:6d:46:e4:5f:ea:e9:14:fb:66:67:95:39: 9e:8a:b2:ae:84:de:ce:02:98:f3:5e:fc:92:db:16:73:5c:4c: 4b:b5:48:50:e5:7c:68:c2:31:0f:29:37:59:a0:17:ef:94:db: 66:c8:47:5e:5e:9a:fc:d6:d4:ca:16:3f:cc:7d:9d:d1:3d:ff: 1f:b5:fc:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZEREY0NDExQkRFREJE OUZGMDU2MkM3QzhEOTFCMUZEMTQ4NTM2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSRLMwAY34b7uQeBc7n/jRbuR+016xurlOhBbKkJov5n5QMCUB 9vY80WBy2raVmNWT0kXQbLzFqfy8RotvjHPrRivXLS2cUhcSr4pAwYw6OWNZJS+k 0MnmjTbs8w4J5NB6ZpbhaSRt2i3RexCgT213fjrHpkpH+w1Izs8Hdcsk5bxX31tD AdMdZR79L90BVwU46FoO2LKaGFPVYhwGAwsH3NR2qxz4jmURtAHgUJ0kMle/cyeB uIX1Rw9No8qAMVS3FmDFxqgp476yVQjH+Ox2BeNWnAdakkSmLT2Vg35TeHM++EdS Dm3MI27OZddyuXIkdFJyg0TUkptzhAOjiEPZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbd9EEb3tvZ/wVix8jZGx/RSFNnYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2JkOUVFYjN0dlpfd1ZpeDhq Wkd4X1JTRk5uWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx npQwDQYJKoZIhvcNAQELBQADggEBABzHZeRN4OqA6s6CZuyxEJo8fFIpY7NhChPG 1x4cdcqVmYSSvHRAjDIxX+n24t56tXWSRGgd+MafcZPUNozqw0soIjlTsTUFNlOZ lf5pAOJex0TrD9zALL90An3YfzYhT425emk+eTaxkr3epLFvQbWpfMkMAbyW7eL6 D3GmRL2NiIrm/PG+meKX5E0V8xdKmJw4Fi5JnwAEu9MCQgU07CKQRaj3lZezgEq4 nLOhBKX7ZcQ58wpqwUWhDm1G5F/q6RT7ZmeVOZ6Ksq6E3s4CmPNe/JLbFnNcTEu1 SFDlfGjCMQ8pN1mgF++U22bIR15emvzW1MoWP8x9ndE9/x+1/P8= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:58 2024 by rpki-client on console-ams.rpki-client.org