$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa File: zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa (raw, json) Hash identifier: EOy0WsM/RuX5YfSk2mmiMfbqtVKNpTv0lwbnFmP7yC0= Subject key identifier: CC:53:9A:2B:1B:C7:5D:9F:A7:0F:6B:4F:5E:05:D7:4C:D1:E1:6D:D7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2223 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa Signing time: Mon 26 Aug 2024 05:33:43 +0000 ROA not before: Mon 26 Aug 2024 05:33:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 49.158.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8739 (0x2223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CC539A2B1BC75D9FA70F6B4F5E05D74CD1E16DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:48:18:cb:81:2a:79:a2:6a:0f:71:a6:71: 64:b2:1b:eb:a9:9c:59:8a:c7:78:3a:2b:9c:63:48: 8b:d9:50:e4:cf:c3:71:e0:02:f3:62:95:12:00:ea: 88:07:59:bc:df:08:6f:6c:33:b4:03:d8:56:d8:0d: b4:11:1f:ea:a7:a1:d1:c8:12:ff:e1:b8:94:02:7a: 45:f4:d9:30:3b:1d:e3:24:31:72:aa:ab:f4:41:42: 9d:3b:4e:3c:5c:b1:92:a2:35:85:24:7b:df:76:49: af:fc:66:38:4c:ef:34:75:53:bc:c7:d8:73:30:13: 8b:60:ff:7c:78:f9:d5:50:de:44:f3:a5:0e:24:6f: 02:15:6c:d4:d7:8c:70:b7:d5:67:ac:32:d6:0f:79: 2a:4c:1c:c1:4d:d1:72:22:72:57:4b:7c:fa:21:05: d3:c8:f0:3c:fb:fb:d7:21:7a:98:a7:e8:d7:cb:a0: e4:69:0f:41:d5:ed:16:7b:11:3e:73:c1:e3:77:7b: 35:ce:b9:73:78:cb:9c:39:ca:2d:da:e3:eb:d1:9d: c3:98:50:62:6e:8d:ea:05:65:6f:a7:e6:ec:36:4a: 2e:61:0f:16:85:f1:07:d6:38:45:d9:28:8c:72:ce: 34:01:ad:77:33:b5:3f:1d:66:b3:11:3e:27:25:a5: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:53:9A:2B:1B:C7:5D:9F:A7:0F:6B:4F:5E:05:D7:4C:D1:E1:6D:D7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/15 Signature Algorithm: sha256WithRSAEncryption 10:27:d3:ea:41:d5:d7:48:e9:87:3f:f5:9a:5d:1f:f4:d5:01: 94:2c:b1:a8:82:ed:72:62:5d:cc:d5:db:aa:5c:f7:69:5f:7e: 6a:aa:a7:f8:0a:d1:8a:ff:b2:0e:b0:6b:98:1e:79:1e:83:9b: 23:69:19:31:6c:7a:81:96:ea:c7:67:4e:6c:7c:22:ba:ec:19: d4:22:47:ba:65:95:c5:9a:6c:5e:09:80:4b:63:ca:dc:9b:ad: 87:0b:4d:7d:dd:dc:61:72:fc:0e:99:e5:a0:94:d0:c8:f1:fc: 7d:f0:69:91:c2:d4:bc:a3:c6:6a:57:5b:63:5d:0c:eb:21:b3: 6c:d6:9d:66:82:66:1a:52:83:2f:35:cb:12:a7:4a:12:1a:36: b8:53:21:46:9c:c2:44:11:09:44:5e:c0:5f:8d:1c:80:0f:21: 8d:10:44:48:74:97:6d:0e:15:93:85:5b:7d:bd:46:b8:21:7a: a8:5c:54:0c:35:87:33:39:25:3a:3f:55:8b:ee:ec:ce:5f:c1: 93:cc:0b:5f:0a:9f:b3:5b:0d:d9:97:9d:3f:54:8e:45:3f:2d: eb:b4:aa:27:1b:1d:61:f0:a4:2b:28:7f:9a:7b:74:63:fe:26: ad:76:67:fc:be:71:27:4f:0d:90:8a:35:54:86:b5:f9:85:f7: d0:a6:a8:01 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICIiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDNTM5QTJCMUJDNzVE OUZBNzBGNkI0RjVFMDVENzRDRDFFMTZERDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNwUgYy4EqeaJqD3GmcWSyG+upnFmKx3g6K5xjSIvZUOTPw3Hg AvNilRIA6ogHWbzfCG9sM7QD2FbYDbQRH+qnodHIEv/huJQCekX02TA7HeMkMXKq q/RBQp07TjxcsZKiNYUke992Sa/8ZjhM7zR1U7zH2HMwE4tg/3x4+dVQ3kTzpQ4k bwIVbNTXjHC31WesMtYPeSpMHMFN0XIicldLfPohBdPI8Dz7+9chepin6NfLoORp D0HV7RZ7ET5zweN3ezXOuXN4y5w5yi3a4+vRncOYUGJujeoFZW+n5uw2Si5hDxaF 8QfWOEXZKIxyzjQBrXcztT8dZrMRPiclpZ8XAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUzFOaKxvHXZ+nD2tPXgXXTNHhbdcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3pGT2FLeHZIWFotbkQydFBY Z1hYVE5IaGJkYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEx njANBgkqhkiG9w0BAQsFAAOCAQEAECfT6kHV10jphz/1ml0f9NUBlCyxqILtcmJd zNXbqlz3aV9+aqqn+ArRiv+yDrBrmB55HoObI2kZMWx6gZbqx2dObHwiuuwZ1CJH umWVxZpsXgmAS2PK3JuthwtNfd3cYXL8DpnloJTQyPH8ffBpkcLUvKPGaldbY10M 6yGzbNadZoJmGlKDLzXLEqdKEho2uFMhRpzCRBEJRF7AX40cgA8hjRBESHSXbQ4V k4Vbfb1GuCF6qFxUDDWHMzklOj9Vi+7szl/Bk8wLXwqfs1sN2ZedP1SORT8t67Sq JxsdYfCkKyh/mnt0Y/4mrXZn/L5xJ08NkIo1VIa1+YX30KaoAQ== -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:01 2024 by rpki-client on console-fra.rpki-client.org