$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2njSd4GoHwxPL1jdHmWwu_TULuQ.roa File: 2njSd4GoHwxPL1jdHmWwu_TULuQ.roa (raw, json) Hash identifier: ZDLsZw25EVenduVnDvvbHlyuprhNMDroBv9cV9NYbrc= Subject key identifier: DA:78:D2:77:81:A8:1F:0C:4F:2F:58:DD:1E:65:B0:BB:F4:D4:2E:E4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2186 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2njSd4GoHwxPL1jdHmWwu_TULuQ.roa Signing time: Mon 26 Aug 2024 05:33:04 +0000 ROA not before: Mon 26 Aug 2024 05:33:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8582 (0x2186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DA78D27781A81F0C4F2F58DD1E65B0BBF4D42EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:1a:16:a6:61:05:57:6a:cb:da:d4:0b:6c: 1f:cf:df:63:78:d2:de:a1:45:7d:13:c3:f1:a6:6b: 2b:f3:7a:3a:97:9e:50:b3:e2:b2:4b:a1:79:17:68: a5:6b:cb:6d:1d:ce:98:8e:a6:8d:50:06:60:b3:22: 07:1f:80:2e:d5:36:e5:53:1d:c3:9d:fc:bc:b5:bc: fc:26:5f:2e:20:07:bc:6c:16:76:66:e8:a0:8b:6e: 58:46:b4:e7:8b:b7:66:58:13:62:84:28:bf:b0:0f: fd:7e:12:6a:66:b6:e1:f1:06:e4:cb:3e:69:86:52: 3c:10:83:bc:c9:a7:ff:55:30:61:46:47:aa:54:2b: 11:82:12:4c:7a:42:8c:1c:3c:00:7f:53:b1:fc:d2: 0d:71:86:a6:9b:1c:a0:e6:05:7f:47:69:c8:4a:0e: d3:89:b1:51:81:af:89:38:38:c0:38:b8:8f:5d:8d: 93:36:aa:0a:5e:54:d6:3f:44:26:43:57:9f:a1:05: f3:b7:20:a4:ba:c2:5a:7d:00:93:ba:33:cf:16:0a: 0c:83:a4:1c:16:68:ff:43:88:4a:cf:9b:15:08:39: 9f:13:3a:60:10:ca:0b:88:cf:8a:36:99:8f:34:0f: 7a:57:9f:e9:f2:52:12:7f:51:e2:70:87:f5:08:7c: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:78:D2:77:81:A8:1F:0C:4F:2F:58:DD:1E:65:B0:BB:F4:D4:2E:E4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2njSd4GoHwxPL1jdHmWwu_TULuQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.145.0/24 Signature Algorithm: sha256WithRSAEncryption 80:d2:27:50:ba:dc:a3:34:6b:05:94:02:c3:b9:36:d0:cc:ff: 69:f7:b5:cd:55:a7:6a:2e:e7:55:ec:ff:19:5e:5f:d9:58:4a: ed:93:ed:89:41:01:a4:28:df:be:3f:a2:6d:07:47:9d:6f:58: 7d:2b:c7:1c:9a:78:b7:10:82:ff:13:a3:10:9c:1a:b2:5d:af: 02:c4:6d:a9:c4:04:1a:38:73:bd:5a:20:c6:5c:2b:42:9d:5d: 92:e1:cc:17:dc:0e:99:68:2d:fb:ff:3c:c9:73:a2:b7:4b:96: 4f:e6:39:34:f0:b8:c6:90:1f:07:59:6e:4c:7a:f3:81:71:2f: cc:b6:0f:5b:d9:e7:86:1b:d9:1e:ff:ef:22:3d:c7:f0:86:58: fe:5c:aa:6e:1f:dc:a4:f1:f0:ab:de:aa:8f:0f:46:4b:25:c8: 6f:bb:cc:f3:9c:17:69:a7:e2:81:37:60:cf:5f:25:0e:94:e5: 0f:87:e8:9e:57:63:0f:7a:48:6e:f4:a7:2f:3e:bc:c5:25:29: 95:4f:eb:58:4b:7a:4c:ca:61:24:52:2d:b9:c7:d1:21:71:9e: 7c:da:26:f4:83:18:05:8b:f5:8a:2d:29:7a:93:92:fe:84:1f: 13:12:21:b7:82:6a:46:de:0d:80:55:c1:4a:8f:38:0e:ab:86: 6e:bf:11:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBNzhEMjc3ODFBODFG MEM0RjJGNThERDFFNjVCMEJCRjRENDJFRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn8xoWpmEFV2rL2tQLbB/P32N40t6hRX0Tw/GmayvzejqXnlCz 4rJLoXkXaKVry20dzpiOpo1QBmCzIgcfgC7VNuVTHcOd/Ly1vPwmXy4gB7xsFnZm 6KCLblhGtOeLt2ZYE2KEKL+wD/1+EmpmtuHxBuTLPmmGUjwQg7zJp/9VMGFGR6pU KxGCEkx6QowcPAB/U7H80g1xhqabHKDmBX9HachKDtOJsVGBr4k4OMA4uI9djZM2 qgpeVNY/RCZDV5+hBfO3IKS6wlp9AJO6M88WCgyDpBwWaP9DiErPmxUIOZ8TOmAQ yguIz4o2mY80D3pXn+nyUhJ/UeJwh/UIfCCfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2njSd4GoHwxPL1jdHmWwu/TULuQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJualNkNEdvSHd4UEwxamRI bVd3dV9UVUx1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx npEwDQYJKoZIhvcNAQELBQADggEBAIDSJ1C63KM0awWUAsO5NtDM/2n3tc1Vp2ou 51Xs/xleX9lYSu2T7YlBAaQo374/om0HR51vWH0rxxyaeLcQgv8ToxCcGrJdrwLE banEBBo4c71aIMZcK0KdXZLhzBfcDploLfv/PMlzordLlk/mOTTwuMaQHwdZbkx6 84FxL8y2D1vZ54Yb2R7/7yI9x/CGWP5cqm4f3KTx8Kveqo8PRkslyG+7zPOcF2mn 4oE3YM9fJQ6U5Q+H6J5XYw96SG70py8+vMUlKZVP61hLekzKYSRSLbnH0SFxnnza JvSDGAWL9YotKXqTkv6EHxMSIbeCakbeDYBVwUqPOA6rhm6/Ea4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:40 2024 by rpki-client on console-ams.rpki-client.org