$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa File: 2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa (raw, json) Hash identifier: jrknQdcERRqUH57DLepA8z+0f4RJgtkQl3anDHzxDpY= Subject key identifier: DB:24:17:A3:11:CD:0B:5B:44:5C:23:4D:DE:EB:74:8F:30:61:21:1C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 226F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa Signing time: Mon 26 Aug 2024 05:34:00 +0000 ROA not before: Mon 26 Aug 2024 05:34:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8815 (0x226f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DB2417A311CD0B5B445C234DDEEB748F3061211C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:66:bb:a2:38:3d:dd:b9:ee:61:22:a2:54: 3c:98:8b:6b:29:07:0a:2e:ba:1e:bd:a8:3d:fa:3a: 41:b2:7d:3a:f6:4d:f9:2c:5e:d1:1e:06:88:70:be: 2f:f3:ff:62:57:8a:0c:5c:62:f2:4a:55:88:f8:89: 01:2e:ac:f5:28:f6:e9:b0:4c:dd:f9:8f:11:55:5d: 45:e4:6a:03:c6:8e:93:22:9c:b6:c8:b4:33:1f:f9: fa:9c:d3:31:82:11:d4:28:04:d9:e9:6a:fc:71:73: 98:77:d9:ba:4c:a6:86:1e:3c:3f:3f:25:a6:67:77: de:01:e8:08:0c:0a:51:6f:bf:57:35:8f:43:68:ea: ac:48:7d:12:da:f7:62:d1:ba:c4:65:54:7b:f6:39: 32:24:2c:c9:c6:45:c4:2f:83:e5:c7:e9:23:80:68: 68:b3:dc:f8:4d:d0:6c:79:94:59:92:be:93:ca:a9: b9:a7:5a:ab:6a:37:bf:7d:7f:1d:e9:a8:e6:0e:45: 21:ac:cd:64:81:72:99:f8:2f:b2:27:46:a1:f9:19: 6c:b0:c2:1e:cc:bc:6f:80:42:7d:7b:f6:96:3c:d5: ed:82:36:04:9f:71:c4:a2:b7:a9:cc:3b:c9:c9:3a: c2:24:c2:0c:86:6e:93:b5:70:9a:70:5b:26:b8:2a: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:24:17:A3:11:CD:0B:5B:44:5C:23:4D:DE:EB:74:8F:30:61:21:1C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.232.0/21 Signature Algorithm: sha256WithRSAEncryption 74:2d:c1:37:08:c7:ad:57:17:5f:88:2c:f8:ff:f0:30:04:52: 70:f0:7f:15:21:04:7e:3f:3d:ab:a1:e6:c5:64:d8:60:cb:80: af:8a:05:49:3a:11:f2:28:39:68:6d:ae:c6:4e:ed:98:20:88: c8:25:df:2e:7c:d2:bc:56:ac:7f:42:46:d5:7b:2b:fe:f3:a0: cb:73:bc:7d:bf:1d:39:c2:15:e7:fb:d7:a0:58:99:8b:32:17: 49:9b:9d:6e:d5:21:db:91:f5:0a:2c:62:ed:9f:fe:59:d6:25: 07:29:38:bb:aa:68:d2:97:5d:a3:78:e6:ed:bd:8c:b8:13:f8: c4:9e:23:40:91:25:77:71:c5:1a:ec:8f:2b:28:73:50:96:5d: 0d:3f:c9:55:9c:a3:fc:63:c1:27:85:04:f2:db:2c:7e:ec:11: 49:ce:04:bc:4f:ea:ca:7d:fa:8b:96:7e:c5:02:dc:e9:0c:ce: 38:58:6e:f5:c0:c5:9a:d2:37:b3:23:be:d1:60:b1:d3:51:ea: 07:a4:d7:db:f3:a1:f7:7f:8c:fa:6c:52:ff:46:a3:f7:2b:ce: f0:10:06:9c:b3:2d:95:c8:98:d1:e0:b3:83:8d:38:81:e1:50: 22:a3:1a:d4:bc:ad:1b:e0:b3:ef:85:0a:78:55:a0:c6:43:89: 6e:30:a3:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCMjQxN0EzMTFDRDBC NUI0NDVDMjM0RERFRUI3NDhGMzA2MTIxMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiTWa7ojg93bnuYSKiVDyYi2spBwouuh69qD36OkGyfTr2Tfks XtEeBohwvi/z/2JXigxcYvJKVYj4iQEurPUo9umwTN35jxFVXUXkagPGjpMinLbI tDMf+fqc0zGCEdQoBNnpavxxc5h32bpMpoYePD8/JaZnd94B6AgMClFvv1c1j0No 6qxIfRLa92LRusRlVHv2OTIkLMnGRcQvg+XH6SOAaGiz3PhN0Gx5lFmSvpPKqbmn WqtqN799fx3pqOYORSGszWSBcpn4L7InRqH5GWywwh7MvG+AQn179pY81e2CNgSf ccSit6nMO8nJOsIkwgyGbpO1cJpwWya4KnlRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2yQXoxHNC1tEXCNN3ut0jzBhIRwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJ5UVhveEhOQzF0RVhDTk4z dXQwanpCaElSdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n+gwDQYJKoZIhvcNAQELBQADggEBAHQtwTcIx61XF1+ILPj/8DAEUnDwfxUhBH4/ Pauh5sVk2GDLgK+KBUk6EfIoOWhtrsZO7ZggiMgl3y580rxWrH9CRtV7K/7zoMtz vH2/HTnCFef716BYmYsyF0mbnW7VIduR9QosYu2f/lnWJQcpOLuqaNKXXaN45u29 jLgT+MSeI0CRJXdxxRrsjysoc1CWXQ0/yVWco/xjwSeFBPLbLH7sEUnOBLxP6sp9 +ouWfsUC3OkMzjhYbvXAxZrSN7MjvtFgsdNR6gek19vzofd/jPpsUv9Go/crzvAQ BpyzLZXImNHgs4ONOIHhUCKjGtS8rRvgs++FCnhVoMZDiW4wow4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:40 2024 by rpki-client on console-ams.rpki-client.org