$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa File: 6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa (raw, json) Hash identifier: umps1C2s2KY5Wd4rX6pjVPygYhLcXkh9rNerxCOQT00= Subject key identifier: E8:E1:98:99:BC:98:51:BA:EC:5A:4C:04:18:41:D3:37:58:81:14:4C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 220E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa Signing time: Mon 26 Aug 2024 05:33:37 +0000 ROA not before: Mon 26 Aug 2024 05:33:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.158.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8718 (0x220e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E8E19899BC9851BAEC5A4C041841D3375881144C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:71:6c:de:51:6b:dd:3e:45:9e:44:1e:45: c8:2c:73:7f:71:cf:f5:28:44:5d:94:2f:43:34:ac: 04:01:af:aa:62:4f:37:3d:31:77:aa:60:5c:07:77: cc:71:a8:27:f7:f0:02:15:96:f3:03:9a:4a:0e:28: b4:00:5d:50:32:79:81:a3:72:ba:eb:79:3d:41:dc: b9:f9:5d:04:f9:1a:34:8b:2d:19:de:73:31:88:f1: ba:07:4d:cf:09:7c:16:50:b7:8a:48:40:44:a8:0e: a0:2b:75:4f:91:a1:f5:fe:a9:43:4e:df:fb:72:65: 1a:37:21:51:ef:1b:f2:32:0a:64:a9:3f:5d:78:ae: 16:46:c2:11:5c:f7:b5:eb:38:0f:c4:2f:a0:4f:c7: d7:02:09:46:fe:9a:a8:e8:ca:ad:92:ec:11:16:8e: 4f:a1:f0:55:da:7f:a4:38:30:f7:06:fa:4a:0b:93: 47:b3:b5:0f:28:f4:22:91:ed:7f:cf:e0:c7:89:d1: f5:2a:81:e1:a8:50:20:c9:9b:39:5b:47:82:80:f0: ca:cd:79:3a:9e:ac:f2:4d:74:b3:6b:f8:66:de:17: f3:f2:74:16:e4:22:0c:d8:9e:35:9d:96:16:65:20: ea:a7:4c:66:5d:6b:57:3f:1d:7b:f6:66:fc:76:8b: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E1:98:99:BC:98:51:BA:EC:5A:4C:04:18:41:D3:37:58:81:14:4C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.232.0/23 Signature Algorithm: sha256WithRSAEncryption 30:ef:f8:b9:7c:7f:bc:79:34:42:85:b2:8f:58:6c:22:a6:a9: d0:68:b4:5b:dd:fa:a6:7e:5e:d0:a4:de:89:25:df:cc:b8:48: d2:8f:66:e7:0e:0c:24:7b:8a:6c:4e:76:92:13:fd:12:55:40: bc:21:81:fc:fc:18:e2:48:49:23:2a:7a:d2:5d:cc:72:bb:7d: 46:8b:f4:76:df:cb:68:ac:32:81:52:42:68:da:fc:9c:1a:c2: 68:c9:be:48:a6:d8:cd:2a:d3:63:88:c6:7e:40:89:3a:0d:be: 9b:56:14:88:56:11:54:96:c4:f8:fe:4f:0e:95:df:80:d6:b9: 58:b2:8a:e9:d4:a3:90:85:a8:09:55:21:5b:41:a1:57:63:ee: 8a:28:b5:25:2e:d2:43:d2:53:4f:40:5f:53:fa:ba:03:77:fe: ff:57:1d:50:02:82:36:8e:84:f3:8b:c7:15:6b:44:00:a0:e2: 39:42:b9:2d:03:f0:37:e2:86:61:c3:0d:63:37:98:69:34:51: fd:7f:99:67:65:7f:35:3e:47:08:2d:a4:85:07:13:f1:c6:36: 22:b5:f6:65:2a:bf:f7:24:20:c8:2d:08:2b:af:68:9b:7a:86: 18:a6:99:4c:ac:39:df:f9:06:03:5c:e1:06:9e:36:cb:cd:b9: 5d:82:1c:9a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4RTE5ODk5QkM5ODUx QkFFQzVBNEMwNDE4NDFEMzM3NTg4MTE0NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkjnFs3lFr3T5FnkQeRcgsc39xz/UoRF2UL0M0rAQBr6piTzc9 MXeqYFwHd8xxqCf38AIVlvMDmkoOKLQAXVAyeYGjcrrreT1B3Ln5XQT5GjSLLRne czGI8boHTc8JfBZQt4pIQESoDqArdU+RofX+qUNO3/tyZRo3IVHvG/IyCmSpP114 rhZGwhFc97XrOA/EL6BPx9cCCUb+mqjoyq2S7BEWjk+h8FXaf6Q4MPcG+koLk0ez tQ8o9CKR7X/P4MeJ0fUqgeGoUCDJmzlbR4KA8MrNeTqerPJNdLNr+GbeF/PydBbk IgzYnjWdlhZlIOqnTGZda1c/HXv2Zvx2ixsjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6OGYmbyYUbrsWkwEGEHTN1iBFEwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzZPR1ltYnlZVWJyc1drd0VH RUhUTjFpQkZFdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEx nugwDQYJKoZIhvcNAQELBQADggEBADDv+Ll8f7x5NEKFso9YbCKmqdBotFvd+qZ+ XtCk3okl38y4SNKPZucODCR7imxOdpIT/RJVQLwhgfz8GOJISSMqetJdzHK7fUaL 9Hbfy2isMoFSQmja/JwawmjJvkim2M0q02OIxn5AiToNvptWFIhWEVSWxPj+Tw6V 34DWuViyiunUo5CFqAlVIVtBoVdj7oootSUu0kPSU09AX1P6ugN3/v9XHVACgjaO hPOLxxVrRACg4jlCuS0D8DfihmHDDWM3mGk0Uf1/mWdlfzU+RwgtpIUHE/HGNiK1 9mUqv/ckIMgtCCuvaJt6hhimmUysOd/5BgNc4QaeNsvNuV2CHJo= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org