$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa File: 7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa (raw, json) Hash identifier: 96HdjNsf0Z9LWpczU1xayxFMZWKmuiLu4Ytch2+ElWw= Subject key identifier: EC:89:3D:F0:B4:68:E5:E4:44:44:1D:A9:7F:FD:2A:06:6A:7A:17:34 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22A3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa Signing time: Mon 26 Aug 2024 05:34:12 +0000 ROA not before: Mon 26 Aug 2024 05:34:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.159.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8867 (0x22a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EC893DF0B468E5E444441DA97FFD2A066A7A1734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:13:43:6f:8d:fd:64:03:fd:41:79:10:ff: 05:5b:63:af:16:1c:88:99:34:c1:79:d6:7c:21:07: fd:9f:94:2b:62:32:6e:12:69:71:a1:37:fd:93:a6: eb:07:4f:7f:88:da:24:ba:de:92:ae:81:43:fc:aa: b2:68:10:b7:09:ff:8c:f3:ef:63:47:34:89:4a:97: e7:9a:fb:9e:df:88:95:d8:b0:5e:85:be:5d:cb:17: ad:92:65:35:59:1e:74:7d:39:41:d0:8a:e2:bc:fe: 33:1a:dd:db:92:e1:08:d9:d2:c7:2f:a0:57:31:fc: 51:3a:51:90:fa:99:d4:eb:84:c0:99:94:4f:19:c1: 49:55:36:08:e5:32:31:3b:94:bb:4e:e0:d7:08:09: 43:e4:cf:14:50:c5:27:6e:1e:3f:42:ea:e1:94:cf: 8b:ee:bb:25:92:67:19:89:73:a1:be:68:90:f8:ce: 7c:1b:91:d5:98:27:15:cc:d5:0e:5f:03:32:9a:19: d3:97:83:73:f5:aa:7f:75:75:51:5a:f9:c1:75:f3: 6e:05:dd:c2:f2:3c:d3:89:9b:1e:9b:71:8d:a5:d3: 13:96:19:83:4e:2c:73:be:fc:d6:53:b3:af:37:e1: e8:2e:75:93:a5:c6:91:32:68:62:26:8b:0f:9b:f7: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:89:3D:F0:B4:68:E5:E4:44:44:1D:A9:7F:FD:2A:06:6A:7A:17:34 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.248.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:d0:48:66:6a:90:bc:8c:c1:5d:fe:7d:4d:d8:ff:0d:ea:8d: 88:2c:70:cf:bb:92:16:88:07:fe:7d:77:e6:c0:65:4b:d7:27: af:15:f1:06:df:3e:a9:1c:e8:91:66:21:0f:b2:58:e0:4d:c1: 57:f8:95:16:19:52:f8:fa:a0:1c:84:59:44:58:da:6a:02:d9: 42:51:e5:9b:9f:51:3e:ab:e5:4a:54:d8:41:53:ca:08:83:19: a9:28:ca:49:16:8e:32:75:fa:f9:7c:5d:ff:54:90:1d:de:9b: cd:ef:21:c4:4c:cb:9a:8b:b4:0c:90:52:90:d5:fc:7e:23:8a: f3:47:50:18:bd:98:71:0a:c3:07:33:20:12:5d:90:43:f2:ed: c9:ee:db:06:d8:3b:0d:0f:12:2d:47:35:f2:d3:9c:58:b8:47: 10:82:8c:bc:86:cc:0e:b4:02:7a:33:13:e3:ee:ac:21:e7:17: 1a:7e:3b:f4:cf:ee:5a:1f:e7:7b:67:04:a0:41:95:5e:7a:52: 8c:21:6c:7f:ac:aa:6e:a6:32:79:a8:99:ab:92:d2:e3:63:2f: bf:5f:52:51:6a:12:23:19:56:29:21:c8:de:1e:64:97:82:35: db:61:26:bf:b8:f5:37:19:f2:cb:c7:62:05:ed:6c:54:94:65: 22:cc:5c:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDODkzREYwQjQ2OEU1 RTQ0NDQ0MURBOTdGRkQyQTA2NkE3QTE3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWGhNDb439ZAP9QXkQ/wVbY68WHIiZNMF51nwhB/2flCtiMm4S aXGhN/2TpusHT3+I2iS63pKugUP8qrJoELcJ/4zz72NHNIlKl+ea+57fiJXYsF6F vl3LF62SZTVZHnR9OUHQiuK8/jMa3duS4QjZ0scvoFcx/FE6UZD6mdTrhMCZlE8Z wUlVNgjlMjE7lLtO4NcICUPkzxRQxSduHj9C6uGUz4vuuyWSZxmJc6G+aJD4znwb kdWYJxXM1Q5fAzKaGdOXg3P1qn91dVFa+cF1824F3cLyPNOJmx6bcY2l0xOWGYNO LHO+/NZTs6834egudZOlxpEyaGImiw+b95tPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7Ik98LRo5eRERB2pf/0qBmp6FzQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdJazk4TFJvNWVSRVJCMnBm XzBxQm1wNkZ6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n/gwDQYJKoZIhvcNAQELBQADggEBAI3QSGZqkLyMwV3+fU3Y/w3qjYgscM+7khaI B/59d+bAZUvXJ68V8QbfPqkc6JFmIQ+yWOBNwVf4lRYZUvj6oByEWURY2moC2UJR 5ZufUT6r5UpU2EFTygiDGakoykkWjjJ1+vl8Xf9UkB3em83vIcRMy5qLtAyQUpDV /H4jivNHUBi9mHEKwwczIBJdkEPy7cnu2wbYOw0PEi1HNfLTnFi4RxCCjLyGzA60 AnozE+PurCHnFxp+O/TP7lof53tnBKBBlV56UowhbH+sqm6mMnmomauS0uNjL79f UlFqEiMZVikhyN4eZJeCNdthJr+49TcZ8svHYgXtbFSUZSLMXDc= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:44 2024 by rpki-client on console-fra.rpki-client.org