$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7PlfibMOiUDOQJ53a6Vy9G99dD0.roa File: 7PlfibMOiUDOQJ53a6Vy9G99dD0.roa (raw, json) Hash identifier: UlR8h7OwABfe6Nh1jKwiPBMGj4+8dCp0eLFC4Cqdh9w= Subject key identifier: EC:F9:5F:89:B3:0E:89:40:CE:40:9E:77:6B:A5:72:F4:6F:7D:74:3D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21CD Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7PlfibMOiUDOQJ53a6Vy9G99dD0.roa Signing time: Mon 26 Aug 2024 05:33:22 +0000 ROA not before: Mon 26 Aug 2024 05:33:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8653 (0x21cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ECF95F89B30E8940CE409E776BA572F46F7D743D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:3d:bc:c3:14:09:fc:11:b0:95:e6:3d:38: 89:e8:eb:94:f3:61:f0:ec:4a:69:2d:f7:6e:a6:13: 08:bc:3a:e4:a6:90:0f:5f:bc:dc:97:5f:c1:77:3a: 52:5d:43:c7:ec:b0:13:82:a6:a6:cd:99:f4:a8:14: dd:15:54:a7:9a:59:68:23:80:c5:da:ca:ec:08:2a: 21:23:2f:7a:c4:79:63:b8:f8:93:b3:41:e7:ce:15: ea:2a:96:8b:3a:72:fc:16:5a:38:8e:01:4c:17:1a: 48:a1:72:9e:3d:0b:f2:f2:1d:8f:68:0b:49:21:f3: af:dc:f3:c2:fa:22:c6:58:34:60:f5:6a:ff:44:75: 5a:54:5b:7f:b9:97:1a:86:4c:19:d2:25:40:33:0b: e3:9c:1e:ac:0d:81:7d:78:7d:75:fe:8b:f6:16:a5: 2f:b3:ca:ab:a9:0c:85:ba:26:f8:4a:7c:3b:ee:ad: 74:48:55:58:7f:ad:b2:74:5f:3a:54:fa:e7:54:d0: 65:02:55:bc:de:ca:d2:8c:c6:9e:db:5b:ae:27:c2: 25:38:9c:c4:d0:38:5b:75:d8:f3:99:8c:40:a1:03: 3e:0d:06:c7:67:23:e0:74:23:31:05:fb:a9:b8:04: 2b:ef:8d:80:03:fe:51:13:8a:b8:89:c7:05:48:40: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F9:5F:89:B3:0E:89:40:CE:40:9E:77:6B:A5:72:F4:6F:7D:74:3D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7PlfibMOiUDOQJ53a6Vy9G99dD0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.160.0/21 Signature Algorithm: sha256WithRSAEncryption 11:5b:2e:8f:5a:22:a6:00:6e:a4:50:8a:7f:a2:a1:8c:5f:fa: cb:26:e3:b9:e9:d4:a4:00:3b:69:87:3f:10:3e:8d:d9:0f:b6: 29:c1:67:ba:6e:07:8f:98:dc:b2:40:a8:d0:ff:6b:d2:a6:aa: 21:63:ce:b3:72:06:f0:4e:e7:88:14:b2:a3:1b:74:f1:04:4a: 13:ff:18:35:c1:6f:a6:95:72:ab:25:9b:1d:11:0b:fb:11:84: 1a:e1:76:9a:d2:b2:d2:12:bd:d7:d8:b2:75:79:1b:8f:bd:3d: 2d:e1:98:44:0a:39:f1:bd:ac:02:07:db:a8:76:10:35:46:2c: d7:ab:d3:69:58:ff:4e:76:d8:e5:1f:b2:35:d7:d8:e8:7f:75: 51:d0:76:81:30:6b:3d:ab:c7:c4:7c:4e:39:7b:72:32:2a:ae: a6:ff:70:45:1c:6b:19:64:61:04:d2:99:ff:e2:b6:4e:d0:a7: 6b:33:4a:15:18:d1:53:3f:64:ed:1c:86:92:79:68:43:a0:8f: 13:3a:94:40:22:59:50:b4:2c:6f:f2:6f:0a:ac:4d:f4:63:e5: f7:81:1b:42:45:90:5b:e7:20:26:87:00:01:c9:1a:bc:5d:eb: bc:3c:2e:d2:04:ac:60:44:07:d7:54:17:16:63:6b:d5:52:58: 9d:0c:22:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDRjk1Rjg5QjMwRTg5 NDBDRTQwOUU3NzZCQTU3MkY0NkY3RDc0M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV6z28wxQJ/BGwleY9OIno65TzYfDsSmkt926mEwi8OuSmkA9f vNyXX8F3OlJdQ8fssBOCpqbNmfSoFN0VVKeaWWgjgMXayuwIKiEjL3rEeWO4+JOz QefOFeoqlos6cvwWWjiOAUwXGkihcp49C/LyHY9oC0kh86/c88L6IsZYNGD1av9E dVpUW3+5lxqGTBnSJUAzC+OcHqwNgX14fXX+i/YWpS+zyqupDIW6JvhKfDvurXRI VVh/rbJ0XzpU+udU0GUCVbzeytKMxp7bW64nwiU4nMTQOFt12POZjEChAz4NBsdn I+B0IzEF+6m4BCvvjYAD/lETiriJxwVIQNclAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7PlfibMOiUDOQJ53a6Vy9G99dD0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdQbGZpYk1PaVVET1FKNTNh NlZ5OUc5OWREMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n6AwDQYJKoZIhvcNAQELBQADggEBABFbLo9aIqYAbqRQin+ioYxf+ssm47np1KQA O2mHPxA+jdkPtinBZ7puB4+Y3LJAqND/a9KmqiFjzrNyBvBO54gUsqMbdPEEShP/ GDXBb6aVcqslmx0RC/sRhBrhdprSstISvdfYsnV5G4+9PS3hmEQKOfG9rAIH26h2 EDVGLNer02lY/0522OUfsjXX2Oh/dVHQdoEwaz2rx8R8Tjl7cjIqrqb/cEUcaxlk YQTSmf/itk7Qp2szShUY0VM/ZO0chpJ5aEOgjxM6lEAiWVC0LG/ybwqsTfRj5feB G0JFkFvnICaHAAHJGrxd67w8LtIErGBEB9dUFxZja9VSWJ0MIjg= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:44 2024 by rpki-client on console-fra.rpki-client.org