$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CBPDBpAl8ruAfdLAXwE8dSakttU.roa File: CBPDBpAl8ruAfdLAXwE8dSakttU.roa (raw, json) Hash identifier: AlhUJecvE8f+YgpilmLk5rQek3UJ7QvwFJbYwTvuPi8= Subject key identifier: 08:13:C3:06:90:25:F2:BB:80:7D:D2:C0:5F:01:3C:75:26:A4:B6:D5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22B8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CBPDBpAl8ruAfdLAXwE8dSakttU.roa Signing time: Mon 26 Aug 2024 05:34:18 +0000 ROA not before: Mon 26 Aug 2024 05:34:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8888 (0x22b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0813C3069025F2BB807DD2C05F013C7526A4B6D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:ea:c7:03:b8:42:6a:cd:0d:ec:ad:d6:b1: f8:b4:5d:a2:52:d0:ca:fe:44:8a:81:ad:a4:31:62: 30:53:30:da:b9:d7:27:6d:a7:54:19:7c:66:db:31: 95:a4:c3:f9:59:e9:d8:5b:26:49:4a:f8:4e:9e:b8: 13:29:88:28:e7:b7:69:d4:c3:b5:f4:86:89:dd:8f: 0b:d3:b9:b4:bd:40:d4:3e:d2:74:62:a3:d2:13:ba: dc:b3:4d:74:90:e2:fa:d5:10:57:00:ac:f8:b4:99: 63:e9:1a:5e:f7:b0:5f:93:6d:b2:1b:8e:46:b5:9b: b8:de:2e:c4:24:74:bc:8d:a1:7b:82:33:ce:b3:b2: 55:e3:d3:cd:23:07:79:86:7c:b0:03:e1:01:ed:06: 32:8e:63:c5:20:f7:1f:83:65:e3:b7:8d:58:d3:db: ba:15:28:00:5c:30:98:59:f6:38:9d:c3:a4:d9:e0: 92:21:54:02:28:63:f2:f1:10:23:68:5b:17:ea:40: 8f:04:06:9e:1d:e9:75:6c:f3:57:89:06:ab:10:56: 29:f1:24:6d:49:38:26:6f:70:35:c3:cd:32:4d:fe: 34:dd:2d:ee:4f:e3:89:fb:38:87:0c:34:7c:5a:c5: 1c:8a:ce:f5:f8:89:07:20:8b:25:7d:06:a3:a2:0d: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:13:C3:06:90:25:F2:BB:80:7D:D2:C0:5F:01:3C:75:26:A4:B6:D5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CBPDBpAl8ruAfdLAXwE8dSakttU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.76.0/22 Signature Algorithm: sha256WithRSAEncryption 04:3b:7f:e3:90:94:68:71:ac:9c:bc:16:b5:08:fe:6d:86:ca: 8f:be:72:a0:02:bd:00:01:48:32:ea:f7:4e:d0:4b:6b:86:08: 2b:75:40:d6:db:56:50:54:23:c8:6e:47:9f:fa:29:22:f8:94: b9:30:0b:c1:6a:8f:83:3d:93:68:2b:a9:d7:34:df:df:96:0d: 69:81:59:9d:7e:21:7a:20:ed:27:cb:66:c0:65:38:7c:cd:35: 4d:8a:6f:a9:6f:a5:bf:9f:ca:6b:ad:38:2e:41:31:e4:c7:dd: 5a:36:5a:b7:27:8d:40:7a:f8:16:97:64:42:4f:98:cc:da:ed: ea:22:4e:97:8e:98:19:7e:36:d9:ef:87:a2:bd:bd:47:d7:33: ca:61:41:7c:60:1b:84:f3:0c:d2:77:51:37:12:6e:ee:31:eb: 2e:90:41:d9:99:68:5f:3e:0c:da:e4:95:7b:08:ce:42:40:75: 72:18:11:bb:79:a7:1c:3f:e5:b7:2e:d2:5d:a0:8a:31:9e:7b: 03:d7:f2:69:c0:fc:30:b6:da:0f:22:7e:c9:88:8b:58:73:17: 55:00:ec:e2:7e:63:b6:eb:74:f4:4b:e2:d5:c2:49:c5:a6:71: c6:45:5b:1d:3c:ff:72:d1:77:46:c9:b0:7d:0a:39:e9:ee:6c: 11:a9:92:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4MTNDMzA2OTAyNUYy QkI4MDdERDJDMDVGMDEzQzc1MjZBNEI2RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCanOrHA7hCas0N7K3Wsfi0XaJS0Mr+RIqBraQxYjBTMNq51ydt p1QZfGbbMZWkw/lZ6dhbJklK+E6euBMpiCjnt2nUw7X0hondjwvTubS9QNQ+0nRi o9ITutyzTXSQ4vrVEFcArPi0mWPpGl73sF+TbbIbjka1m7jeLsQkdLyNoXuCM86z slXj080jB3mGfLAD4QHtBjKOY8Ug9x+DZeO3jVjT27oVKABcMJhZ9jidw6TZ4JIh VAIoY/LxECNoWxfqQI8EBp4d6XVs81eJBqsQVinxJG1JOCZvcDXDzTJN/jTdLe5P 44n7OIcMNHxaxRyKzvX4iQcgiyV9BqOiDfa7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCBPDBpAl8ruAfdLAXwE8dSakttUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NCUERCcEFsOHJ1QWZkTEFY d0U4ZFNha3R0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nkwwDQYJKoZIhvcNAQELBQADggEBAAQ7f+OQlGhxrJy8FrUI/m2Gyo++cqACvQAB SDLq907QS2uGCCt1QNbbVlBUI8huR5/6KSL4lLkwC8Fqj4M9k2grqdc039+WDWmB WZ1+IXog7SfLZsBlOHzNNU2Kb6lvpb+fymutOC5BMeTH3Vo2WrcnjUB6+BaXZEJP mMza7eoiTpeOmBl+Ntnvh6K9vUfXM8phQXxgG4TzDNJ3UTcSbu4x6y6QQdmZaF8+ DNrklXsIzkJAdXIYEbt5pxw/5bcu0l2gijGeewPX8mnA/DC22g8ifsmIi1hzF1UA 7OJ+Y7brdPRL4tXCScWmccZFWx08/3LRd0bJsH0KOenubBGpkuE= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org