$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gz5Xu8cVQEUexal2InC49Eot5Gs.roa File: Gz5Xu8cVQEUexal2InC49Eot5Gs.roa (raw, json) Hash identifier: WZ3DxtoXZbrNSoF+07Tdpdt+l850xTexR5GF9n0ehEU= Subject key identifier: 1B:3E:57:BB:C7:15:40:45:1E:C5:A9:76:22:70:B8:F4:4A:2D:E4:6B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 222D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gz5Xu8cVQEUexal2InC49Eot5Gs.roa Signing time: Mon 26 Aug 2024 05:33:45 +0000 ROA not before: Mon 26 Aug 2024 05:33:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.158.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8749 (0x222d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1B3E57BBC71540451EC5A9762270B8F44A2DE46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:81:f0:f4:73:4f:8e:9a:63:f3:12:fb:4d: b5:7e:20:0d:9d:b5:c6:c5:9f:e1:45:b1:0c:90:75: e3:a1:af:78:e3:fd:86:34:9e:7e:78:82:a4:57:0e: 7e:32:ca:5f:a7:7c:02:c6:f3:63:be:64:ec:4e:3a: 9f:55:5e:d0:c8:67:8c:88:43:c5:76:80:02:a5:23: 11:c1:2a:c7:8a:0a:2b:cf:dd:1e:a9:a9:20:96:4e: 9d:97:aa:38:bc:77:d5:c5:4b:2e:3d:14:ff:ad:eb: ca:78:ad:89:e7:df:91:e6:7f:13:00:4e:15:03:ba: 13:e7:f9:0b:d1:af:6a:3b:8a:cd:6b:52:87:29:25: 3f:9b:12:ae:b8:10:17:c5:06:89:ab:a3:de:ee:61: 70:b6:5d:d7:2a:14:ce:11:20:13:9a:9f:6d:54:b5: 72:e2:1d:e5:60:04:ba:61:9e:46:c3:d7:2e:9f:9b: 06:4b:c6:77:94:18:83:4e:7a:f4:fe:7f:8f:30:07: 73:02:88:41:80:c1:5d:ce:dc:98:d1:f7:90:64:12: f6:4a:3c:83:dd:67:24:a4:7d:4a:c9:26:09:d7:d9: 8f:6d:bb:a0:4a:69:ae:b6:27:9a:54:ab:fe:94:ef: df:90:01:7f:fb:f3:3f:b8:18:96:cd:75:84:57:28: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3E:57:BB:C7:15:40:45:1E:C5:A9:76:22:70:B8:F4:4A:2D:E4:6B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gz5Xu8cVQEUexal2InC49Eot5Gs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.240.0/21 Signature Algorithm: sha256WithRSAEncryption 13:d0:ab:22:94:af:9f:53:3e:bd:46:33:db:96:12:f2:fc:1e: 60:5f:24:e9:21:71:c2:5b:34:db:a0:d1:b2:e1:f2:96:d2:c2: 56:e9:4a:ce:ea:d1:52:13:bb:a7:39:d5:7c:87:6f:bc:c2:7f: fe:ac:aa:53:34:e6:3d:c9:e1:44:1a:a5:40:82:97:fb:0b:bc: 80:0e:99:42:47:95:5a:36:d2:e8:d2:21:ed:c7:b4:8e:22:6a: 50:9f:42:0d:f4:24:d8:d1:d4:d4:6a:62:ab:c7:c8:5a:b7:76: 4d:94:74:f9:4a:64:0f:1f:98:29:19:0e:c2:b5:b3:b6:b6:85: 4d:65:fc:88:e6:75:fe:36:4a:23:16:0f:e4:3d:81:ae:20:6b: da:4b:50:55:e0:13:72:0e:a6:68:8f:47:7e:c3:9f:6f:b2:be: d9:1e:2f:11:ef:e9:07:c8:a6:36:77:2f:2e:20:6f:4e:c1:13: 5d:a8:3f:56:2a:47:fa:7d:bc:ce:c5:76:5d:26:53:8b:42:dc: be:c2:71:0c:eb:46:c7:68:38:03:b7:3f:b5:6d:de:52:4d:04: cf:35:0a:67:e4:84:3e:5c:5d:04:57:38:80:f2:7d:2e:e1:46: 7f:e9:b0:4d:c3:52:2d:15:ae:cf:c4:7e:07:23:60:1d:d9:f5: 9d:40:c1:15 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCM0U1N0JCQzcxNTQw NDUxRUM1QTk3NjIyNzBCOEY0NEEyREU0NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqeIHw9HNPjppj8xL7TbV+IA2dtcbFn+FFsQyQdeOhr3jj/YY0 nn54gqRXDn4yyl+nfALG82O+ZOxOOp9VXtDIZ4yIQ8V2gAKlIxHBKseKCivP3R6p qSCWTp2Xqji8d9XFSy49FP+t68p4rYnn35HmfxMAThUDuhPn+QvRr2o7is1rUocp JT+bEq64EBfFBomro97uYXC2XdcqFM4RIBOan21UtXLiHeVgBLphnkbD1y6fmwZL xneUGINOevT+f48wB3MCiEGAwV3O3JjR95BkEvZKPIPdZySkfUrJJgnX2Y9tu6BK aa62J5pUq/6U79+QAX/78z+4GJbNdYRXKF87AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGz5Xu8cVQEUexal2InC49Eot5GswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0d6NVh1OGNWUUVVZXhhbDJJ bkM0OUVvdDVHcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nvAwDQYJKoZIhvcNAQELBQADggEBABPQqyKUr59TPr1GM9uWEvL8HmBfJOkhccJb NNug0bLh8pbSwlbpSs7q0VITu6c51XyHb7zCf/6sqlM05j3J4UQapUCCl/sLvIAO mUJHlVo20ujSIe3HtI4ialCfQg30JNjR1NRqYqvHyFq3dk2UdPlKZA8fmCkZDsK1 s7a2hU1l/Ijmdf42SiMWD+Q9ga4ga9pLUFXgE3IOpmiPR37Dn2+yvtkeLxHv6QfI pjZ3Ly4gb07BE12oP1YqR/p9vM7Fdl0mU4tC3L7CcQzrRsdoOAO3P7Vt3lJNBM81 CmfkhD5cXQRXOIDyfS7hRn/psE3DUi0Vrs/EfgcjYB3Z9Z1AwRU= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org