$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I9SQ9GTOFNtIvmM-beuHk47xAag.roa File: I9SQ9GTOFNtIvmM-beuHk47xAag.roa (raw, json) Hash identifier: 1ZGTWVrdRNReuZm0G1cAozgxU1DaLs49F/Up8x3AyCk= Subject key identifier: 23:D4:90:F4:64:CE:14:DB:48:BE:63:3E:6D:EB:87:93:8E:F1:01:A8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2250 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I9SQ9GTOFNtIvmM-beuHk47xAag.roa Signing time: Mon 26 Aug 2024 05:33:52 +0000 ROA not before: Mon 26 Aug 2024 05:33:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.159.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8784 (0x2250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=23D490F464CE14DB48BE633E6DEB87938EF101A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:97:4b:82:03:ba:f8:8b:88:62:5c:85:59: ec:3e:70:f5:22:46:24:12:af:e8:aa:e8:f0:b6:8b: 6f:7a:bd:e9:56:e2:48:a4:36:47:05:bf:16:75:91: da:01:15:78:38:ff:fc:6f:ba:d2:1a:68:e9:5c:7c: 35:ac:e8:d6:6c:c7:7f:be:b3:39:46:26:02:cc:47: 60:ce:27:64:66:fa:20:6c:fe:2c:f7:cb:d5:3c:1b: 92:e4:30:23:42:a5:b2:9c:2a:ce:91:f7:08:a8:f2: 90:a1:5c:c8:17:28:8b:84:0f:01:7a:6f:61:7c:e8: d5:b8:0e:9e:de:93:0f:6f:8e:e3:61:8b:be:6c:7f: 12:e5:b3:97:93:77:ef:33:60:4a:5b:cf:eb:a3:b7: 4c:6c:a2:10:fd:4c:68:26:0e:e9:c6:2f:ce:d5:13: fa:4d:d6:a5:c6:f9:3b:ed:28:3b:5c:38:8e:d8:37: 46:f9:ac:bf:ec:86:a4:fc:15:d5:c2:f4:f7:35:bd: 9f:5f:bd:72:7c:27:94:15:47:98:b9:43:2b:24:bc: 68:b0:c8:f6:f6:36:8b:7c:c8:dd:f5:10:8b:f0:18: 2f:a6:84:b4:ab:8a:ff:31:df:cc:ab:45:f7:6a:b5: 7b:04:58:1e:89:58:f9:15:5f:e8:da:ca:55:04:1b: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:90:F4:64:CE:14:DB:48:BE:63:3E:6D:EB:87:93:8E:F1:01:A8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I9SQ9GTOFNtIvmM-beuHk47xAag.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.76.0/22 Signature Algorithm: sha256WithRSAEncryption 64:ed:41:84:31:41:0c:48:bf:62:9f:b2:ad:5b:a5:39:68:07: 95:37:e9:7e:90:cf:c3:56:07:38:95:90:80:3e:fb:2f:20:2b: f8:7f:45:52:0d:6f:b5:78:b6:23:54:1b:35:c5:36:8e:c2:3f: e8:75:37:b5:fa:65:6e:a7:57:eb:39:39:cc:e8:4c:be:9a:ec: 7e:cd:ec:71:4d:88:53:5f:d0:8f:79:ff:c2:9a:82:04:86:40: a2:89:31:73:3f:c5:61:47:c0:91:92:cb:bd:f8:9f:fe:70:3e: ff:f8:fe:91:06:5c:ab:62:b6:a1:a4:96:cb:66:65:2f:dc:e5: 5b:5e:a5:3f:af:5a:bd:d9:a6:63:97:6a:d7:6f:8f:25:eb:ed: a0:88:fe:d9:6e:fa:a8:04:14:b9:25:e3:c2:5a:cd:25:4a:b0: 99:8c:7d:c6:51:50:7e:71:f3:9f:12:cc:80:1d:30:73:18:88: ca:e9:ec:86:65:3c:cf:31:d2:6c:87:58:6c:a3:58:79:f2:12: 1c:14:9d:bf:3c:45:13:44:da:16:fa:9a:12:4e:bd:7b:0b:c4: d7:5e:70:ed:3e:ad:2d:2a:0f:2e:36:48:11:b2:bb:12:71:74: 02:7c:54:95:99:71:d5:6f:33:b7:62:32:58:18:b8:86:c4:ea: f9:07:97:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzRDQ5MEY0NjRDRTE0 REI0OEJFNjMzRTZERUI4NzkzOEVGMTAxQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1DJdLggO6+IuIYlyFWew+cPUiRiQSr+iq6PC2i296velW4kik NkcFvxZ1kdoBFXg4//xvutIaaOlcfDWs6NZsx3++szlGJgLMR2DOJ2Rm+iBs/iz3 y9U8G5LkMCNCpbKcKs6R9wio8pChXMgXKIuEDwF6b2F86NW4Dp7ekw9vjuNhi75s fxLls5eTd+8zYEpbz+ujt0xsohD9TGgmDunGL87VE/pN1qXG+TvtKDtcOI7YN0b5 rL/shqT8FdXC9Pc1vZ9fvXJ8J5QVR5i5QyskvGiwyPb2Not8yN31EIvwGC+mhLSr iv8x38yrRfdqtXsEWB6JWPkVX+jaylUEG9NVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUI9SQ9GTOFNtIvmM+beuHk47xAagwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0k5U1E5R1RPRk50SXZtTS1i ZXVIazQ3eEFhZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n0wwDQYJKoZIhvcNAQELBQADggEBAGTtQYQxQQxIv2Kfsq1bpTloB5U36X6Qz8NW BziVkIA++y8gK/h/RVINb7V4tiNUGzXFNo7CP+h1N7X6ZW6nV+s5OczoTL6a7H7N 7HFNiFNf0I95/8KaggSGQKKJMXM/xWFHwJGSy734n/5wPv/4/pEGXKtitqGklstm ZS/c5VtepT+vWr3ZpmOXatdvjyXr7aCI/tlu+qgEFLkl48JazSVKsJmMfcZRUH5x 858SzIAdMHMYiMrp7IZlPM8x0myHWGyjWHnyEhwUnb88RRNE2hb6mhJOvXsLxNde cO0+rS0qDy42SBGyuxJxdAJ8VJWZcdVvM7diMlgYuIbE6vkHl28= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org