$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JgoKLz0eJYo1I1_E7S708yx5LJU.roa File: JgoKLz0eJYo1I1_E7S708yx5LJU.roa (raw, json) Hash identifier: d++cGJ5N1HMWnK9+SaAv5k9k0cEle3LjI1tPvHc7Mx0= Subject key identifier: 26:0A:0A:2F:3D:1E:25:8A:35:23:5F:C4:ED:2E:F4:F3:2C:79:2C:95 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 227B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JgoKLz0eJYo1I1_E7S708yx5LJU.roa Signing time: Mon 26 Aug 2024 05:34:03 +0000 ROA not before: Mon 26 Aug 2024 05:34:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.159.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8827 (0x227b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=260A0A2F3D1E258A35235FC4ED2EF4F32C792C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:7e:c6:5e:a5:44:0d:07:de:a9:4c:be:98: 4b:ed:34:5d:f7:4e:b7:13:c4:ca:be:bb:06:21:fb: f3:d4:d7:12:c0:91:0a:3c:93:14:d5:68:d4:9a:4e: 79:bf:e7:5f:dc:c0:6d:f3:e0:3b:cc:04:e8:fe:4f: f9:cb:6a:6e:cd:28:34:ee:26:97:85:d0:32:3d:c3: 84:e6:69:3e:49:7a:a0:ed:81:14:6a:52:3f:f0:1b: d7:3a:8e:41:52:50:36:57:7c:93:de:95:25:1f:5f: 64:92:37:07:fd:c7:9b:57:c0:8c:ac:71:fe:b6:79: 91:20:10:25:da:c5:de:3a:43:9e:4e:de:fd:07:c1: b9:9d:1b:63:0a:2b:b9:6b:04:06:b4:6d:13:0f:0e: 93:47:86:e9:27:dc:e3:1d:57:14:13:f7:93:52:e4: a0:c8:fd:06:c8:b2:8a:d9:33:2d:f8:f4:b9:c0:7a: 30:6e:cf:37:38:92:40:ec:92:58:0e:16:21:85:34: 8d:ab:43:f2:6f:a8:6d:bc:4c:d2:c9:f3:ef:1f:62: 15:28:a3:ba:11:37:fc:dc:92:d0:be:cc:60:61:07: cb:bf:4c:cc:71:52:5a:31:2c:d3:50:97:f4:1a:bb: 4f:aa:a8:e7:21:4d:b9:df:4b:a5:d8:59:ec:ca:6c: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0A:0A:2F:3D:1E:25:8A:35:23:5F:C4:ED:2E:F4:F3:2C:79:2C:95 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JgoKLz0eJYo1I1_E7S708yx5LJU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.252.0/22 Signature Algorithm: sha256WithRSAEncryption 84:ec:46:20:c5:2f:7d:58:55:37:12:09:bd:40:36:3b:5e:9f: e0:8c:f1:7c:e4:30:65:9f:05:73:e6:81:29:88:19:06:5a:28: 54:ab:22:8e:1c:f1:e5:01:99:86:b4:c4:a0:82:e3:4f:31:e4: 8b:90:df:53:21:f8:85:db:ed:d0:70:e3:08:be:a3:b1:36:ee: 6e:59:09:fe:70:83:a4:8d:a7:a1:e9:a2:f4:51:a2:9a:4f:0b: b9:17:b3:90:72:e6:96:f7:5e:51:60:c5:28:57:f8:e7:79:42: 10:7e:cc:b2:2c:5d:81:37:e5:15:c3:99:66:40:ba:73:64:d2: d8:c4:02:e7:cc:81:ea:5b:ce:b7:87:eb:8f:6b:bc:39:ed:0d: 93:a3:b5:4d:e3:4d:18:7b:14:e7:b3:97:85:11:bc:3f:58:0e: e1:71:aa:ee:c6:90:4f:e2:87:5e:e0:93:ab:29:f3:6a:31:57: bf:4f:ee:db:b0:6d:31:22:df:2e:11:1b:ed:63:85:c7:f4:2b: a3:fe:f9:4d:0a:30:52:9a:35:0d:14:34:bc:e7:e1:82:23:7a: f5:c7:e3:51:3b:c9:c3:51:91:ec:16:61:51:dd:5f:ba:8f:de: 5e:0e:4a:a8:72:6e:a5:a5:26:e8:08:59:0e:85:7e:be:c6:a1: 01:e2:42:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICInswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2MEEwQTJGM0QxRTI1 OEEzNTIzNUZDNEVEMkVGNEYzMkM3OTJDOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTyH7GXqVEDQfeqUy+mEvtNF33TrcTxMq+uwYh+/PU1xLAkQo8 kxTVaNSaTnm/51/cwG3z4DvMBOj+T/nLam7NKDTuJpeF0DI9w4TmaT5JeqDtgRRq Uj/wG9c6jkFSUDZXfJPelSUfX2SSNwf9x5tXwIyscf62eZEgECXaxd46Q55O3v0H wbmdG2MKK7lrBAa0bRMPDpNHhukn3OMdVxQT95NS5KDI/QbIsorZMy349LnAejBu zzc4kkDsklgOFiGFNI2rQ/JvqG28TNLJ8+8fYhUoo7oRN/zcktC+zGBhB8u/TMxx UloxLNNQl/Qau0+qqOchTbnfS6XYWezKbP4FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJgoKLz0eJYo1I1/E7S708yx5LJUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pnb0tMejBlSllvMUkxX0U3 UzcwOHl4NUxKVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n/wwDQYJKoZIhvcNAQELBQADggEBAITsRiDFL31YVTcSCb1ANjten+CM8XzkMGWf BXPmgSmIGQZaKFSrIo4c8eUBmYa0xKCC408x5IuQ31Mh+IXb7dBw4wi+o7E27m5Z Cf5wg6SNp6HpovRRoppPC7kXs5By5pb3XlFgxShX+Od5QhB+zLIsXYE35RXDmWZA unNk0tjEAufMgepbzreH649rvDntDZOjtU3jTRh7FOezl4URvD9YDuFxqu7GkE/i h17gk6sp82oxV79P7tuwbTEi3y4RG+1jhcf0K6P++U0KMFKaNQ0UNLzn4YIjevXH 41E7ycNRkewWYVHdX7qP3l4OSqhybqWlJugIWQ6Ffr7GoQHiQn8= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org