$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KVb_A_3gVvKJd4mxhS5qioOOtPA.roa File: KVb_A_3gVvKJd4mxhS5qioOOtPA.roa (raw, json) Hash identifier: gdRvu0Bv1O+J/rdiszX4E9SKZIC38SLWiRRou2ucugI= Subject key identifier: 29:56:FF:03:FD:E0:56:F2:89:77:89:B1:85:2E:6A:8A:83:8E:B4:F0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21E9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KVb_A_3gVvKJd4mxhS5qioOOtPA.roa Signing time: Mon 26 Aug 2024 05:33:28 +0000 ROA not before: Mon 26 Aug 2024 05:33:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8681 (0x21e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2956FF03FDE056F2897789B1852E6A8A838EB4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bf:c7:28:d6:5c:d4:37:bb:f8:9e:79:46:88: 5c:13:f2:f0:09:b9:7d:30:59:71:99:8b:42:b5:1b: d5:60:84:69:02:28:85:17:9e:21:7b:2e:8c:57:82: 27:9c:30:81:3e:1d:e0:7c:05:a6:71:47:5a:a2:08: 40:a4:a5:d7:0b:8c:de:3c:6c:8f:e1:d1:ad:80:9f: 49:a9:5a:16:1f:72:de:68:6f:fc:c5:e5:ab:5e:4b: 3e:97:2c:ed:46:19:2f:9a:2a:ed:28:c4:d2:6f:c8: e1:f5:59:1e:72:29:73:27:4a:eb:4a:75:ef:2d:1a: 10:30:9c:62:ed:03:41:29:91:92:c8:63:6a:95:53: 00:a7:8a:eb:e7:f8:a4:b9:d7:b2:df:9a:f7:23:27: c1:55:b6:04:bd:cd:c1:4d:ae:3d:23:44:c4:91:b0: ee:f5:e6:4a:08:b8:ce:26:07:00:2d:36:3b:43:1b: 73:b2:8b:f3:af:39:8f:a7:5f:bc:5a:98:e9:23:88: 19:e0:f7:8c:ce:f2:36:a0:68:99:1c:d9:9e:4b:52: e9:8c:61:05:06:81:f4:64:33:32:6a:cf:11:9d:d6: 9a:2b:b7:b9:cc:7c:8f:74:ba:aa:bb:da:db:1e:1b: ca:33:2d:a7:c0:89:aa:d8:fd:b8:48:ea:c1:51:d6: a5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:56:FF:03:FD:E0:56:F2:89:77:89:B1:85:2E:6A:8A:83:8E:B4:F0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KVb_A_3gVvKJd4mxhS5qioOOtPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.168.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:d0:59:00:c4:97:d0:c9:8b:3a:e4:be:e7:0c:f1:e7:54:b4: 2c:6b:4e:92:14:76:16:d0:e0:1b:2f:0b:57:b5:ed:c9:59:78: 03:41:87:65:67:9a:03:ce:b1:7f:ef:59:c4:63:90:02:5e:62: 29:b6:83:a8:66:ae:c6:0c:83:64:04:22:b7:a3:ce:67:ac:b6: 50:06:6e:b5:ec:3c:0d:6c:59:78:a0:1d:b2:f0:ab:8c:b6:02: 29:fe:f2:d9:b8:1a:13:ae:2b:bb:01:af:b4:90:8f:72:88:32: b7:46:76:5d:a2:dd:dc:de:42:71:43:d3:f4:5d:d9:99:c2:36: 04:2f:ad:78:ff:81:b4:5b:3b:4b:46:b4:6c:99:0d:7c:de:5d: 34:3e:51:5c:76:b6:69:aa:d3:2b:78:29:20:a5:2d:ca:91:26: b4:7b:9e:f8:20:4e:4a:00:92:73:1e:62:2f:91:bc:05:dd:4a: f6:02:c2:cd:1a:a7:1a:73:01:b9:2d:4e:04:84:df:91:55:8c: f2:10:a5:5c:db:c5:1b:5d:34:08:b2:40:34:5b:d9:27:21:6f: 21:2c:df:dd:8d:d8:3c:22:41:23:66:d7:20:87:1a:b1:55:cd: 5c:b4:ef:b0:46:5e:f2:68:c5:3f:cc:cd:a6:39:ba:db:b0:7b: b5:fd:44:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5NTZGRjAzRkRFMDU2 RjI4OTc3ODlCMTg1MkU2QThBODM4RUI0RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0v8co1lzUN7v4nnlGiFwT8vAJuX0wWXGZi0K1G9VghGkCKIUX niF7LoxXgiecMIE+HeB8BaZxR1qiCECkpdcLjN48bI/h0a2An0mpWhYfct5ob/zF 5ateSz6XLO1GGS+aKu0oxNJvyOH1WR5yKXMnSutKde8tGhAwnGLtA0EpkZLIY2qV UwCniuvn+KS517LfmvcjJ8FVtgS9zcFNrj0jRMSRsO715koIuM4mBwAtNjtDG3Oy i/OvOY+nX7xamOkjiBng94zO8jagaJkc2Z5LUumMYQUGgfRkMzJqzxGd1port7nM fI90uqq72tseG8ozLafAiarY/bhI6sFR1qUHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKVb/A/3gVvKJd4mxhS5qioOOtPAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tWYl9BXzNnVnZLSmQ0bXho UzVxaW9PT3RQQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n6gwDQYJKoZIhvcNAQELBQADggEBAFzQWQDEl9DJizrkvucM8edUtCxrTpIUdhbQ 4BsvC1e17clZeANBh2VnmgPOsX/vWcRjkAJeYim2g6hmrsYMg2QEIrejzmestlAG brXsPA1sWXigHbLwq4y2Ain+8tm4GhOuK7sBr7SQj3KIMrdGdl2i3dzeQnFD0/Rd 2ZnCNgQvrXj/gbRbO0tGtGyZDXzeXTQ+UVx2tmmq0yt4KSClLcqRJrR7nvggTkoA knMeYi+RvAXdSvYCws0apxpzAbktTgSE35FVjPIQpVzbxRtdNAiyQDRb2SchbyEs 392N2DwiQSNm1yCHGrFVzVy077BGXvJoxT/MzaY5utuwe7X9RP4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org