$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OySGkG5t20bejmg4yuAJhRI4z9c.roa File: OySGkG5t20bejmg4yuAJhRI4z9c.roa (raw, json) Hash identifier: nR+EAamyXJmNVxuYTo8KHQUBz2GvzyGJqWadiYU92wY= Subject key identifier: 3B:24:86:90:6E:6D:DB:46:DE:8E:68:38:CA:E0:09:85:12:38:CF:D7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2270 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OySGkG5t20bejmg4yuAJhRI4z9c.roa Signing time: Mon 26 Aug 2024 05:34:00 +0000 ROA not before: Mon 26 Aug 2024 05:34:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8816 (0x2270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3B2486906E6DDB46DE8E6838CAE009851238CFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:d7:c7:7a:87:8c:2c:51:8b:4e:70:a0:2b: 9d:5b:e4:dd:70:ce:57:d3:73:7c:91:8a:b9:a0:b4: 87:b2:ce:52:29:f4:4a:56:ea:79:a7:24:f2:c5:40: bd:d8:3e:51:8e:6c:49:c0:76:c1:28:d2:9a:a3:59: b1:c0:f6:b6:6b:df:6b:09:41:7c:87:85:2c:fb:9e: 49:13:e5:4b:c1:8b:1b:8b:47:09:84:b1:c2:80:7a: fa:5b:11:cd:c4:2a:cc:44:62:dd:4e:b4:ea:62:c7: 09:79:12:82:06:4b:1c:44:f2:80:d8:53:a0:67:23: 74:21:12:42:02:85:95:bf:5f:82:0e:37:5c:33:4f: 6a:8e:e8:39:41:d9:1c:37:c1:0e:8f:f0:16:52:25: 12:3b:64:43:ab:f0:8b:e7:d6:bf:13:96:bf:23:62: c2:0f:46:80:7c:da:01:89:41:2c:9c:84:f7:ae:9e: 2f:ec:79:72:71:a2:47:4a:6c:69:5c:90:43:64:f6: 99:43:c1:95:bf:15:cb:90:08:30:ed:74:b1:30:3c: 94:8b:82:c4:c1:14:21:61:6b:df:9b:54:75:e0:60: 81:1c:5e:e6:a6:05:33:bf:55:47:9b:13:a8:95:d9: cd:0e:31:a5:2b:b7:04:bf:32:8c:40:86:3e:0f:e5: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:24:86:90:6E:6D:DB:46:DE:8E:68:38:CA:E0:09:85:12:38:CF:D7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OySGkG5t20bejmg4yuAJhRI4z9c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.176.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:69:17:e4:26:8e:16:7a:20:f7:45:10:61:84:70:65:ff:7a: 25:ea:a7:4f:ad:d5:b1:3c:82:52:94:da:d9:ff:d9:fd:51:4f: 24:af:90:ed:f9:b3:79:4b:a4:5a:69:88:99:5b:52:6a:f0:7f: 5b:34:4d:72:9c:61:22:63:6c:01:f2:eb:2e:59:e1:9e:87:4a: 3f:b5:a6:a8:68:f0:33:82:df:61:e8:b8:54:cb:17:08:77:73: c0:f1:e8:42:e2:77:a3:e6:4f:50:a8:d8:14:0c:03:6c:f2:4d: 55:90:53:ba:56:9c:a1:e6:78:c4:8e:fb:68:e4:fa:50:36:59: 58:da:ef:4f:61:8f:99:89:d4:de:2f:73:69:99:94:dc:8b:ea: 49:21:2f:bd:c4:c2:b7:32:2c:15:2b:0c:ff:55:49:a6:b1:8d: 5f:2b:f3:fd:8a:cb:95:dc:be:f7:a9:61:88:15:c1:e6:6d:b3: e6:f0:1d:1c:80:4f:52:a1:27:5b:6e:05:53:ca:3c:50:03:a7: d0:38:40:3a:aa:d8:f9:0c:61:80:c6:6e:29:00:4e:95:9d:de: b8:ee:7b:0b:75:99:59:f6:5e:43:9c:5d:c7:7c:d5:e8:03:97: c2:40:ea:4d:6b:11:1a:ac:bd:29:f0:f3:b8:27:32:f0:01:5a: 9c:81:c2:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICInAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCMjQ4NjkwNkU2RERC NDZERThFNjgzOENBRTAwOTg1MTIzOENGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNRNfHeoeMLFGLTnCgK51b5N1wzlfTc3yRirmgtIeyzlIp9EpW 6nmnJPLFQL3YPlGObEnAdsEo0pqjWbHA9rZr32sJQXyHhSz7nkkT5UvBixuLRwmE scKAevpbEc3EKsxEYt1OtOpixwl5EoIGSxxE8oDYU6BnI3QhEkIChZW/X4ION1wz T2qO6DlB2Rw3wQ6P8BZSJRI7ZEOr8Ivn1r8Tlr8jYsIPRoB82gGJQSychPeuni/s eXJxokdKbGlckENk9plDwZW/FcuQCDDtdLEwPJSLgsTBFCFha9+bVHXgYIEcXuam BTO/VUebE6iV2c0OMaUrtwS/MoxAhj4P5cBfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOySGkG5t20bejmg4yuAJhRI4z9cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL095U0drRzV0MjBiZWptZzR5 dUFKaFJJNHo5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nrAwDQYJKoZIhvcNAQELBQADggEBAE5pF+QmjhZ6IPdFEGGEcGX/eiXqp0+t1bE8 glKU2tn/2f1RTySvkO35s3lLpFppiJlbUmrwf1s0TXKcYSJjbAHy6y5Z4Z6HSj+1 pqho8DOC32HouFTLFwh3c8Dx6ELid6PmT1Co2BQMA2zyTVWQU7pWnKHmeMSO+2jk +lA2WVja709hj5mJ1N4vc2mZlNyL6kkhL73EwrcyLBUrDP9VSaaxjV8r8/2Ky5Xc vvepYYgVweZts+bwHRyAT1KhJ1tuBVPKPFADp9A4QDqq2PkMYYDGbikATpWd3rju ewt1mVn2XkOcXcd81egDl8JA6k1rERqsvSnw87gnMvABWpyBwrg= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org