$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PO9Pqp9vxXO9JAVh0UXYub2V5Xc.roa File: PO9Pqp9vxXO9JAVh0UXYub2V5Xc.roa (raw, json) Hash identifier: DlrUVObmqOMKq4vNQXiuvMBlyiy4ND4SP2864OWOno4= Subject key identifier: 3C:EF:4F:AA:9F:6F:C5:73:BD:24:05:61:D1:45:D8:B9:BD:95:E5:77 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2233 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PO9Pqp9vxXO9JAVh0UXYub2V5Xc.roa Signing time: Mon 26 Aug 2024 05:33:46 +0000 ROA not before: Mon 26 Aug 2024 05:33:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8755 (0x2233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3CEF4FAA9F6FC573BD240561D145D8B9BD95E577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:d3:54:9c:86:a3:a5:85:48:15:35:8a:74: 50:57:8f:9d:c9:9b:00:f0:09:8f:20:00:3f:29:1c: 64:2b:c1:eb:d1:e1:7a:2f:14:dc:4e:df:03:bd:9a: 59:8e:42:2f:92:00:c2:29:d9:38:0e:91:21:dd:10: 2d:62:8c:ff:6f:ad:d6:48:89:4b:ea:0a:27:74:aa: ea:9e:2e:b0:9e:53:fb:19:ad:4b:13:e3:e6:67:ad: 05:fe:c9:b7:45:a4:f3:92:bf:04:43:ea:27:4e:0c: 48:ea:f7:c6:52:98:73:2c:8d:5e:8c:0e:2a:4c:37: 4f:c1:39:79:0c:47:7f:d4:19:47:98:57:9a:32:11: dc:5f:c4:50:7f:87:e1:ce:16:42:dd:c5:94:6a:4d: b6:1e:0b:8e:81:68:54:a0:fb:5f:31:42:5c:47:84: ff:29:c6:5a:a5:74:c7:f2:c7:bd:34:15:13:27:13: aa:46:39:d7:b0:3a:94:25:35:7d:66:b9:60:95:8d: 5b:71:18:76:25:fc:ca:89:20:5c:4a:24:de:cb:22: 8e:0d:99:3a:32:e2:68:aa:14:c7:1f:99:84:3b:ee: 94:87:f8:3b:73:22:7e:5d:8a:95:cc:51:c8:b7:6e: da:de:c5:a9:e2:b5:09:e8:b7:8f:c9:c7:c1:21:bb: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:4F:AA:9F:6F:C5:73:BD:24:05:61:D1:45:D8:B9:BD:95:E5:77 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PO9Pqp9vxXO9JAVh0UXYub2V5Xc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.8.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:fc:c4:db:66:0c:65:14:a7:c5:b1:d8:0b:2f:38:39:b8:68: 06:74:82:4c:bd:9a:a2:1d:54:40:fb:e1:da:7b:e5:13:bd:90: 5d:bf:87:c4:c2:c7:4a:d6:44:75:7f:eb:7c:86:f3:73:62:28: eb:dc:e6:dc:ca:62:52:e6:89:3b:28:fd:d3:a4:c9:e6:94:44: 6b:27:fa:4e:eb:d3:3a:98:8a:20:54:ee:e2:75:d8:2b:91:b7: 91:31:98:11:75:e7:f1:3f:10:2e:1b:88:a6:6a:e5:89:30:67: cb:7e:ca:b8:ce:e2:f9:54:dc:69:32:02:51:19:44:39:5d:6d: 9f:5f:af:d0:0e:43:2a:d4:4c:12:54:7a:41:6e:bd:5f:2d:57: d2:35:7d:da:9a:e9:4a:a2:f9:a0:4d:ee:d7:03:26:b2:3b:18: 1b:89:a0:3b:48:34:4c:09:3b:70:51:9b:f7:6f:fe:f9:a1:2e: 86:54:25:ba:70:62:b2:f1:bc:2d:c6:e3:d9:d3:0e:ec:1f:37: 4f:c0:0d:eb:4c:4e:46:be:6e:5f:46:68:d4:4e:0e:9b:ea:9d: a0:60:01:e0:b8:f1:fd:b6:12:bb:3b:6b:5f:97:03:96:8e:e7: b5:85:de:bc:50:1b:3f:77:f0:63:25:e4:db:f9:f2:49:76:4f: 98:92:f1:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDRUY0RkFBOUY2RkM1 NzNCRDI0MDU2MUQxNDVEOEI5QkQ5NUU1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRBdNUnIajpYVIFTWKdFBXj53JmwDwCY8gAD8pHGQrwevR4Xov FNxO3wO9mlmOQi+SAMIp2TgOkSHdEC1ijP9vrdZIiUvqCid0quqeLrCeU/sZrUsT 4+ZnrQX+ybdFpPOSvwRD6idODEjq98ZSmHMsjV6MDipMN0/BOXkMR3/UGUeYV5oy EdxfxFB/h+HOFkLdxZRqTbYeC46BaFSg+18xQlxHhP8pxlqldMfyx700FRMnE6pG OdewOpQlNX1muWCVjVtxGHYl/MqJIFxKJN7LIo4NmToy4miqFMcfmYQ77pSH+Dtz In5dipXMUci3btrexanitQnot4/Jx8Ehu98lAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPO9Pqp9vxXO9JAVh0UXYub2V5XcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BPOVBxcDl2eFhPOUpBVmgw VVhZdWIyVjVYYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nggwDQYJKoZIhvcNAQELBQADggEBAI38xNtmDGUUp8Wx2AsvODm4aAZ0gky9mqId VED74dp75RO9kF2/h8TCx0rWRHV/63yG83NiKOvc5tzKYlLmiTso/dOkyeaURGsn +k7r0zqYiiBU7uJ12CuRt5ExmBF15/E/EC4biKZq5YkwZ8t+yrjO4vlU3GkyAlEZ RDldbZ9fr9AOQyrUTBJUekFuvV8tV9I1fdqa6Uqi+aBN7tcDJrI7GBuJoDtINEwJ O3BRm/dv/vmhLoZUJbpwYrLxvC3G49nTDuwfN0/ADetMTka+bl9GaNRODpvqnaBg AeC48f22Ers7a1+XA5aO57WF3rxQGz938GMl5Nv58kl2T5iS8Tg= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:44 2024 by rpki-client on console-fra.rpki-client.org