$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QF1s_s2FeIAK3cI3vZI2np3CdYk.roa File: QF1s_s2FeIAK3cI3vZI2np3CdYk.roa (raw, json) Hash identifier: RzI3NXCC1gkf6aouq3XwJVElFInov5WuTWsyk6+qXxM= Subject key identifier: 40:5D:6C:FE:CD:85:78:80:0A:DD:C2:37:BD:92:36:9E:9D:C2:75:89 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2255 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QF1s_s2FeIAK3cI3vZI2np3CdYk.roa Signing time: Mon 26 Aug 2024 05:33:53 +0000 ROA not before: Mon 26 Aug 2024 05:33:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8789 (0x2255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=405D6CFECD8578800ADDC237BD92369E9DC27589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:46:32:75:02:2a:0f:f1:ab:92:71:61:f9: 00:61:de:ce:aa:04:95:79:bf:43:c4:09:71:46:c7: 1c:74:42:bb:5c:e7:87:a9:9e:12:f9:bc:bc:02:9b: 14:28:71:43:59:ce:6b:d2:1a:3a:c3:20:80:99:45: fd:ad:00:09:0b:4e:af:08:8f:2b:5f:0a:ae:6c:75: 64:f2:71:c7:2d:f9:0d:03:ea:c2:82:1a:9e:5a:6e: 59:ca:83:31:b3:42:8b:16:74:df:c4:ff:7d:97:53: 05:9b:2f:a3:7d:47:ef:e8:a7:3b:34:5a:12:7f:dc: ad:d0:93:82:df:b9:22:bb:75:7d:26:8a:6e:c7:70: 33:24:4a:b2:92:c4:61:38:f0:ed:79:a1:96:29:bc: 40:c4:48:5e:37:1a:5b:6f:02:15:f5:f2:9d:97:c0: 61:31:f5:3f:b2:0e:fb:55:f0:fa:20:3b:ca:73:5f: 89:32:10:a7:74:38:a5:6f:d7:5f:11:05:45:de:dd: a6:81:0c:c7:fd:2c:eb:09:41:68:04:ba:83:bd:20: 2e:7a:5a:7c:86:d0:10:57:1e:5b:30:8e:74:0c:82: 20:13:66:67:17:57:02:49:d7:76:17:54:d3:5e:d4: d4:43:7c:9c:cd:55:68:f6:27:25:da:71:93:c4:03: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5D:6C:FE:CD:85:78:80:0A:DD:C2:37:BD:92:36:9E:9D:C2:75:89 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QF1s_s2FeIAK3cI3vZI2np3CdYk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.32.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:d8:f8:a8:e8:20:d4:ab:40:5a:02:10:6e:49:59:40:0c:9b: f5:8f:05:11:be:81:37:bc:a8:de:fe:5d:1c:20:07:e4:d3:da: d3:67:f1:aa:bd:02:35:d6:42:e6:78:36:d2:e2:44:e1:22:94: 47:44:03:1b:4f:1d:80:1d:cc:be:bf:6d:f7:46:d8:ca:d3:fb: b7:2a:f5:5f:1e:2a:f3:fb:4a:c6:28:8c:34:30:dc:3c:4f:a5: 1f:e2:c3:33:6d:fe:98:01:54:f1:f1:70:31:6c:bb:16:2d:f9: 43:c6:07:af:d8:58:a0:76:c0:cf:45:ed:62:70:65:b7:40:b5: 8e:85:c1:d2:27:fa:6a:91:b0:96:b2:93:72:9c:90:6a:6a:2d: 7c:e7:8e:91:29:02:45:4a:de:97:a7:ff:bc:e8:3d:b9:ed:43: fb:ba:2b:8f:59:06:7f:c6:b5:cd:98:91:d6:61:9b:bf:20:6e: 14:22:ba:bf:c2:0d:03:25:d8:a0:3d:92:e6:cb:af:72:cd:20: 95:d3:8c:ef:8d:b3:b6:f7:d6:8a:c6:fe:23:71:8f:9c:9c:97: 05:ff:42:2d:42:46:45:c5:b5:74:08:f2:e8:27:28:aa:c7:96: a5:1b:9e:8a:e0:f5:bb:51:73:eb:40:f9:19:6c:6b:e2:99:64: 24:50:3f:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwNUQ2Q0ZFQ0Q4NTc4 ODAwQUREQzIzN0JEOTIzNjlFOURDMjc1ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwWkYydQIqD/GrknFh+QBh3s6qBJV5v0PECXFGxxx0Qrtc54ep nhL5vLwCmxQocUNZzmvSGjrDIICZRf2tAAkLTq8IjytfCq5sdWTyccct+Q0D6sKC Gp5ablnKgzGzQosWdN/E/32XUwWbL6N9R+/opzs0WhJ/3K3Qk4LfuSK7dX0mim7H cDMkSrKSxGE48O15oZYpvEDESF43GltvAhX18p2XwGEx9T+yDvtV8PogO8pzX4ky EKd0OKVv118RBUXe3aaBDMf9LOsJQWgEuoO9IC56WnyG0BBXHlswjnQMgiATZmcX VwJJ13YXVNNe1NRDfJzNVWj2JyXacZPEA/GFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQF1s/s2FeIAK3cI3vZI2np3CdYkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FGMXNfczJGZUlBSzNjSTN2 WkkybnAzQ2RZay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx niAwDQYJKoZIhvcNAQELBQADggEBAF/Y+KjoINSrQFoCEG5JWUAMm/WPBRG+gTe8 qN7+XRwgB+TT2tNn8aq9AjXWQuZ4NtLiROEilEdEAxtPHYAdzL6/bfdG2MrT+7cq 9V8eKvP7SsYojDQw3DxPpR/iwzNt/pgBVPHxcDFsuxYt+UPGB6/YWKB2wM9F7WJw ZbdAtY6FwdIn+mqRsJayk3KckGpqLXznjpEpAkVK3pen/7zoPbntQ/u6K49ZBn/G tc2YkdZhm78gbhQiur/CDQMl2KA9kubLr3LNIJXTjO+Ns7b31orG/iNxj5yclwX/ Qi1CRkXFtXQI8ugnKKrHlqUbnorg9btRc+tA+Rlsa+KZZCRQP0U= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org