$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SaHdBDBRnrTazc0eEKbX3ZCqF2Q.roa File: SaHdBDBRnrTazc0eEKbX3ZCqF2Q.roa (raw, json) Hash identifier: 5ItwRg45iVo/D5wd5VKcsM9adCw63DL/defUqj9rkbg= Subject key identifier: 49:A1:DD:04:30:51:9E:B4:DA:CD:CD:1E:10:A6:D7:DD:90:AA:17:64 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22AD Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SaHdBDBRnrTazc0eEKbX3ZCqF2Q.roa Signing time: Mon 26 Aug 2024 05:34:15 +0000 ROA not before: Mon 26 Aug 2024 05:34:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8877 (0x22ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=49A1DD0430519EB4DACDCD1E10A6D7DD90AA1764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:4f:5b:69:cd:c3:13:ab:88:a7:54:0e:30: 56:33:63:5b:5a:ed:63:3d:1f:28:66:eb:33:c5:ff: c5:16:f3:ee:2d:eb:d8:ca:2e:7e:30:99:98:b1:31: 0d:b2:de:aa:b7:85:7a:cb:e5:ab:fa:ec:ef:12:93: ed:8d:0f:d8:48:fe:bb:7b:26:53:82:ab:02:9a:bb: 85:4d:35:03:6e:f0:b3:0d:ce:09:51:0b:07:0e:5d: ce:8f:16:95:94:33:9d:bb:eb:c2:04:79:66:86:88: 0f:01:1d:38:f2:04:7d:1f:83:29:6e:bb:a7:0e:7c: 6a:29:ff:20:4f:cb:73:e2:92:d3:6b:c2:ff:d4:2d: 5f:01:1a:a8:85:e9:5e:06:5d:7b:02:3e:bc:41:34: ea:fe:5d:13:06:36:35:8c:81:5e:2e:bb:f7:f5:5a: bd:f3:cb:6c:9f:af:65:41:1c:9a:29:0a:a0:f7:ae: 95:f7:5e:53:bf:b2:5d:e3:46:c1:80:f1:15:ba:d1: 30:09:f7:20:be:ba:15:c5:a4:eb:0a:55:6d:7c:d3: a5:82:9b:c0:06:2c:08:89:e2:d0:50:8a:5b:94:a7: 9e:d9:00:16:f4:0e:44:e0:01:b6:dc:0b:54:71:3a: eb:69:50:8e:65:35:9c:e0:dd:d0:0b:f1:8e:5d:4d: 48:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A1:DD:04:30:51:9E:B4:DA:CD:CD:1E:10:A6:D7:DD:90:AA:17:64 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SaHdBDBRnrTazc0eEKbX3ZCqF2Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.112.0/21 Signature Algorithm: sha256WithRSAEncryption 63:21:00:ce:66:4c:48:c0:db:18:d0:37:1b:cd:e2:fa:41:44: bf:7e:08:27:32:b8:d9:38:59:ec:8b:49:e3:13:49:e5:fa:8d: 60:a5:bf:c4:b9:19:b9:a9:22:eb:26:55:74:97:29:3d:11:1b: d1:b6:2b:b7:91:fc:55:05:6a:be:89:e0:1b:0b:81:f5:db:67: 8e:26:fc:e1:2f:82:3f:63:b1:fa:4b:03:16:b4:bc:b5:61:94: c0:33:b9:03:fc:06:13:14:df:2f:df:ad:fe:2b:6b:d8:5d:8c: 7a:1b:b8:c6:c0:c6:8a:33:41:8d:7d:64:fd:fc:e7:1f:f9:3c: 4a:88:be:a3:62:a9:46:64:93:24:8a:fb:ef:e8:8a:ea:c8:e0: 35:5f:f5:6b:88:3c:a8:61:d7:54:41:df:7f:6b:7d:65:98:cb: f6:32:59:ac:6d:77:73:c0:07:05:75:25:3f:d5:ed:68:99:81: 1b:cd:eb:3d:5c:c7:d0:73:48:85:cd:06:3a:11:90:68:e0:9a: c3:9c:3f:1d:f4:1b:e5:99:2f:af:b9:6f:b2:d0:f8:d0:bc:66: 58:17:9e:e1:24:52:62:81:5e:32:52:e3:5c:f2:cf:e7:52:b3: 4d:d2:b7:cb:d8:c7:49:1b:a2:39:a2:51:1b:a8:49:01:7c:e8: c1:64:f1:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5QTFERDA0MzA1MTlF QjREQUNEQ0QxRTEwQTZEN0REOTBBQTE3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6bU9bac3DE6uIp1QOMFYzY1ta7WM9Hyhm6zPF/8UW8+4t69jK Ln4wmZixMQ2y3qq3hXrL5av67O8Sk+2ND9hI/rt7JlOCqwKau4VNNQNu8LMNzglR CwcOXc6PFpWUM52768IEeWaGiA8BHTjyBH0fgyluu6cOfGop/yBPy3PiktNrwv/U LV8BGqiF6V4GXXsCPrxBNOr+XRMGNjWMgV4uu/f1Wr3zy2yfr2VBHJopCqD3rpX3 XlO/sl3jRsGA8RW60TAJ9yC+uhXFpOsKVW1806WCm8AGLAiJ4tBQiluUp57ZABb0 DkTgAbbcC1RxOutpUI5lNZzg3dAL8Y5dTUjXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSaHdBDBRnrTazc0eEKbX3ZCqF2QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NhSGRCREJSbnJUYXpjMGVF S2JYM1pDcUYyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nnAwDQYJKoZIhvcNAQELBQADggEBAGMhAM5mTEjA2xjQNxvN4vpBRL9+CCcyuNk4 WeyLSeMTSeX6jWClv8S5GbmpIusmVXSXKT0RG9G2K7eR/FUFar6J4BsLgfXbZ44m /OEvgj9jsfpLAxa0vLVhlMAzuQP8BhMU3y/frf4ra9hdjHobuMbAxoozQY19ZP38 5x/5PEqIvqNiqUZkkySK++/oiurI4DVf9WuIPKhh11RB339rfWWYy/YyWaxtd3PA BwV1JT/V7WiZgRvN6z1cx9BzSIXNBjoRkGjgmsOcPx30G+WZL6+5b7LQ+NC8ZlgX nuEkUmKBXjJS41zyz+dSs03St8vYx0kbojmiURuoSQF86MFk8Us= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org