$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U1TGzvrIHKmDi3GLLxInigKslvc.roa File: U1TGzvrIHKmDi3GLLxInigKslvc.roa (raw, json) Hash identifier: kUPB7ko8o6Rhv1pAb/rjhGAhwifkY72vF+dYx41YuVc= Subject key identifier: 53:54:C6:CE:FA:C8:1C:A9:83:8B:71:8B:2F:12:27:8A:02:AC:96:F7 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2174 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U1TGzvrIHKmDi3GLLxInigKslvc.roa Signing time: Mon 26 Aug 2024 05:33:01 +0000 ROA not before: Mon 26 Aug 2024 05:33:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8564 (0x2174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5354C6CEFAC81CA9838B718B2F12278A02AC96F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:85:1d:f2:5f:92:0a:83:43:08:ee:09:f7: 8f:5e:d8:f0:9e:43:f8:89:4f:e8:7b:51:29:5d:87: 99:eb:71:ca:94:08:6d:ef:3c:4c:f5:68:f3:97:60: 05:bb:57:19:da:2f:a0:ea:7b:c4:2a:fc:ab:7c:d6: 0e:e2:0c:4d:ac:f3:00:9f:35:1f:40:2b:10:f6:d1: 50:bf:ca:5b:46:d2:77:b2:2c:aa:18:08:27:ec:31: ef:36:e2:26:36:6d:58:23:8f:d9:12:b4:e4:73:09: bb:62:6d:0b:25:7b:8e:8c:e6:19:81:51:44:66:fc: a1:ac:b0:dc:0d:2a:2a:24:72:b2:b5:14:02:66:f5: 23:b2:ca:64:15:a5:0d:36:54:8a:72:e6:cb:ef:64: 08:b5:ee:fe:7a:24:bf:76:66:fe:ca:ee:66:fd:83: 5d:1a:78:ee:5c:36:25:a8:e4:44:99:51:d5:41:ba: 38:88:96:fd:e4:46:5c:8d:c4:d8:a9:9c:5f:ad:5e: 63:1a:7d:5c:fa:18:a3:14:10:b4:06:82:a9:82:a3: 1d:84:99:f7:d1:fc:ea:a5:e5:fa:e4:34:34:b1:be: 81:1f:8d:0b:d1:35:88:c5:ef:42:75:07:65:38:63: a9:af:db:96:94:93:ec:2d:18:4c:3d:8c:85:72:2b: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:54:C6:CE:FA:C8:1C:A9:83:8B:71:8B:2F:12:27:8A:02:AC:96:F7 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U1TGzvrIHKmDi3GLLxInigKslvc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:72:4d:57:ee:08:bf:76:05:f9:e7:09:8b:f2:4e:cf:eb:8d: e8:ac:03:71:9f:f2:7f:f7:b8:b1:50:cb:91:83:3a:e7:6f:f8: 15:4f:ea:cf:81:e1:fd:d5:87:60:4a:80:c6:5c:86:e8:75:6b: 0d:91:fd:6f:9e:2f:05:70:a2:89:7d:08:54:53:ca:df:a6:00: 33:28:5b:15:94:55:77:1a:02:ed:5f:cd:8c:43:b0:ef:64:5e: 0e:4b:bc:40:98:d0:dd:f2:4e:d1:43:17:62:23:2d:f3:20:3a: 97:18:61:4f:84:ae:df:3f:77:68:45:03:fe:2e:48:43:76:f9: 5d:61:4e:dd:74:23:e9:8f:50:09:8f:83:c8:c0:07:cf:90:bd: a8:65:2a:d8:e0:08:c6:35:23:c3:0c:3c:72:77:0f:79:1d:77: 1d:56:93:93:ce:f2:4b:6e:d7:02:07:6b:d1:00:a0:8d:3f:fb: b2:74:dd:18:9d:55:13:80:e0:06:89:e5:68:ed:c8:1d:44:e6: 87:df:79:73:d5:b8:f8:1c:7e:83:59:75:08:3c:53:22:bc:71: da:32:9e:7b:28:14:02:2b:8e:1f:df:48:ec:e9:b5:b8:35:4c: 9a:38:81:48:f9:40:91:43:d6:9f:20:53:b8:2e:90:75:f7:8e: 21:2e:63:fc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICIXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUzNTRDNkNFRkFDODFD QTk4MzhCNzE4QjJGMTIyNzhBMDJBQzk2RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZIUd8l+SCoNDCO4J949e2PCeQ/iJT+h7USldh5nrccqUCG3v PEz1aPOXYAW7VxnaL6Dqe8Qq/Kt81g7iDE2s8wCfNR9AKxD20VC/yltG0neyLKoY CCfsMe824iY2bVgjj9kStORzCbtibQsle46M5hmBUURm/KGssNwNKiokcrK1FAJm 9SOyymQVpQ02VIpy5svvZAi17v56JL92Zv7K7mb9g10aeO5cNiWo5ESZUdVBujiI lv3kRlyNxNipnF+tXmMafVz6GKMUELQGgqmCox2EmffR/Oql5frkNDSxvoEfjQvR NYjF70J1B2U4Y6mv25aUk+wtGEw9jIVyK3u/AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUU1TGzvrIHKmDi3GLLxInigKslvcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1UxVEd6dnJJSEttRGkzR0xM eEluaWdLc2x2Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx njANBgkqhkiG9w0BAQsFAAOCAQEAnXJNV+4Iv3YF+ecJi/JOz+uN6KwDcZ/yf/e4 sVDLkYM652/4FU/qz4Hh/dWHYEqAxlyG6HVrDZH9b54vBXCiiX0IVFPK36YAMyhb FZRVdxoC7V/NjEOw72ReDku8QJjQ3fJO0UMXYiMt8yA6lxhhT4Su3z93aEUD/i5I Q3b5XWFO3XQj6Y9QCY+DyMAHz5C9qGUq2OAIxjUjwww8cncPeR13HVaTk87yS27X Agdr0QCgjT/7snTdGJ1VE4DgBonlaO3IHUTmh995c9W4+Bx+g1l1CDxTIrxx2jKe eygUAiuOH99I7Om1uDVMmjiBSPlAkUPWnyBTuC6QdfeOIS5j/A== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:55 2024 by rpki-client on console-fra.rpki-client.org