$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa File: WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa (raw, json) Hash identifier: TOhQiKL8MArkFJykercgvxBZmIJs6JuXDguPp3+1urM= Subject key identifier: 5A:86:5F:5F:0A:13:F0:04:38:EF:35:A7:FB:83:1A:38:F8:7F:C5:BD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21AF Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa Signing time: Mon 26 Aug 2024 05:33:14 +0000 ROA not before: Mon 26 Aug 2024 05:33:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8623 (0x21af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5A865F5F0A13F00438EF35A7FB831A38F87FC5BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:62:be:33:b8:53:5a:61:c6:ca:8b:31:69: 4f:de:ab:5c:85:ce:e1:b1:2d:02:dc:5b:bf:1a:4c: ba:cf:a3:45:a5:8f:a8:31:53:b3:a5:0d:91:f6:cb: 1c:50:39:ce:85:d7:36:54:41:2e:a5:7d:3d:56:42: 4e:d5:57:17:58:77:d0:cc:df:60:16:b4:a3:50:5f: b9:23:30:50:96:70:68:fb:bb:b8:bf:fe:2a:03:96: 93:67:d5:11:ed:7d:c6:12:15:ae:c7:fd:76:75:a1: 08:10:09:be:a8:96:72:7a:9f:4e:c4:70:91:ca:fe: c7:bc:79:6d:32:15:f0:a6:78:03:da:63:a7:2a:ec: f0:6e:da:e6:52:c5:20:3f:13:c1:0b:93:0f:c5:02: 73:17:4f:66:00:0c:36:99:b7:a4:13:3c:0a:b2:6b: a7:7b:8d:82:19:3f:34:48:b8:f2:b6:c5:c5:61:79: dd:7b:88:15:f6:08:c5:28:30:ec:79:3f:27:85:dd: 47:e2:d3:31:fb:3d:17:14:25:04:97:cf:54:77:e7: 81:58:bc:e6:5f:6d:ff:fe:3e:87:69:4b:a9:c9:5e: 25:a4:25:d6:f6:e5:3b:eb:c6:24:a9:07:85:25:bb: b5:ac:ef:93:cc:62:9c:ad:d0:56:f0:7a:36:30:c6: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:5F:5F:0A:13:F0:04:38:EF:35:A7:FB:83:1A:38:F8:7F:C5:BD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.48.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:c1:9a:b0:43:18:2d:fc:9c:59:bc:71:ce:26:db:67:a3:59: 39:5f:3c:8e:a0:07:bd:4c:49:a0:cb:90:b1:83:79:d6:b1:95: 4d:31:c5:8b:87:39:54:c9:13:1a:fc:1a:08:37:3d:15:84:41: 4c:58:a4:ef:db:ff:43:17:46:58:0e:d8:43:de:64:31:6a:d4: 4d:c7:8a:37:82:12:14:51:d0:eb:78:45:4d:1b:63:76:7b:d0: 90:fb:90:64:49:b9:b3:ef:ea:9a:16:f4:82:33:2c:93:fe:dc: 22:ac:2e:28:a0:a0:df:a3:f9:58:93:78:60:b9:52:d6:01:bc: 82:a5:63:04:db:91:5a:73:0a:0f:d8:87:b4:5f:aa:be:4e:8a: f8:9a:a1:6b:f4:da:31:34:83:4a:78:93:f6:52:9c:82:02:43: c1:15:46:7a:26:b4:83:4e:dc:1b:18:17:32:1a:fb:ad:3c:3d: d7:c9:1f:97:59:78:3e:15:36:d4:8a:46:8f:59:61:79:4c:fd: 43:d6:6a:76:d0:67:fa:92:e6:05:ad:7d:36:ef:d8:92:8a:7e: 91:88:6a:0d:0e:2e:83:d9:d3:27:8c:28:dc:a0:e3:71:80:ea: fb:d7:e5:b4:08:4a:ff:76:54:3f:5d:1c:35:74:a0:b4:82:b2: ce:21:e4:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBODY1RjVGMEExM0Yw MDQzOEVGMzVBN0ZCODMxQTM4Rjg3RkM1QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMxGK+M7hTWmHGyosxaU/eq1yFzuGxLQLcW78aTLrPo0Wlj6gx U7OlDZH2yxxQOc6F1zZUQS6lfT1WQk7VVxdYd9DM32AWtKNQX7kjMFCWcGj7u7i/ /ioDlpNn1RHtfcYSFa7H/XZ1oQgQCb6olnJ6n07EcJHK/se8eW0yFfCmeAPaY6cq 7PBu2uZSxSA/E8ELkw/FAnMXT2YADDaZt6QTPAqya6d7jYIZPzRIuPK2xcVhed17 iBX2CMUoMOx5PyeF3Ufi0zH7PRcUJQSXz1R354FYvOZfbf/+PodpS6nJXiWkJdb2 5TvrxiSpB4Ulu7Ws75PMYpyt0FbwejYwxtSFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWoZfXwoT8AQ47zWn+4MaOPh/xb0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dvWmZYd29UOEFRNDd6V24t NE1hT1BoX3hiMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nzAwDQYJKoZIhvcNAQELBQADggEBAG/BmrBDGC38nFm8cc4m22ejWTlfPI6gB71M SaDLkLGDedaxlU0xxYuHOVTJExr8Ggg3PRWEQUxYpO/b/0MXRlgO2EPeZDFq1E3H ijeCEhRR0Ot4RU0bY3Z70JD7kGRJubPv6poW9IIzLJP+3CKsLiigoN+j+ViTeGC5 UtYBvIKlYwTbkVpzCg/Yh7Rfqr5OiviaoWv02jE0g0p4k/ZSnIICQ8EVRnomtINO 3BsYFzIa+608PdfJH5dZeD4VNtSKRo9ZYXlM/UPWanbQZ/qS5gWtfTbv2JKKfpGI ag0OLoPZ0yeMKNyg43GA6vvX5bQISv92VD9dHDV0oLSCss4h5Ok= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org