$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WrtHZWTgsP_9sReJQDz0woQf1PE.roa File: WrtHZWTgsP_9sReJQDz0woQf1PE.roa (raw, json) Hash identifier: m9JYfykpSXuvuJdWCHl+9GkUQuxyy/BqC4NMmKmX67M= Subject key identifier: 5A:BB:47:65:64:E0:B0:FF:FD:B1:17:89:40:3C:F4:C2:84:1F:D4:F1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 224D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WrtHZWTgsP_9sReJQDz0woQf1PE.roa Signing time: Mon 26 Aug 2024 05:33:51 +0000 ROA not before: Mon 26 Aug 2024 05:33:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8781 (0x224d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5ABB476564E0B0FFFDB11789403CF4C2841FD4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:18:83:e0:df:db:34:1b:0e:c6:e4:63:42: 47:24:62:25:2a:c7:17:58:06:58:ef:51:3d:ff:a5: db:ab:d8:80:a0:97:9f:45:1d:12:c2:ac:df:a6:15: 4b:b3:fc:3c:f2:39:5e:29:36:96:0b:12:6c:f8:b3: 6d:f3:22:10:3d:50:ef:e8:49:af:81:10:67:e2:89: cd:20:52:95:93:0f:fc:2b:4b:91:7c:20:38:78:60: 18:89:97:53:58:03:25:38:b4:16:f3:bb:db:89:ca: cc:31:a8:d6:ab:03:34:1e:2b:f7:16:88:87:98:b3: 6a:df:c2:2a:f7:c3:97:07:4b:47:47:08:af:69:74: 72:eb:f8:81:92:38:9f:57:6f:f5:3e:b7:48:ce:02: 13:b9:df:1d:43:eb:e7:8d:b2:f7:55:e8:30:0a:2c: 47:a2:4e:ce:89:fc:e7:60:c4:de:4a:54:13:13:fa: ee:76:7d:ff:a9:50:f0:a6:43:2c:a9:00:68:ca:d4: 4d:6d:cc:8d:57:a6:45:8a:b0:a3:28:4e:28:62:bd: fe:b0:92:46:6d:41:79:bd:e1:e9:89:73:49:2d:0b: 9a:75:70:a3:1b:94:0f:d0:5f:44:63:58:21:aa:dc: 66:f1:19:cb:80:d0:a0:5f:03:91:79:0f:c7:0f:f7: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BB:47:65:64:E0:B0:FF:FD:B1:17:89:40:3C:F4:C2:84:1F:D4:F1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WrtHZWTgsP_9sReJQDz0woQf1PE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:be:f3:9c:9a:b8:d8:11:bc:9d:c8:1d:7c:65:4e:97:9c:64: f1:2e:bb:f8:43:5e:ba:cc:3f:0a:fa:e4:de:8a:16:a2:8b:09: 4a:67:82:5b:8f:70:5a:c8:f7:75:bb:42:0f:81:f7:5b:d7:50: 54:f6:c8:aa:a1:2e:d1:a7:f6:b6:52:e1:37:41:e8:da:1e:c7: 0d:e4:2a:40:e2:23:35:05:92:a3:9a:69:c2:a5:d6:9d:a7:28: 94:ac:10:b3:ed:21:5c:bc:a4:1d:a3:fd:fb:e3:98:3c:8d:53: 4e:29:69:ad:e6:ac:1e:f4:55:d5:53:2f:89:f3:8c:c0:8f:84: 8d:70:3d:ce:ab:4c:7d:66:d1:df:4b:b0:7d:5d:5f:6d:9b:f5: 41:de:8e:70:dc:48:ab:1a:8e:4e:0c:7c:6e:9c:c2:bb:80:a5: a2:2d:69:40:33:2e:11:b4:c5:e7:45:fc:a6:7a:be:22:dc:57: ca:a5:c9:30:91:59:10:6d:0e:15:c7:8e:b3:53:a4:1c:8f:21: 4d:07:1d:81:d5:f1:10:1e:7e:13:14:69:8f:cc:8f:bc:95:56: 3b:51:b4:fc:b2:de:d5:b1:d1:da:4d:7c:19:94:de:12:d0:08: 96:38:dc:8a:c9:92:62:69:e8:63:6a:a2:41:6f:86:03:97:32: 8a:b5:ae:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBQkI0NzY1NjRFMEIw RkZGREIxMTc4OTQwM0NGNEMyODQxRkQ0RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQIhiD4N/bNBsOxuRjQkckYiUqxxdYBljvUT3/pdur2ICgl59F HRLCrN+mFUuz/DzyOV4pNpYLEmz4s23zIhA9UO/oSa+BEGfiic0gUpWTD/wrS5F8 IDh4YBiJl1NYAyU4tBbzu9uJyswxqNarAzQeK/cWiIeYs2rfwir3w5cHS0dHCK9p dHLr+IGSOJ9Xb/U+t0jOAhO53x1D6+eNsvdV6DAKLEeiTs6J/OdgxN5KVBMT+u52 ff+pUPCmQyypAGjK1E1tzI1XpkWKsKMoTihivf6wkkZtQXm94emJc0ktC5p1cKMb lA/QX0RjWCGq3GbxGcuA0KBfA5F5D8cP92cfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWrtHZWTgsP/9sReJQDz0woQf1PEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dydEhaV1Rnc1BfOXNSZUpR RHowd29RZjFQRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nwAwDQYJKoZIhvcNAQELBQADggEBAFq+85yauNgRvJ3IHXxlTpecZPEuu/hDXrrM Pwr65N6KFqKLCUpngluPcFrI93W7Qg+B91vXUFT2yKqhLtGn9rZS4TdB6Noexw3k KkDiIzUFkqOaacKl1p2nKJSsELPtIVy8pB2j/fvjmDyNU04paa3mrB70VdVTL4nz jMCPhI1wPc6rTH1m0d9LsH1dX22b9UHejnDcSKsajk4MfG6cwruApaItaUAzLhG0 xedF/KZ6viLcV8qlyTCRWRBtDhXHjrNTpByPIU0HHYHV8RAefhMUaY/Mj7yVVjtR tPyy3tWx0dpNfBmU3hLQCJY43IrJkmJp6GNqokFvhgOXMoq1rjQ= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:55 2024 by rpki-client on console-fra.rpki-client.org