$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z_q-7TUots70BSWIefNga9zrBwA.roa File: Z_q-7TUots70BSWIefNga9zrBwA.roa (raw, json) Hash identifier: fiRwjlWTGRc3BBgfmit47rKqF+Z+hZYyUH/v0rEmgIg= Subject key identifier: 67:FA:BE:ED:35:28:B6:CE:F4:05:25:88:79:F3:60:6B:DC:EB:07:00 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21B2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z_q-7TUots70BSWIefNga9zrBwA.roa Signing time: Mon 26 Aug 2024 05:33:15 +0000 ROA not before: Mon 26 Aug 2024 05:33:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8626 (0x21b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=67FABEED3528B6CEF405258879F3606BDCEB0700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:c4:f8:35:7f:fd:7d:98:ec:82:27:c9:f4: 23:55:0e:5a:a0:81:48:50:b2:85:5f:4a:2f:93:11: 33:72:e2:de:03:f8:a2:05:29:96:52:0a:6f:98:40: 17:d7:58:75:20:b6:7e:df:8d:fc:bf:8e:46:e4:e5: e9:45:ab:4d:86:87:d9:07:4b:0a:b2:02:ef:14:5d: 3e:6b:91:0d:fb:05:40:7b:a9:bc:b3:90:9d:02:2d: a8:d4:58:ed:89:40:65:6f:c9:96:90:41:f7:82:fb: 74:29:2d:2e:ec:b1:80:e6:18:61:8f:b5:06:9e:68: 7f:02:2c:dd:d3:58:15:ed:02:66:05:99:dc:15:fe: 7f:6a:d1:88:56:a9:50:31:27:82:44:c2:c2:0d:e2: 86:a5:92:a3:29:bb:be:a3:fa:60:f5:48:68:e9:ca: 31:14:95:2a:6b:1c:8f:65:66:51:97:27:d2:40:6b: 0f:ad:e9:c2:cf:c0:d5:13:e3:26:fe:07:f0:10:3d: ca:b3:be:d3:3d:07:e8:27:f0:c4:ab:7e:9e:fc:23: a0:35:1e:a9:46:51:5d:08:6e:74:19:a9:73:b6:39: 08:44:cd:48:30:be:8b:62:d8:cc:1a:84:12:c8:f2: cb:32:40:05:e2:09:c8:9e:96:a3:d7:e1:b5:14:6d: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FA:BE:ED:35:28:B6:CE:F4:05:25:88:79:F3:60:6B:DC:EB:07:00 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z_q-7TUots70BSWIefNga9zrBwA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.120.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:98:a7:28:66:d6:81:6c:8d:e6:43:14:17:00:80:c2:a8:95: 3a:28:68:ac:eb:e9:7e:10:78:84:04:e9:31:c0:53:63:94:8d: 6d:7e:de:82:58:8d:dc:dd:a1:af:59:18:ab:0b:ef:ae:8f:ea: 6f:7d:aa:2a:bc:9e:0a:b7:6d:48:25:35:92:cc:d3:16:45:57: c3:0f:a3:de:26:35:9a:6b:9b:28:a8:66:ae:4c:62:b3:50:a7: 0a:14:bb:76:d7:86:94:db:48:95:e7:c7:ba:5a:0f:54:f5:47: c1:66:3e:3a:e9:70:76:c4:2c:c1:d3:a5:94:b3:ff:00:9a:79: 81:45:fe:fc:97:e7:6c:b7:93:74:01:c4:ca:c0:17:70:bb:4f: 75:2d:9d:29:49:c3:75:66:06:94:7d:e1:bd:81:84:1c:7f:51: 09:61:83:22:ca:e5:e0:bd:ca:ff:44:6d:89:79:9d:2d:7b:1f: c1:2f:1d:e4:ba:a1:b0:7f:66:de:36:50:f2:eb:ce:e5:98:0d: dc:24:ec:ea:0e:68:58:a4:ee:29:dc:de:b9:6f:f8:5c:02:3b: 59:ca:80:f2:59:12:5b:9a:e4:52:e5:76:14:3f:5e:32:3e:fe: 5f:e0:da:91:46:4e:62:ad:2e:71:5d:a9:ed:fc:f5:d1:51:01: cf:8b:bd:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3RkFCRUVEMzUyOEI2 Q0VGNDA1MjU4ODc5RjM2MDZCRENFQjA3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOzsT4NX/9fZjsgifJ9CNVDlqggUhQsoVfSi+TETNy4t4D+KIF KZZSCm+YQBfXWHUgtn7fjfy/jkbk5elFq02Gh9kHSwqyAu8UXT5rkQ37BUB7qbyz kJ0CLajUWO2JQGVvyZaQQfeC+3QpLS7ssYDmGGGPtQaeaH8CLN3TWBXtAmYFmdwV /n9q0YhWqVAxJ4JEwsIN4oalkqMpu76j+mD1SGjpyjEUlSprHI9lZlGXJ9JAaw+t 6cLPwNUT4yb+B/AQPcqzvtM9B+gn8MSrfp78I6A1HqlGUV0IbnQZqXO2OQhEzUgw voti2MwahBLI8ssyQAXiCcielqPX4bUUbdrJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZ/q+7TUots70BSWIefNga9zrBwAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1pfcS03VFVvdHM3MEJTV0ll Zk5nYTl6ckJ3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nngwDQYJKoZIhvcNAQELBQADggEBAG6Ypyhm1oFsjeZDFBcAgMKolTooaKzr6X4Q eIQE6THAU2OUjW1+3oJYjdzdoa9ZGKsL766P6m99qiq8ngq3bUglNZLM0xZFV8MP o94mNZprmyioZq5MYrNQpwoUu3bXhpTbSJXnx7paD1T1R8FmPjrpcHbELMHTpZSz /wCaeYFF/vyX52y3k3QBxMrAF3C7T3UtnSlJw3VmBpR94b2BhBx/UQlhgyLK5eC9 yv9EbYl5nS17H8EvHeS6obB/Zt42UPLrzuWYDdwk7OoOaFik7inc3rlv+FwCO1nK gPJZElua5FLldhQ/XjI+/l/g2pFGTmKtLnFdqe389dFRAc+LvcQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org