$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bx-Nr7KiHgpRh8mERlyfipZPx0I.roa File: bx-Nr7KiHgpRh8mERlyfipZPx0I.roa (raw, json) Hash identifier: LBxKt3onX9jlSo/d6WOMIMk547fhPDlYr91Bp7RgLqc= Subject key identifier: 6F:1F:8D:AF:B2:A2:1E:0A:51:87:C9:84:46:5C:9F:8A:96:4F:C7:42 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 21AA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bx-Nr7KiHgpRh8mERlyfipZPx0I.roa Signing time: Mon 26 Aug 2024 05:33:13 +0000 ROA not before: Mon 26 Aug 2024 05:33:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8618 (0x21aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6F1F8DAFB2A21E0A5187C984465C9F8A964FC742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:ff:bc:d8:7d:21:24:bb:05:5a:20:c7:13: ae:20:ae:11:64:00:2c:bf:4c:ce:88:33:e6:bd:3a: 24:c4:0f:75:70:f0:33:49:b8:f4:20:2e:e9:89:95: 40:8a:ba:bd:79:2b:d6:11:bf:a6:b5:72:3e:ff:8f: 07:13:55:ea:8c:f3:70:04:c3:28:03:61:33:23:d8: f3:a4:1b:3d:d5:07:49:18:0a:01:c2:69:6e:de:06: 01:20:d3:a7:0d:59:3b:89:83:75:4e:93:f1:83:fa: 96:4c:4b:e1:26:95:c5:75:b9:8a:9d:cc:b9:29:ae: 54:6f:dd:80:8e:84:61:69:1b:81:9d:1e:19:0e:b6: 82:06:3b:d9:74:76:3f:0d:95:88:da:ee:2e:fd:36: a5:1d:37:42:e4:16:4a:d0:c7:cc:e2:f9:4a:3b:b0: 5b:99:3c:31:42:2b:bc:a7:5a:e9:8f:34:86:2f:e1: 88:6d:0d:aa:0e:34:88:36:f4:45:d1:2b:8e:54:b2: f3:bc:ef:cd:4d:ab:ac:37:0f:9a:e2:02:5d:a2:6e: 5d:37:61:a0:7f:cf:21:9a:ff:8c:8c:1f:c1:49:c5: 21:7b:e5:c6:c8:a8:d7:59:a2:35:53:e0:c7:1a:08: 97:a7:51:5a:00:13:91:92:a5:41:26:b7:33:ae:38: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1F:8D:AF:B2:A2:1E:0A:51:87:C9:84:46:5C:9F:8A:96:4F:C7:42 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bx-Nr7KiHgpRh8mERlyfipZPx0I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.240.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:73:7d:86:2f:96:65:67:e7:4b:4a:a8:b5:8f:61:23:26:3e: eb:aa:e2:f1:d2:c5:a6:c5:64:c9:1e:bf:02:4b:b0:eb:0c:11: fa:57:6e:f3:7e:2c:bb:e2:75:6d:ef:3a:1f:e1:7a:7d:5e:2b: 5d:cd:4f:0a:0f:83:94:c3:8c:12:2a:35:0f:f8:25:86:9d:33: c3:6e:50:84:c7:64:fb:0c:fa:12:32:7c:eb:65:1b:8f:ef:a3: f9:99:75:8f:6c:1d:fb:fd:27:43:7d:a7:0c:ee:8e:7f:d9:d5: ce:c3:e8:ed:6c:88:8d:f6:ed:78:b3:75:a4:b5:5c:2e:9e:fb: bb:8f:fd:69:42:cc:fb:a6:31:28:66:5b:ab:e1:ef:6f:03:ef: 28:eb:11:32:db:f1:8d:01:64:6e:f9:4a:02:d5:b4:b0:fb:fc: 8f:aa:0e:c4:9d:8d:c7:a6:36:d6:6d:d9:4b:8a:df:ec:48:4b: 89:b4:ef:5e:43:c0:51:77:1c:85:c5:f9:0f:35:41:43:5a:5d: d5:22:56:fd:77:59:54:70:6a:b2:72:a8:65:50:cb:5f:d0:5d: 4a:1d:9f:b3:33:6b:53:53:69:8a:07:8a:e6:ae:b9:08:2f:3a: 96:c4:11:1f:e3:37:17:9d:01:7f:6f:17:10:54:66:1f:3c:a7: 38:ea:05:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGMUY4REFGQjJBMjFF MEE1MTg3Qzk4NDQ2NUM5RjhBOTY0RkM3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTsP+82H0hJLsFWiDHE64grhFkACy/TM6IM+a9OiTED3Vw8DNJ uPQgLumJlUCKur15K9YRv6a1cj7/jwcTVeqM83AEwygDYTMj2POkGz3VB0kYCgHC aW7eBgEg06cNWTuJg3VOk/GD+pZMS+EmlcV1uYqdzLkprlRv3YCOhGFpG4GdHhkO toIGO9l0dj8NlYja7i79NqUdN0LkFkrQx8zi+Uo7sFuZPDFCK7ynWumPNIYv4Yht DaoONIg29EXRK45UsvO8781Nq6w3D5riAl2ibl03YaB/zyGa/4yMH8FJxSF75cbI qNdZojVT4McaCJenUVoAE5GSpUEmtzOuOK4nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbx+Nr7KiHgpRh8mERlyfipZPx0IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2J4LU5yN0tpSGdwUmg4bUVS bHlmaXBaUHgwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nvAwDQYJKoZIhvcNAQELBQADggEBAGpzfYYvlmVn50tKqLWPYSMmPuuq4vHSxabF ZMkevwJLsOsMEfpXbvN+LLvidW3vOh/hen1eK13NTwoPg5TDjBIqNQ/4JYadM8Nu UITHZPsM+hIyfOtlG4/vo/mZdY9sHfv9J0N9pwzujn/Z1c7D6O1siI327XizdaS1 XC6e+7uP/WlCzPumMShmW6vh728D7yjrETLb8Y0BZG75SgLVtLD7/I+qDsSdjcem NtZt2UuK3+xIS4m0715DwFF3HIXF+Q81QUNaXdUiVv13WVRwarJyqGVQy1/QXUod n7Mza1NTaYoHiuauuQgvOpbEER/jNxedAX9vFxBUZh88pzjqBbA= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org