$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c8nL7pRcuCc56piT12-CbrDjYbQ.roa File: c8nL7pRcuCc56piT12-CbrDjYbQ.roa (raw, json) Hash identifier: WqEnL2DW+p4X2uBBT6w1+0nlJ3XavDPMETwm3PavmIY= Subject key identifier: 73:C9:CB:EE:94:5C:B8:27:39:EA:98:93:D7:6F:82:6E:B0:E3:61:B4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22B2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c8nL7pRcuCc56piT12-CbrDjYbQ.roa Signing time: Mon 26 Aug 2024 05:34:16 +0000 ROA not before: Mon 26 Aug 2024 05:34:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8882 (0x22b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=73C9CBEE945CB82739EA9893D76F826EB0E361B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:11:6c:6e:46:5a:a2:8d:f7:07:8d:63:27: ff:16:c8:ed:f2:ac:b4:81:02:f9:7c:dc:5d:b6:7d: 87:56:45:29:b4:d1:af:a8:d7:59:cf:d7:ca:bc:67: 7f:2b:aa:1a:63:fd:20:fb:67:90:5a:c3:d8:b9:ae: 9f:5b:ed:8f:d0:d0:c1:22:ec:9a:8d:eb:f6:ae:36: 19:d1:d9:24:ef:8e:19:a5:f2:15:29:89:04:dd:da: 2f:5b:35:38:d8:38:a4:8f:b4:5b:83:68:62:10:88: ee:f3:dc:96:14:fd:1d:33:b0:36:12:26:7b:3b:ca: 94:1d:e0:86:2b:95:0c:8a:41:4d:fa:11:08:80:ce: a4:45:74:bd:30:10:43:4a:ca:a4:04:88:18:f2:9b: 3d:e9:36:c8:be:25:42:59:5c:9c:89:10:ae:a0:ed: 44:71:87:74:0d:89:39:ca:32:7a:da:87:3a:c6:29: 88:20:e9:71:a1:e9:ef:83:e8:ad:2c:ee:bd:d4:32: 11:9b:08:d1:89:9d:d4:21:e9:98:79:6f:7c:4f:64: 45:fd:3a:9b:80:57:e8:cf:09:3c:52:2d:f3:f6:dc: 46:80:39:d7:73:9e:35:24:68:97:f5:25:29:e4:5e: 8e:18:0f:89:37:75:75:d5:72:dc:e9:1a:d7:7b:d8: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C9:CB:EE:94:5C:B8:27:39:EA:98:93:D7:6F:82:6E:B0:E3:61:B4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c8nL7pRcuCc56piT12-CbrDjYbQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:e3:fd:f9:ac:8b:15:e5:08:98:46:d4:96:80:89:95:1f:f0: 9d:48:f6:1f:89:0b:ab:1d:c4:38:47:65:89:7a:0c:9d:0b:d8: c3:77:0f:24:e3:d8:68:67:2c:94:e0:31:90:19:fa:55:40:45: 4f:44:d6:c5:e3:5d:84:77:73:cd:d2:b9:b4:96:9d:5f:37:b4: 9e:b4:d7:ea:e4:0d:14:f7:c0:0b:31:71:06:1f:6f:8d:6c:7d: 28:a2:7b:9c:04:ef:c7:ad:96:e2:53:5a:ad:5e:a7:41:f9:5d: 97:d1:03:37:54:b3:88:fa:2c:13:2d:37:4b:93:5e:28:e9:e3: fc:40:0b:cf:e3:87:2e:82:69:eb:1c:11:b1:3b:f9:c3:37:fa: 34:56:08:04:8a:98:a9:3b:5d:cd:7a:70:fc:80:25:49:47:86: 36:5b:27:15:39:0e:c7:95:84:2d:eb:23:c2:60:1d:82:b3:44: a8:ad:98:ac:43:10:02:04:5f:e4:cd:39:a5:fc:f9:6c:40:ae: 45:bc:b2:2a:cb:65:39:e3:79:2f:33:77:d0:ab:b2:20:af:b5: f5:a3:5d:43:ef:32:2c:88:fc:4e:c0:71:0d:b6:53:61:5c:de: 50:cf:53:84:8a:71:88:02:aa:f8:45:76:2f:72:17:e4:a8:0a: 6e:8f:79:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIrIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDczQzlDQkVFOTQ1Q0I4 MjczOUVBOTg5M0Q3NkY4MjZFQjBFMzYxQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI1xFsbkZaoo33B41jJ/8WyO3yrLSBAvl83F22fYdWRSm00a+o 11nP18q8Z38rqhpj/SD7Z5Baw9i5rp9b7Y/Q0MEi7JqN6/auNhnR2STvjhml8hUp iQTd2i9bNTjYOKSPtFuDaGIQiO7z3JYU/R0zsDYSJns7ypQd4IYrlQyKQU36EQiA zqRFdL0wEENKyqQEiBjymz3pNsi+JUJZXJyJEK6g7URxh3QNiTnKMnrahzrGKYgg 6XGh6e+D6K0s7r3UMhGbCNGJndQh6Zh5b3xPZEX9OpuAV+jPCTxSLfP23EaAOddz njUkaJf1JSnkXo4YD4k3dXXVctzpGtd72Py/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUc8nL7pRcuCc56piT12+CbrDjYbQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2M4bkw3cFJjdUNjNTZwaVQx Mi1DYnJEalliUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUx nyAwDQYJKoZIhvcNAQELBQADggEBAF3j/fmsixXlCJhG1JaAiZUf8J1I9h+JC6sd xDhHZYl6DJ0L2MN3DyTj2GhnLJTgMZAZ+lVARU9E1sXjXYR3c83SubSWnV83tJ60 1+rkDRT3wAsxcQYfb41sfSiie5wE78etluJTWq1ep0H5XZfRAzdUs4j6LBMtN0uT Xijp4/xAC8/jhy6CaescEbE7+cM3+jRWCASKmKk7Xc16cPyAJUlHhjZbJxU5DseV hC3rI8JgHYKzRKitmKxDEAIEX+TNOaX8+WxArkW8sirLZTnjeS8zd9CrsiCvtfWj XUPvMiyI/E7AcQ22U2Fc3lDPU4SKcYgCqvhFdi9yF+SoCm6Peaw= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org