$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dxFWjJsRO5VK9wrbf11zQV2iC7I.roa File: dxFWjJsRO5VK9wrbf11zQV2iC7I.roa (raw, json) Hash identifier: 9CYJMhjHxmfB6YU2i2yY1ZYuY6wLMQTXslOlmI+H9ps= Subject key identifier: 77:11:56:8C:9B:11:3B:95:4A:F7:0A:DB:7F:5D:73:41:5D:A2:0B:B2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 224A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dxFWjJsRO5VK9wrbf11zQV2iC7I.roa Signing time: Mon 26 Aug 2024 05:33:51 +0000 ROA not before: Mon 26 Aug 2024 05:33:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8778 (0x224a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7711568C9B113B954AF70ADB7F5D73415DA20BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:d2:31:b9:a1:84:af:7e:76:a6:ae:ed:ce: 88:3e:f2:97:d9:4a:7e:8d:1f:09:75:65:d1:1a:f6: 61:a0:99:a3:5e:18:c7:23:0c:a0:7a:4d:16:93:af: 8a:56:e9:27:c4:6a:54:99:83:a5:25:58:6d:df:c6: 7c:cf:1b:22:7e:1d:f3:68:e1:14:11:c1:2a:82:42: 47:41:5f:5e:8b:cd:a8:86:d3:eb:61:1a:93:76:a2: 8b:73:f7:69:eb:68:0e:e3:1e:43:4a:92:4c:02:0b: 11:d2:a3:99:44:e8:4a:e1:59:53:cf:28:ed:e2:f6: be:37:65:b1:11:05:6a:a0:d5:0a:72:46:e5:d7:80: 33:2d:83:27:b1:17:ac:b8:d1:3c:e7:78:0a:4b:3d: dc:fe:cf:68:1a:d6:28:28:02:7b:93:88:26:2c:c7: 22:6d:7e:64:b9:ac:e1:f8:c9:75:86:54:77:91:cd: c9:e5:8a:05:7b:84:cb:f5:70:4a:4e:00:b8:08:cc: 7f:61:56:45:87:63:82:08:c9:1f:f5:32:01:c2:6a: 73:9a:af:53:74:1b:5a:bf:13:af:48:4a:11:b6:1a: 60:b5:02:7b:6e:cb:5e:dd:3a:ea:af:87:37:b7:7d: b0:39:24:9b:48:41:63:8d:3d:9b:04:19:02:fa:d0: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:11:56:8C:9B:11:3B:95:4A:F7:0A:DB:7F:5D:73:41:5D:A2:0B:B2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dxFWjJsRO5VK9wrbf11zQV2iC7I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/15 Signature Algorithm: sha256WithRSAEncryption 27:05:63:00:eb:4a:76:e3:66:bf:9d:42:6a:f8:f9:e2:44:80: 85:5e:f4:18:6b:17:a0:01:2a:46:ec:1f:83:e3:2e:a8:37:00: 6c:7f:9f:ea:7a:40:7a:35:b9:e4:a8:e1:67:f0:a3:b9:e5:7d: b2:17:3e:93:81:a3:eb:d7:39:4c:62:d5:a9:2e:30:10:f8:9d: b6:9f:99:fd:55:c4:ce:9d:81:a5:68:eb:3b:75:15:13:f0:61: 0a:68:1a:64:8e:b0:92:43:d9:fe:48:50:aa:e0:56:97:78:a7: af:f4:d0:7c:e4:09:c7:a5:6f:88:f0:9f:61:23:57:82:f0:02: 79:4f:6c:b5:ea:78:86:0d:44:51:78:63:aa:2a:89:2c:59:a2: d7:ef:bf:eb:1f:50:c0:f0:9f:dc:3b:06:e2:e3:7e:8f:2e:4b: 49:d1:44:51:af:df:77:2c:bf:21:a7:8e:81:86:05:ab:62:48: 8f:dd:ec:a0:9c:71:a7:59:74:92:1e:5c:20:6b:7f:eb:f2:ce: 06:37:f6:02:aa:c1:1a:4e:ce:b4:70:e1:64:1b:c0:a3:8a:8f: 53:92:da:0c:06:22:46:00:09:29:eb:e8:5c:76:11:01:31:cc: 83:2a:26:29:13:bb:c0:19:6e:a1:b6:4a:87:9a:8c:9a:03:8f: 00:ce:f2:c6 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICIkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3MTE1NjhDOUIxMTNC OTU0QUY3MEFEQjdGNUQ3MzQxNURBMjBCQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtftIxuaGEr352pq7tzog+8pfZSn6NHwl1ZdEa9mGgmaNeGMcj DKB6TRaTr4pW6SfEalSZg6UlWG3fxnzPGyJ+HfNo4RQRwSqCQkdBX16LzaiG0+th GpN2ootz92nraA7jHkNKkkwCCxHSo5lE6ErhWVPPKO3i9r43ZbERBWqg1QpyRuXX gDMtgyexF6y40TzneApLPdz+z2ga1igoAnuTiCYsxyJtfmS5rOH4yXWGVHeRzcnl igV7hMv1cEpOALgIzH9hVkWHY4IIyR/1MgHCanOar1N0G1q/E69IShG2GmC1Antu y17dOuqvhze3fbA5JJtIQWONPZsEGQL60OSzAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUdxFWjJsRO5VK9wrbf11zQV2iC7IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2R4RldqSnNSTzVWSzl3cmJm MTF6UVYyaUM3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEx njANBgkqhkiG9w0BAQsFAAOCAQEAJwVjAOtKduNmv51Cavj54kSAhV70GGsXoAEq Ruwfg+MuqDcAbH+f6npAejW55KjhZ/CjueV9shc+k4Gj69c5TGLVqS4wEPidtp+Z /VXEzp2BpWjrO3UVE/BhCmgaZI6wkkPZ/khQquBWl3inr/TQfOQJx6VviPCfYSNX gvACeU9step4hg1EUXhjqiqJLFmi1++/6x9QwPCf3DsG4uN+jy5LSdFEUa/fdyy/ IaeOgYYFq2JIj93soJxxp1l0kh5cIGt/6/LOBjf2AqrBGk7OtHDhZBvAo4qPU5La DAYiRgAJKevoXHYRATHMgyomKRO7wBluobZKh5qMmgOPAM7yxg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org