$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e7A-v2tfWTiQgGBXWrPiEbhcs_o.roa File: e7A-v2tfWTiQgGBXWrPiEbhcs_o.roa (raw, json) Hash identifier: yvTF2zZOKoYZFnnm4o8Cu3eH2gZ5PPBrzGZywd1wplo= Subject key identifier: 7B:B0:3E:BF:6B:5F:59:38:90:80:60:57:5A:B3:E2:11:B8:5C:B3:FA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22C4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e7A-v2tfWTiQgGBXWrPiEbhcs_o.roa Signing time: Mon 26 Aug 2024 05:34:20 +0000 ROA not before: Mon 26 Aug 2024 05:34:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8900 (0x22c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7BB03EBF6B5F5938908060575AB3E211B85CB3FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:2d:03:2c:e6:5c:d9:42:db:9c:e1:2e:ef: e8:db:a5:bd:db:47:84:db:0b:1b:41:12:34:3e:54: 3a:46:30:8a:fb:fb:eb:ea:c3:5f:ff:4e:ed:97:66: 2f:d6:f2:6d:17:f9:64:f9:58:e1:59:6e:78:aa:cd: 2f:fe:18:10:9c:06:a2:84:0e:86:25:86:4b:e8:86: f5:9b:4c:1f:17:df:b3:98:79:b8:99:52:2b:8c:34: 2d:af:01:97:46:2d:51:c1:27:b8:d2:9f:14:36:ba: ae:f8:24:a4:27:9a:8a:11:fc:6e:5d:78:28:66:23: e6:b6:e5:79:56:06:55:14:bd:7c:2a:b5:11:a5:d0: 84:69:65:fd:e6:83:45:cb:42:bb:4c:d2:48:aa:8f: 89:48:68:9e:21:3f:fa:9d:c4:d8:df:e5:fb:70:c1: cb:7e:c0:ab:aa:ef:6e:e5:7d:8c:4e:20:6c:e7:0e: 82:dd:99:b1:c5:59:67:f3:85:4b:f3:25:f2:44:95: 39:00:24:43:ce:69:29:4a:ff:1c:80:19:15:3d:01: 15:12:bc:bf:73:f4:92:06:97:32:4d:4e:3d:6e:71: cc:ce:be:f8:6b:1a:5e:4b:9c:b7:8a:41:2b:a7:ed: 93:4f:fd:37:3d:ca:38:43:47:ef:df:b4:6c:6f:5d: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B0:3E:BF:6B:5F:59:38:90:80:60:57:5A:B3:E2:11:B8:5C:B3:FA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e7A-v2tfWTiQgGBXWrPiEbhcs_o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.8.0/21 Signature Algorithm: sha256WithRSAEncryption 76:48:0a:6f:4a:0b:9a:b1:b2:5e:a3:c9:d2:af:e9:80:9b:94: 9c:7c:90:c9:32:d2:95:1a:db:47:35:60:f3:03:65:24:2c:74: c4:f0:3a:7e:aa:4c:c3:e1:d6:85:74:3f:4c:97:c6:73:40:b7: 20:2e:ad:ed:e1:65:e0:cf:fb:d7:21:b9:71:96:92:c3:a5:b7: a4:48:6d:07:70:d6:99:bc:fa:59:8e:38:53:99:0c:26:e3:a1: 0d:85:93:47:b9:7b:e0:18:49:0c:79:73:69:22:60:2b:e1:fb: 1d:a0:43:88:38:67:fd:0c:4e:9f:cb:93:76:45:90:30:c4:a8: e0:f4:b7:8d:52:5c:d6:1e:ab:9e:2b:00:46:68:01:b7:66:2d: 9c:f9:fc:a7:30:b5:5d:03:cd:04:68:45:f5:5c:d9:bf:90:a5: 25:63:c3:d1:94:4e:60:ec:82:93:4d:c4:eb:0f:ea:23:55:19: 44:6e:de:51:31:d4:bf:36:59:9e:3a:35:c0:ab:60:a6:1b:0b: d1:d4:d0:97:d5:a9:2f:a6:77:85:03:7b:28:e9:4f:c0:35:66: 50:a6:6a:e1:35:25:21:85:c9:7a:e6:f9:d6:33:b7:3b:7a:f0: 72:9c:bc:3c:85:ac:6a:df:61:de:5a:5b:fb:81:3a:a0:a5:57: b7:37:0d:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCQjAzRUJGNkI1RjU5 Mzg5MDgwNjA1NzVBQjNFMjExQjg1Q0IzRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5SC0DLOZc2ULbnOEu7+jbpb3bR4TbCxtBEjQ+VDpGMIr7++vq w1//Tu2XZi/W8m0X+WT5WOFZbniqzS/+GBCcBqKEDoYlhkvohvWbTB8X37OYebiZ UiuMNC2vAZdGLVHBJ7jSnxQ2uq74JKQnmooR/G5deChmI+a25XlWBlUUvXwqtRGl 0IRpZf3mg0XLQrtM0kiqj4lIaJ4hP/qdxNjf5ftwwct+wKuq727lfYxOIGznDoLd mbHFWWfzhUvzJfJElTkAJEPOaSlK/xyAGRU9ARUSvL9z9JIGlzJNTj1ucczOvvhr Gl5LnLeKQSun7ZNP/Tc9yjhDR+/ftGxvXde3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUe7A+v2tfWTiQgGBXWrPiEbhcs/owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2U3QS12MnRmV1RpUWdHQlhX clBpRWJoY3Nfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nwgwDQYJKoZIhvcNAQELBQADggEBAHZICm9KC5qxsl6jydKv6YCblJx8kMky0pUa 20c1YPMDZSQsdMTwOn6qTMPh1oV0P0yXxnNAtyAure3hZeDP+9chuXGWksOlt6RI bQdw1pm8+lmOOFOZDCbjoQ2Fk0e5e+AYSQx5c2kiYCvh+x2gQ4g4Z/0MTp/Lk3ZF kDDEqOD0t41SXNYeq54rAEZoAbdmLZz5/KcwtV0DzQRoRfVc2b+QpSVjw9GUTmDs gpNNxOsP6iNVGURu3lEx1L82WZ46NcCrYKYbC9HU0JfVqS+md4UDeyjpT8A1ZlCm auE1JSGFyXrm+dYztzt68HKcvDyFrGrfYd5aW/uBOqClV7c3DdI= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org