$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eXNCpXSRg6YjSYXAIfevwhHzN3s.roa File: eXNCpXSRg6YjSYXAIfevwhHzN3s.roa (raw, json) Hash identifier: shQ4yVNwjxuc8LCJMShfNmiSr7zWjaedJ7LUdvrSSDU= Subject key identifier: 79:73:42:A5:74:91:83:A6:23:49:85:C0:21:F7:AF:C2:11:F3:37:7B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2211 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eXNCpXSRg6YjSYXAIfevwhHzN3s.roa Signing time: Mon 26 Aug 2024 05:33:38 +0000 ROA not before: Mon 26 Aug 2024 05:33:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.159.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8721 (0x2211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=797342A5749183A6234985C021F7AFC211F3377B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:54:db:ba:e4:02:4b:45:55:ba:06:78:c2: 94:b8:86:3b:97:63:04:cb:14:0a:78:37:bb:bd:6b: c1:d4:92:44:3b:ea:6f:ed:55:79:4c:8d:05:db:d5: a2:2f:8d:bb:58:ee:cb:74:5b:19:8b:35:35:e0:72: b4:6c:fc:cb:73:27:c8:b7:ae:eb:55:bc:14:53:ef: f7:18:51:4a:75:21:3a:1b:7a:52:3e:54:81:a4:59: 35:13:99:56:ee:78:f5:1d:21:8a:9b:a5:1d:57:af: 6b:7e:12:f4:07:be:4b:3d:c5:ed:f3:f8:ea:66:84: 3d:19:f4:be:d3:3f:18:54:37:55:35:b6:07:e7:62: 17:ea:60:f4:d0:8b:f6:b6:1a:49:00:75:5f:cf:21: 9e:8b:d5:7a:98:f2:ea:dd:3b:02:06:1e:d4:60:fd: 71:16:a9:1a:6c:aa:ce:b6:af:a0:7b:2f:4b:ae:28: f2:90:0b:04:45:39:12:2f:b4:e4:b6:c1:49:cf:c9: d0:8b:d9:6e:fc:ea:e2:75:78:ec:1e:00:26:49:df: 42:5d:c1:e4:c7:7f:c6:6b:3c:46:dd:37:19:48:14: ee:d0:41:a5:44:c4:49:6c:df:d1:cc:c2:ed:cd:ac: 1f:cb:58:31:25:2d:4e:3f:70:02:ec:72:6b:e7:d7: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:73:42:A5:74:91:83:A6:23:49:85:C0:21:F7:AF:C2:11:F3:37:7B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eXNCpXSRg6YjSYXAIfevwhHzN3s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.128.0/22 Signature Algorithm: sha256WithRSAEncryption 83:6b:3c:6e:2d:31:90:05:ef:b1:54:2a:a7:06:95:e4:0a:36: c3:e1:c6:1d:88:e0:e2:ad:48:2a:e9:5e:1c:3e:4e:96:97:cc: 55:35:2d:50:8b:d7:e6:51:d3:b4:b1:10:3e:fb:d7:10:b8:91: fa:0f:95:32:5f:7f:22:28:07:aa:a6:9d:2e:93:1e:0a:d1:a7: 5f:9f:fe:bb:92:20:56:a4:c1:89:bd:4f:13:d2:2f:2f:d4:b1: ad:e1:97:1d:6e:81:23:04:2e:9e:31:05:bf:74:05:b0:5f:83: 22:92:38:33:4e:42:cf:c8:e9:02:a7:99:39:00:15:21:2d:72: 3b:b3:f2:64:37:19:49:e6:67:0a:f9:3c:38:95:d2:5c:4a:f0: db:5c:33:f7:b6:3c:99:43:82:5c:43:b0:b0:5c:38:d7:0d:28: 12:98:91:ed:68:65:a3:8f:2e:63:3c:93:ef:22:13:98:f9:07: 7d:ac:a1:1a:89:5e:71:07:c2:18:de:75:d1:40:35:bc:27:5a: a8:c0:29:1f:9b:56:11:e0:d6:41:0b:57:40:f8:cb:dc:83:1b: 4c:cb:ea:08:73:a1:f8:d9:2a:07:00:38:c4:1e:41:f9:3a:43: aa:40:89:d7:7f:85:ee:2a:ab:c5:35:dd:49:28:75:c9:88:85: 9d:68:80:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5NzM0MkE1NzQ5MTgz QTYyMzQ5ODVDMDIxRjdBRkMyMTFGMzM3N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfZFTbuuQCS0VVugZ4wpS4hjuXYwTLFAp4N7u9a8HUkkQ76m/t VXlMjQXb1aIvjbtY7st0WxmLNTXgcrRs/MtzJ8i3rutVvBRT7/cYUUp1ITobelI+ VIGkWTUTmVbuePUdIYqbpR1Xr2t+EvQHvks9xe3z+OpmhD0Z9L7TPxhUN1U1tgfn YhfqYPTQi/a2GkkAdV/PIZ6L1XqY8urdOwIGHtRg/XEWqRpsqs62r6B7L0uuKPKQ CwRFORIvtOS2wUnPydCL2W786uJ1eOweACZJ30JdweTHf8ZrPEbdNxlIFO7QQaVE xEls39HMwu3NrB/LWDElLU4/cALscmvn17YBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeXNCpXSRg6YjSYXAIfevwhHzN3swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2VYTkNwWFNSZzZZalNZWEFJ ZmV2d2hIek4zcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n4AwDQYJKoZIhvcNAQELBQADggEBAINrPG4tMZAF77FUKqcGleQKNsPhxh2I4OKt SCrpXhw+TpaXzFU1LVCL1+ZR07SxED771xC4kfoPlTJffyIoB6qmnS6THgrRp1+f /ruSIFakwYm9TxPSLy/Usa3hlx1ugSMELp4xBb90BbBfgyKSODNOQs/I6QKnmTkA FSEtcjuz8mQ3GUnmZwr5PDiV0lxK8NtcM/e2PJlDglxDsLBcONcNKBKYke1oZaOP LmM8k+8iE5j5B32soRqJXnEHwhjeddFANbwnWqjAKR+bVhHg1kELV0D4y9yDG0zL 6ghzofjZKgcAOMQeQfk6Q6pAidd/he4qq8U13UkodcmIhZ1ogEI= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:26 2024 by rpki-client on console-ams.rpki-client.org