$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kPU6fxd5EEMvPujWcjjjCm3tl1U.roa File: kPU6fxd5EEMvPujWcjjjCm3tl1U.roa (raw, json) Hash identifier: TAT8MuYXZmtY26YPUTvdw8NLA0qbE/XCrAuea4ofMto= Subject key identifier: 90:F5:3A:7F:17:79:10:43:2F:3E:E8:D6:72:38:E3:0A:6D:ED:97:55 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22D8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kPU6fxd5EEMvPujWcjjjCm3tl1U.roa Signing time: Mon 26 Aug 2024 05:34:25 +0000 ROA not before: Mon 26 Aug 2024 05:34:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8920 (0x22d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=90F53A7F177910432F3EE8D67238E30A6DED9755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:1b:4e:97:9c:fc:90:a5:bb:ec:8f:46:03: 97:d2:b0:a3:33:0a:04:d0:17:27:bf:25:02:f0:04: d2:45:3c:23:dd:ca:bf:0b:09:63:0c:07:ac:ad:99: 13:ee:96:a2:22:7f:bb:71:4e:b8:c6:3b:41:f2:c8: cc:44:36:e4:5e:52:8b:aa:8e:75:9f:17:fe:f4:b1: f2:e7:f2:e9:37:df:bf:fa:7a:47:ba:36:bc:85:ad: c5:11:ed:36:9f:0a:2d:74:0f:d7:3a:cb:34:a2:82: eb:69:5e:ed:2e:d5:d1:9f:9d:76:3a:70:c9:6e:25: ac:cc:2e:16:a4:1b:ff:cd:23:84:42:79:bb:e7:1a: 56:5e:82:a1:02:8f:4c:ce:48:42:59:73:ed:72:a1: 12:2c:d5:c8:e7:d1:f7:9e:7f:28:2c:94:cd:bf:3c: f1:07:43:30:65:10:a8:1f:d1:d7:3d:6c:92:9b:ac: eb:9f:cd:74:c1:78:d7:8f:9c:b6:f9:b6:27:bc:eb: d2:1e:cf:89:21:f6:55:05:92:6d:61:7f:22:f5:03: 07:9c:f2:3a:fc:aa:4f:45:60:06:3b:e9:41:3d:7c: 4d:3e:83:22:32:0f:5d:65:e5:9b:8a:c2:c0:40:84: 4c:08:0d:09:a3:8e:c2:0b:5b:62:68:fa:18:22:d3: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F5:3A:7F:17:79:10:43:2F:3E:E8:D6:72:38:E3:0A:6D:ED:97:55 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kPU6fxd5EEMvPujWcjjjCm3tl1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.88.0/21 Signature Algorithm: sha256WithRSAEncryption 42:6e:e0:65:3b:dd:4d:58:01:e8:cb:84:a0:a3:29:49:4f:16: 30:dc:ea:25:17:dd:3f:b1:9d:3f:a5:15:5e:62:2c:27:b9:e5: 29:7d:e5:dd:2d:8b:09:64:88:eb:a9:8c:bf:f1:79:03:67:3b: 35:55:70:10:90:e1:c8:52:ba:88:90:23:50:0c:e0:0d:b7:22: 04:8a:6c:59:b6:74:62:1e:71:ea:4d:3f:3a:86:7c:53:9d:af: c1:09:8c:a1:fb:93:6d:92:a2:34:af:7c:df:e5:a5:55:5d:1a: df:1f:96:0d:5e:27:14:1e:6c:39:7d:7d:0f:f0:f6:4f:d3:a6: ca:7b:fd:0f:47:10:ed:c4:aa:b0:28:2d:30:6d:8c:aa:18:45: c3:b4:22:4d:1a:b2:9f:e4:4c:14:71:2a:63:97:68:42:28:9e: c6:85:bb:9c:ab:ad:f0:5b:e2:8f:b9:22:35:ad:2e:83:48:27: 1d:0b:04:bf:c6:50:f9:97:87:f3:df:ee:22:62:6d:7e:bd:84: 82:e1:2e:bf:c9:28:18:cd:ae:64:8e:62:bc:01:2a:17:a9:ec: 0a:72:08:dc:c8:34:75:c5:d7:9a:e8:cd:e1:6f:84:46:14:74: 33:c2:fb:a9:2d:97:9e:1e:68:0a:b8:21:18:99:c7:cd:69:f3: 3b:05:59:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICItgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwRjUzQTdGMTc3OTEw NDMyRjNFRThENjcyMzhFMzBBNkRFRDk3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW6RtOl5z8kKW77I9GA5fSsKMzCgTQFye/JQLwBNJFPCPdyr8L CWMMB6ytmRPulqIif7txTrjGO0HyyMxENuReUouqjnWfF/70sfLn8uk337/6eke6 NryFrcUR7TafCi10D9c6yzSigutpXu0u1dGfnXY6cMluJazMLhakG//NI4RCebvn GlZegqECj0zOSEJZc+1yoRIs1cjn0feefygslM2/PPEHQzBlEKgf0dc9bJKbrOuf zXTBeNePnLb5tie869Iez4kh9lUFkm1hfyL1Awec8jr8qk9FYAY76UE9fE0+gyIy D11l5ZuKwsBAhEwIDQmjjsILW2Jo+hgi04ltAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkPU6fxd5EEMvPujWcjjjCm3tl1UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tQVTZmeGQ1RUVNdlB1aldj ampqQ20zdGwxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nlgwDQYJKoZIhvcNAQELBQADggEBAEJu4GU73U1YAejLhKCjKUlPFjDc6iUX3T+x nT+lFV5iLCe55Sl95d0tiwlkiOupjL/xeQNnOzVVcBCQ4chSuoiQI1AM4A23IgSK bFm2dGIecepNPzqGfFOdr8EJjKH7k22SojSvfN/lpVVdGt8flg1eJxQebDl9fQ/w 9k/Tpsp7/Q9HEO3EqrAoLTBtjKoYRcO0Ik0asp/kTBRxKmOXaEIonsaFu5yrrfBb 4o+5IjWtLoNIJx0LBL/GUPmXh/Pf7iJibX69hILhLr/JKBjNrmSOYrwBKhep7Apy CNzINHXF15rozeFvhEYUdDPC+6ktl54eaAq4IRiZx81p8zsFWX0= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org