$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lw91aWt4OQn4Wi3KxF4kbe17kyg.roa File: lw91aWt4OQn4Wi3KxF4kbe17kyg.roa (raw, json) Hash identifier: voQ/lB5lDUcBaItqrmJL8D1o9kbreBtJZzmpBQ+8kFo= Subject key identifier: 97:0F:75:69:6B:78:39:09:F8:5A:2D:CA:C4:5E:24:6D:ED:7B:93:28 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2227 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lw91aWt4OQn4Wi3KxF4kbe17kyg.roa Signing time: Mon 26 Aug 2024 05:33:44 +0000 ROA not before: Mon 26 Aug 2024 05:33:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 49.158.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8743 (0x2227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=970F75696B783909F85A2DCAC45E246DED7B9328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:17:fd:1c:a3:5f:4b:ae:7c:e1:2e:f8:c4: b2:60:a4:82:a8:31:f0:1c:9c:2e:9a:c9:22:27:42: 01:a4:35:02:2d:68:e7:52:e7:0d:1b:5a:ce:fb:e0: 03:ab:ed:fc:9b:86:5f:93:5e:08:c7:cd:6e:74:68: 46:e8:df:bd:84:08:4f:b3:36:cb:a5:fb:49:91:bb: fd:fe:90:43:59:df:9d:6f:0c:63:d0:0f:5c:1a:25: ac:18:a1:32:b3:59:87:69:11:80:d8:9a:52:57:c0: 0d:9f:0b:fb:23:63:54:e8:ae:d5:bd:c5:2f:1d:da: 1b:3f:cd:fe:bb:b5:eb:0a:22:bc:99:90:0f:6c:c6: fb:c6:5b:b6:0f:05:4e:d3:11:eb:ff:c0:e2:16:40: 66:6e:b7:13:9a:26:99:37:30:b6:07:df:a2:20:1e: 27:92:70:f2:a2:28:75:06:7a:4c:14:cc:67:1a:4c: f3:fe:15:9a:e5:18:8d:4a:2c:8c:a8:a7:14:17:bb: d4:65:5e:5b:25:17:d0:7b:45:f7:a3:bd:46:40:79: 9d:99:31:66:ae:51:ee:0f:30:62:7b:2b:6c:83:8a: d3:64:9f:59:7e:56:b6:e0:79:31:87:05:ce:09:42: f2:d2:78:48:f0:64:60:2e:21:4e:e7:a0:4f:0c:e3: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:75:69:6B:78:39:09:F8:5A:2D:CA:C4:5E:24:6D:ED:7B:93:28 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lw91aWt4OQn4Wi3KxF4kbe17kyg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.144.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:00:2b:f8:b8:90:ac:35:e0:53:e0:8b:a4:4b:40:be:a6:28: b8:70:41:b8:24:bd:1d:b8:86:8a:79:69:45:b0:10:66:a6:76: 34:3b:9d:4b:f2:aa:98:73:d1:42:52:c6:f7:d1:40:39:7a:ee: 2d:95:2c:38:63:93:6b:6e:1f:11:8c:4a:1a:09:d6:89:8f:d3: 07:83:48:b6:ff:0c:3b:83:ca:62:0b:d0:28:ad:b8:f8:36:1c: ec:71:8c:d5:9d:07:be:0f:0e:0d:f0:0d:4a:c0:18:4b:d3:4a: 4e:a7:94:e9:bb:5c:d8:c7:d0:31:6b:87:a9:27:d9:fe:50:4e: 05:95:20:6e:60:7b:9b:29:23:d5:d8:68:5b:7c:2f:6d:28:3d: 80:07:7f:2c:a1:75:a0:07:5c:1b:d8:fc:58:c2:e5:47:1d:0c: 23:26:2b:f3:e9:dd:97:59:b7:76:1a:5c:5a:fd:03:2e:d2:cb: e7:29:03:35:cc:6d:13:6c:dc:62:b8:c8:39:de:30:2a:a8:99: c5:51:fc:85:9c:f6:0b:94:50:d1:fd:0d:5f:76:28:90:3c:06: 70:d3:a7:ae:e7:d2:3d:9b:93:da:0f:3b:14:09:0f:0c:fb:12: 9f:68:af:0c:c7:4b:87:88:d9:df:60:0d:ef:30:91:9d:ea:18: d7:ae:97:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3MEY3NTY5NkI3ODM5 MDlGODVBMkRDQUM0NUUyNDZERUQ3QjkzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeJhf9HKNfS6584S74xLJgpIKoMfAcnC6aySInQgGkNQItaOdS 5w0bWs774AOr7fybhl+TXgjHzW50aEbo372ECE+zNsul+0mRu/3+kENZ351vDGPQ D1waJawYoTKzWYdpEYDYmlJXwA2fC/sjY1TortW9xS8d2hs/zf67tesKIryZkA9s xvvGW7YPBU7TEev/wOIWQGZutxOaJpk3MLYH36IgHieScPKiKHUGekwUzGcaTPP+ FZrlGI1KLIyopxQXu9RlXlslF9B7RfejvUZAeZ2ZMWauUe4PMGJ7K2yDitNkn1l+ VrbgeTGHBc4JQvLSeEjwZGAuIU7noE8M46nLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlw91aWt4OQn4Wi3KxF4kbe17kygwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2x3OTFhV3Q0T1FuNFdpM0t4 RjRrYmUxN2t5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx npAwDQYJKoZIhvcNAQELBQADggEBAF4AK/i4kKw14FPgi6RLQL6mKLhwQbgkvR24 hop5aUWwEGamdjQ7nUvyqphz0UJSxvfRQDl67i2VLDhjk2tuHxGMShoJ1omP0weD SLb/DDuDymIL0CituPg2HOxxjNWdB74PDg3wDUrAGEvTSk6nlOm7XNjH0DFrh6kn 2f5QTgWVIG5ge5spI9XYaFt8L20oPYAHfyyhdaAHXBvY/FjC5UcdDCMmK/Pp3ZdZ t3YaXFr9Ay7Sy+cpAzXMbRNs3GK4yDneMCqomcVR/IWc9guUUNH9DV92KJA8BnDT p67n0j2bk9oPOxQJDwz7Ep9orwzHS4eI2d9gDe8wkZ3qGNeulzQ= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:19 2024 by rpki-client on console-fra.rpki-client.org