$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uTlj_bYnkbNbMQOM7w7ejNTAZLQ.roa File: uTlj_bYnkbNbMQOM7w7ejNTAZLQ.roa (raw, json) Hash identifier: FQAsFGJag3Bprk9LvnsmzymS/RMB9X2KRud2RMBNI3E= Subject key identifier: B9:39:63:FD:B6:27:91:B3:5B:31:03:8C:EF:0E:DE:8C:D4:C0:64:B4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 227E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uTlj_bYnkbNbMQOM7w7ejNTAZLQ.roa Signing time: Mon 26 Aug 2024 05:34:03 +0000 ROA not before: Mon 26 Aug 2024 05:34:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 49.158.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8830 (0x227e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B93963FDB62791B35B31038CEF0EDE8CD4C064B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:a0:56:2c:3a:16:d7:0d:d9:c9:d5:86:71: 0c:44:2e:36:ab:56:f0:0e:23:24:52:f2:04:f4:31: a0:62:ad:db:58:df:41:8c:5a:26:76:bb:98:bf:e8: 95:fe:f0:fe:db:37:d8:ae:2d:05:46:85:f7:2c:fc: 67:92:f7:db:dc:58:14:bb:5e:f3:1b:9e:61:05:44: 86:10:73:ea:96:43:c4:c8:3d:c5:2e:29:cd:c1:1a: 8b:6d:e8:2c:2d:e3:a9:01:b8:96:eb:cb:9d:52:d0: a9:66:0e:ab:c0:48:b9:db:c1:23:85:87:82:06:8e: 95:6b:3a:1e:3a:f3:97:11:90:6a:ef:69:8a:92:fb: d9:63:c7:c4:a5:77:a5:60:52:f6:0b:03:a6:a4:d0: 29:b3:f6:2f:29:8c:2c:6c:2a:7f:8a:32:86:f4:1c: 86:b5:88:71:9b:f0:3c:e4:96:5c:5d:c0:0d:fc:44: 9f:80:df:c9:ee:dd:3a:9c:20:89:8b:fc:c4:1d:69: 94:b5:8c:08:e7:dd:5d:9e:a6:9e:81:46:6c:87:4d: cc:6b:99:36:0d:68:0f:db:50:43:b9:54:fe:0b:0e: 54:e7:c2:4f:18:1d:9b:e0:e6:c9:ce:17:60:7c:e6: e4:35:73:bd:38:18:10:d6:f8:ca:d0:a8:28:17:e2: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:39:63:FD:B6:27:91:B3:5B:31:03:8C:EF:0E:DE:8C:D4:C0:64:B4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uTlj_bYnkbNbMQOM7w7ejNTAZLQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.220.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:c3:14:62:c4:8a:33:c4:b1:e4:f9:e4:31:db:02:1d:23:46: 20:be:70:c2:84:ca:cd:c4:b3:75:cd:98:36:fd:a3:38:9f:0d: 2e:59:fb:94:73:26:d2:54:87:d0:07:6d:55:e4:26:e9:fc:66: bc:2d:f0:3d:e2:e2:bc:a0:1b:08:7b:b1:c2:f8:91:48:8f:25: 07:f6:d8:6f:49:34:0a:df:03:16:f7:30:ec:c8:c8:a3:70:a9: 05:e4:0e:4c:37:b7:b8:ea:2f:07:46:b2:36:0c:49:6b:08:03: 5c:92:65:a7:64:c0:b8:d8:fb:ee:f7:33:99:95:1f:55:b7:af: e3:db:65:16:9c:34:2f:2d:12:5e:64:80:be:83:12:51:c3:b9: dd:56:07:b8:7c:3f:4c:d2:02:0a:34:3a:24:38:14:c3:94:a5: 20:9d:c1:8f:75:15:9b:f0:eb:00:f3:62:41:5e:ae:19:dc:93: 33:c3:ca:aa:60:78:9b:f4:18:c1:7a:77:a8:ed:73:7d:70:a8: c8:a8:16:b2:8b:26:7f:3c:62:60:35:d2:50:70:52:3c:32:b2: c9:46:c3:45:e1:b0:01:45:c2:61:f3:10:50:f3:44:d0:6b:2a: 0f:24:2c:f3:0f:cc:b9:82:f3:22:68:d4:65:81:4c:d6:b7:e8: 01:49:66:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI5Mzk2M0ZEQjYyNzkx QjM1QjMxMDM4Q0VGMEVERThDRDRDMDY0QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2UaBWLDoW1w3ZydWGcQxELjarVvAOIyRS8gT0MaBirdtY30GM WiZ2u5i/6JX+8P7bN9iuLQVGhfcs/GeS99vcWBS7XvMbnmEFRIYQc+qWQ8TIPcUu Kc3BGott6Cwt46kBuJbry51S0KlmDqvASLnbwSOFh4IGjpVrOh4685cRkGrvaYqS +9ljx8Sld6VgUvYLA6ak0Cmz9i8pjCxsKn+KMob0HIa1iHGb8DzkllxdwA38RJ+A 38nu3TqcIImL/MQdaZS1jAjn3V2epp6BRmyHTcxrmTYNaA/bUEO5VP4LDlTnwk8Y HZvg5snOF2B85uQ1c704GBDW+MrQqCgX4iIjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuTlj/bYnkbNbMQOM7w7ejNTAZLQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VUbGpfYllua2JOYk1RT003 dzdlak5UQVpMUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx ntwwDQYJKoZIhvcNAQELBQADggEBAEzDFGLEijPEseT55DHbAh0jRiC+cMKEys3E s3XNmDb9ozifDS5Z+5RzJtJUh9AHbVXkJun8Zrwt8D3i4rygGwh7scL4kUiPJQf2 2G9JNArfAxb3MOzIyKNwqQXkDkw3t7jqLwdGsjYMSWsIA1ySZadkwLjY++73M5mV H1W3r+PbZRacNC8tEl5kgL6DElHDud1WB7h8P0zSAgo0OiQ4FMOUpSCdwY91FZvw 6wDzYkFerhnckzPDyqpgeJv0GMF6d6jtc31wqMioFrKLJn88YmA10lBwUjwysslG w0XhsAFFwmHzEFDzRNBrKg8kLPMPzLmC8yJo1GWBTNa36AFJZg4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org