$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yvUJfJWWu0tmSvBPmu01XLjYjOU.roa File: yvUJfJWWu0tmSvBPmu01XLjYjOU.roa (raw, json) Hash identifier: INBewHFqIwlfOlJAOYKoosX9yspx5jMgyIPmtqGK8gg= Subject key identifier: CA:F5:09:7C:95:96:BB:4B:66:4A:F0:4F:9A:ED:35:5C:B8:D8:8C:E5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 22A7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yvUJfJWWu0tmSvBPmu01XLjYjOU.roa Signing time: Mon 26 Aug 2024 05:34:13 +0000 ROA not before: Mon 26 Aug 2024 05:34:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 2407:4b00:fd01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8871 (0x22a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CAF5097C9596BB4B664AF04F9AED355CB8D88CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:48:31:7d:48:c0:14:bb:63:9f:4e:e9:97: 40:5c:ab:bc:b7:9e:c0:74:7d:88:b9:02:5c:8a:5c: 03:b9:ef:3e:58:03:ff:0a:12:cd:c5:aa:08:6a:2a: 23:cd:9c:69:2b:5d:99:16:ab:f6:f0:d8:c5:be:c8: 5e:c5:a5:6b:aa:fd:e1:64:84:8a:3e:98:77:b7:05: 6f:13:6e:65:30:80:6f:bf:29:bd:da:45:51:d7:b1: b1:91:00:56:14:0b:d5:4c:ea:4f:ca:21:65:21:02: 44:73:3d:a1:85:45:c3:1a:3b:2b:00:4b:89:c5:a8: f4:0f:82:4f:57:f5:bf:2c:a4:b3:50:00:2f:cc:46: 25:aa:0e:fe:c5:09:8a:02:e9:8a:7f:49:be:26:68: 43:45:63:d4:27:19:7c:8b:35:6c:08:e7:47:f0:57: cb:df:d6:59:28:ce:4a:e7:24:4e:8b:2c:33:d4:f6: c2:d1:0e:c3:e6:a2:4b:9f:3b:7d:75:15:2f:47:48: 43:95:10:18:ae:43:e8:e4:e8:3f:10:1d:3d:b5:25: 17:9e:c3:51:6a:42:ec:0e:f4:1d:1f:b1:d9:8d:66: 43:91:62:7c:65:b4:fd:d6:f3:20:01:c4:0b:da:54: 7e:1a:53:41:68:d9:77:f4:7a:8a:a0:3e:db:d5:a8: d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F5:09:7C:95:96:BB:4B:66:4A:F0:4F:9A:ED:35:5C:B8:D8:8C:E5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yvUJfJWWu0tmSvBPmu01XLjYjOU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00:fd01::/48 Signature Algorithm: sha256WithRSAEncryption 5e:48:33:b7:05:be:16:34:f6:a2:28:83:f7:c2:3f:eb:61:05: 61:d0:b0:e4:b8:fb:ba:1e:34:17:1e:8d:f9:6b:c2:d0:48:9b: 26:3f:1b:53:2a:ee:f3:59:21:9a:ea:06:31:6d:5d:6d:a4:2b: 4f:8c:bf:6b:25:0a:79:53:4d:cf:57:9d:52:03:83:07:5c:3d: 7d:8f:76:9c:87:e3:04:44:c9:55:50:4e:ca:76:9f:04:f9:6f: 5e:2b:52:c4:c6:f9:14:60:e6:b3:ba:96:2a:bb:fc:6f:23:ed: 3e:34:6c:80:c9:cd:45:2a:e8:24:09:79:fc:17:cd:a0:42:97: f8:d8:75:ef:cb:6a:aa:9a:45:83:65:e0:98:4b:e8:bf:14:38: 56:10:cc:81:a8:1b:12:a0:d4:d4:b0:4e:5b:ed:c1:0d:d0:be: a9:9c:09:39:93:79:28:31:70:0c:6e:df:6a:6d:61:e4:88:97: d6:b5:4f:fd:64:c7:30:e7:ff:8d:88:48:9d:f6:e1:34:74:48: 7a:79:b6:f9:e4:4b:94:f9:ec:f7:a5:4d:88:06:51:73:20:bd: 3f:41:ec:38:c4:c9:51:87:49:45:35:10:ff:7e:0c:6b:d5:ac: a6:fd:fd:02:d8:cf:17:e7:7a:71:9d:b3:ad:6f:01:c8:46:e0: d2:cb:49:3a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBRjUwOTdDOTU5NkJC NEI2NjRBRjA0RjlBRUQzNTVDQjhEODhDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP1UgxfUjAFLtjn07pl0Bcq7y3nsB0fYi5AlyKXAO57z5YA/8K Es3FqghqKiPNnGkrXZkWq/bw2MW+yF7FpWuq/eFkhIo+mHe3BW8TbmUwgG+/Kb3a RVHXsbGRAFYUC9VM6k/KIWUhAkRzPaGFRcMaOysAS4nFqPQPgk9X9b8spLNQAC/M RiWqDv7FCYoC6Yp/Sb4maENFY9QnGXyLNWwI50fwV8vf1lkozkrnJE6LLDPU9sLR DsPmokufO311FS9HSEOVEBiuQ+jk6D8QHT21JReew1FqQuwO9B0fsdmNZkORYnxl tP3W8yABxAvaVH4aU0Fo2Xf0eoqgPtvVqNDNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUyvUJfJWWu0tmSvBPmu01XLjYjOUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3l2VUpmSldXdTB0bVN2QlBt dTAxWExqWWpPVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B0sA/QEwDQYJKoZIhvcNAQELBQADggEBAF5IM7cFvhY09qIog/fCP+thBWHQsOS4 +7oeNBcejflrwtBImyY/G1Mq7vNZIZrqBjFtXW2kK0+Mv2slCnlTTc9XnVIDgwdc PX2PdpyH4wREyVVQTsp2nwT5b14rUsTG+RRg5rO6liq7/G8j7T40bIDJzUUq6CQJ efwXzaBCl/jYde/LaqqaRYNl4JhL6L8UOFYQzIGoGxKg1NSwTlvtwQ3QvqmcCTmT eSgxcAxu32ptYeSIl9a1T/1kxzDn/42ISJ324TR0SHp5tvnkS5T57PelTYgGUXMg vT9B7DjEyVGHSUU1EP9+DGvVrKb9/QLYzxfnenGds61vAchG4NLLSTo= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:27 2024 by rpki-client on console-ams.rpki-client.org