$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0PFyuh9udVBq-7zduCDbjl-gJyI.roa File: 0PFyuh9udVBq-7zduCDbjl-gJyI.roa (raw, json) Hash identifier: BQcl6kkq7OgIwR/su9+qDUuJmyAU31GpP1fc3tB17xs= Subject key identifier: D0:F1:72:BA:1F:6E:75:50:6A:FB:BC:DD:B8:20:DB:8E:5F:A0:27:22 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DE9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0PFyuh9udVBq-7zduCDbjl-gJyI.roa Signing time: Fri 01 Sep 2023 10:15:27 +0000 ROA not before: Fri 01 Sep 2023 10:15:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7657 (0x1de9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D0F172BA1F6E75506AFBBCDDB820DB8E5FA02722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:84:79:42:a9:1e:20:a8:40:bd:ff:db:24:c8: ce:28:f6:3f:8c:ed:40:62:5c:aa:ab:cc:6b:d0:bf: 7c:13:37:32:eb:d8:f2:c0:44:0e:bc:63:90:61:b7: f6:4a:5c:d9:37:45:ce:4f:41:43:c6:6e:57:41:4c: a3:9f:9e:c7:64:c7:25:ad:f8:9a:85:2f:3d:fa:9f: 23:ab:52:56:7b:a2:e5:5f:8c:6b:06:9e:be:89:fd: cc:c8:f8:a3:9f:27:bb:63:f1:ed:50:83:dd:f6:30: e4:66:5b:91:a5:2b:db:a0:d5:7d:55:7c:45:c6:7e: 51:95:91:8a:49:50:fb:39:a6:b3:84:7a:d4:2b:30: b7:10:a2:91:c3:0a:a2:e6:f2:c6:a2:42:0b:b2:c1: 79:16:62:47:ed:40:d8:12:c0:b0:8c:55:e4:d0:a6: 43:57:bb:15:d9:93:6d:7e:45:26:29:2e:35:1d:6d: 43:ab:36:fc:1f:fd:29:04:b0:e3:74:f2:d0:73:61: c8:48:9d:f9:94:3d:36:fe:ba:a2:d2:9c:a6:f1:55: c4:0b:a6:76:ac:ec:43:2d:3f:a0:3d:3c:c4:72:3f: 34:f7:15:3f:a9:f5:50:9e:d1:84:ea:94:36:6d:b6: 6f:fe:90:ce:3a:2f:42:6b:d1:43:26:01:be:ab:ce: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:72:BA:1F:6E:75:50:6A:FB:BC:DD:B8:20:DB:8E:5F:A0:27:22 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0PFyuh9udVBq-7zduCDbjl-gJyI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.24.0/21 Signature Algorithm: sha256WithRSAEncryption 40:83:80:1d:90:a4:db:b8:6e:9a:30:80:65:15:18:86:33:0b: bd:aa:88:b4:07:09:96:3d:6b:d5:b1:08:c4:f6:d8:3a:74:03: 70:fc:10:fe:b4:b2:9e:5e:59:3d:29:b9:85:b6:20:eb:73:5e: e2:7c:06:48:e9:22:c2:df:d8:8e:c4:b6:99:c2:ad:d1:79:86: a9:d0:3c:f7:64:91:2f:e5:59:47:14:4c:d8:0e:aa:2d:0a:62: 2e:f4:22:5f:41:4c:67:18:6a:a7:ee:92:c7:ef:e8:c7:af:08: 23:05:4f:dd:af:c4:33:33:81:18:fb:d4:19:6b:0b:6e:c3:73: ea:31:e4:c6:1a:0b:dc:0e:ce:aa:b0:ca:7d:83:a6:2a:2e:2a: 5f:51:3d:75:6c:8a:e7:8c:c0:b9:c5:b1:00:ea:cd:79:b4:09: 99:7b:86:77:f6:66:e4:79:f7:a0:3d:87:1e:f5:52:69:45:61: f7:35:d5:ea:c8:7b:14:85:72:10:2d:a0:8a:26:9b:1d:37:e0: 6c:0e:9f:9e:67:bc:f7:25:f9:0c:52:af:03:1c:e4:93:3b:28: 10:2a:70:52:a8:b1:e2:03:d7:41:44:27:8e:ff:1a:87:84:2d: 84:1d:7b:75:5f:aa:c0:86:09:c9:fd:2a:f8:bd:34:32:74:93: 47:5f:2b:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQwRjE3MkJBMUY2RTc1 NTA2QUZCQkNEREI4MjBEQjhFNUZBMDI3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlhHlCqR4gqEC9/9skyM4o9j+M7UBiXKqrzGvQv3wTNzLr2PLA RA68Y5Bht/ZKXNk3Rc5PQUPGbldBTKOfnsdkxyWt+JqFLz36nyOrUlZ7ouVfjGsG nr6J/czI+KOfJ7tj8e1Qg932MORmW5GlK9ug1X1VfEXGflGVkYpJUPs5prOEetQr MLcQopHDCqLm8saiQguywXkWYkftQNgSwLCMVeTQpkNXuxXZk21+RSYpLjUdbUOr Nvwf/SkEsON08tBzYchInfmUPTb+uqLSnKbxVcQLpnas7EMtP6A9PMRyPzT3FT+p 9VCe0YTqlDZttm/+kM46L0Jr0UMmAb6rzpL7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0PFyuh9udVBq+7zduCDbjl+gJyIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBQRnl1aDl1ZFZCcS03emR1 Q0RiamwtZ0p5SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nhgwDQYJKoZIhvcNAQELBQADggEBAECDgB2QpNu4bpowgGUVGIYzC72qiLQHCZY9 a9WxCMT22Dp0A3D8EP60sp5eWT0puYW2IOtzXuJ8BkjpIsLf2I7EtpnCrdF5hqnQ PPdkkS/lWUcUTNgOqi0KYi70Il9BTGcYaqfuksfv6MevCCMFT92vxDMzgRj71Blr C27Dc+ox5MYaC9wOzqqwyn2DpiouKl9RPXVsiueMwLnFsQDqzXm0CZl7hnf2ZuR5 96A9hx71UmlFYfc11erIexSFchAtoIommx034GwOn55nvPcl+QxSrwMc5JM7KBAq cFKoseID10FEJ47/GoeELYQde3VfqsCGCcn9Kvi9NDJ0k0dfK1M= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org