$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4nUuh6Y61ZzKfETi8aa4tq4P5uk.roa File: 4nUuh6Y61ZzKfETi8aa4tq4P5uk.roa (raw, json) Hash identifier: iFGBdeI/BP6us+VQ3ZQUjnMMImHI1uVJZj6vHqr17l8= Subject key identifier: E2:75:2E:87:A6:3A:D5:9C:CA:7C:44:E2:F1:A6:B8:B6:AE:0F:E6:E9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E10 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4nUuh6Y61ZzKfETi8aa4tq4P5uk.roa Signing time: Fri 01 Sep 2023 10:15:37 +0000 ROA not before: Fri 01 Sep 2023 10:15:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7696 (0x1e10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E2752E87A63AD59CCA7C44E2F1A6B8B6AE0FE6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7f:6c:12:d4:6b:e7:c0:03:45:96:a2:fc:e8: 2f:76:74:50:17:04:1b:3a:f7:f5:ba:79:68:ae:4e: 95:4e:18:3b:92:1e:01:3f:53:ff:56:35:92:b4:cf: 81:f9:96:11:9c:d2:b3:1c:30:48:5a:0b:9a:71:62: 18:07:55:b8:fd:71:f3:c4:12:fd:f3:b1:c7:e7:d8: 83:50:0a:2c:15:97:4b:53:71:07:56:e1:9c:cc:11: 49:b3:d0:19:e1:75:a0:07:52:08:59:f6:d2:d8:b7: 5a:ed:c6:1a:0d:b9:0d:ea:5a:67:e5:f6:c1:14:f4: 25:a9:3e:28:86:12:8b:61:2b:28:95:b3:ae:6b:91: b3:ca:f1:65:0e:a5:bb:bb:16:33:1a:94:b5:6b:91: 1a:47:c8:dd:32:d6:2e:b9:82:87:e0:5b:64:d6:ff: bd:c6:61:1e:5b:2d:03:2e:57:b4:e9:f6:57:f1:dc: 90:72:73:6c:25:c9:92:68:fe:b4:8e:2e:25:6c:e4: 31:7a:bf:56:7a:f3:d6:09:bb:56:75:de:37:3e:a3: 08:70:16:bb:bf:b8:94:06:09:04:3f:d0:2c:e5:13: dd:76:a0:5e:d0:74:64:a1:40:9f:af:44:5b:c4:fd: 5d:67:89:d4:59:fa:1e:b0:93:27:a2:88:4e:f8:8c: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:75:2E:87:A6:3A:D5:9C:CA:7C:44:E2:F1:A6:B8:B6:AE:0F:E6:E9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4nUuh6Y61ZzKfETi8aa4tq4P5uk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.56.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:5c:1e:5e:ec:e8:b6:1f:12:ef:b5:20:d7:aa:be:1c:22:f7: 0b:56:22:e3:cf:73:4a:66:59:bb:56:58:1d:b7:82:c9:39:f0: 5d:66:6d:b5:7c:2c:63:1c:ff:8a:9f:0b:e5:fe:fc:a8:61:94: 2f:4a:d1:f4:8d:0c:45:f8:0f:50:8c:62:6a:43:e5:23:1f:1d: c9:e7:80:2f:85:b2:e6:21:7f:db:d5:32:9f:56:22:fb:8c:44: fb:16:4a:12:b1:4f:e4:51:c6:aa:9d:94:ea:33:69:77:58:bc: b6:c9:db:a1:92:f6:1f:cb:b3:1a:07:df:02:22:f0:b8:31:0e: f3:83:8f:df:72:27:c3:51:8e:29:0a:c0:51:1c:c0:f4:dd:09: 3c:67:0b:6f:ea:f3:04:b3:e5:a9:f6:ab:c9:4d:f2:1b:ef:2e: 63:dc:67:61:0e:b3:e5:51:14:41:31:d1:d0:39:d0:52:a6:71: 25:09:64:74:41:a1:76:54:56:fb:8a:b3:c2:10:b9:65:81:91: fd:1b:27:7f:61:23:92:29:d3:eb:61:09:66:cf:a7:60:ba:76: f0:cc:a6:0f:e1:e8:8e:2f:28:5e:9d:68:7f:78:4e:42:b6:86: b3:3c:0c:53:49:17:d5:cb:71:87:b4:07:8b:52:c4:ab:bf:5a: af:4c:f7:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUyNzUyRTg3QTYzQUQ1 OUNDQTdDNDRFMkYxQTZCOEI2QUUwRkU2RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDff2wS1GvnwANFlqL86C92dFAXBBs69/W6eWiuTpVOGDuSHgE/ U/9WNZK0z4H5lhGc0rMcMEhaC5pxYhgHVbj9cfPEEv3zscfn2INQCiwVl0tTcQdW 4ZzMEUmz0BnhdaAHUghZ9tLYt1rtxhoNuQ3qWmfl9sEU9CWpPiiGEothKyiVs65r kbPK8WUOpbu7FjMalLVrkRpHyN0y1i65gofgW2TW/73GYR5bLQMuV7Tp9lfx3JBy c2wlyZJo/rSOLiVs5DF6v1Z689YJu1Z13jc+owhwFru/uJQGCQQ/0CzlE912oF7Q dGShQJ+vRFvE/V1nidRZ+h6wkyeiiE74jEc7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4nUuh6Y61ZzKfETi8aa4tq4P5ukwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRuVXVoNlk2MVp6S2ZFVGk4 YWE0dHE0UDV1ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx njgwDQYJKoZIhvcNAQELBQADggEBAC9cHl7s6LYfEu+1INeqvhwi9wtWIuPPc0pm WbtWWB23gsk58F1mbbV8LGMc/4qfC+X+/KhhlC9K0fSNDEX4D1CMYmpD5SMfHcnn gC+FsuYhf9vVMp9WIvuMRPsWShKxT+RRxqqdlOozaXdYvLbJ26GS9h/LsxoH3wIi 8LgxDvODj99yJ8NRjikKwFEcwPTdCTxnC2/q8wSz5an2q8lN8hvvLmPcZ2EOs+VR FEEx0dA50FKmcSUJZHRBoXZUVvuKs8IQuWWBkf0bJ39hI5Ip0+thCWbPp2C6dvDM pg/h6I4vKF6daH94TkK2hrM8DFNJF9XLcYe0B4tSxKu/Wq9M9y0= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org