$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7WniA1T6PYJIwvLRgjLPcSbGDeE.roa File: 7WniA1T6PYJIwvLRgjLPcSbGDeE.roa (raw, json) Hash identifier: 3jlS0xr7Qf+Rg1r3LaLLpqB1ZM7B2AcRdUNQLZaR3/Y= Subject key identifier: ED:69:E2:03:54:FA:3D:82:48:C2:F2:D1:82:32:CF:71:26:C6:0D:E1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E69 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7WniA1T6PYJIwvLRgjLPcSbGDeE.roa Signing time: Fri 01 Sep 2023 10:16:01 +0000 ROA not before: Fri 01 Sep 2023 10:16:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 49.158.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7785 (0x1e69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ED69E20354FA3D8248C2F2D18232CF7126C60DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:1b:73:9d:ed:9f:13:25:23:22:57:d8:e7: 77:84:e9:ff:2a:2e:2e:94:b8:68:b8:ab:04:17:24: 56:cf:09:49:f3:ae:11:65:ef:d6:e1:e7:1c:39:fd: 87:01:41:ad:65:4a:8d:71:d0:73:42:35:3b:9e:90: 68:a4:31:1b:12:31:bd:91:c3:12:38:50:03:a5:e6: 11:2f:89:8d:0a:35:8b:42:a3:c4:58:5b:53:eb:b1: 54:30:ae:4c:50:23:3e:4d:fb:88:c7:e5:bd:10:bc: 52:3e:a6:80:52:e8:ed:b1:a5:a1:cb:9a:40:84:fa: 7b:68:49:18:03:45:0c:c1:36:62:f8:0c:1f:6c:1a: cd:84:7a:8b:d0:5f:cd:59:5c:0d:0a:83:22:eb:99: d6:77:12:b0:bb:72:b8:61:47:00:c5:9c:95:01:1e: 21:00:ee:00:45:52:54:6e:5f:4b:d0:3e:b0:15:34: ce:d8:21:27:40:46:30:c1:6e:42:8a:d2:1b:6d:31: 2d:2f:f6:05:5a:43:31:cc:47:67:1d:fd:b5:5f:78: 29:10:78:bb:4e:35:e3:4f:f4:0a:15:51:04:a4:22: 17:9e:c8:d0:e1:88:ff:9d:9e:e8:23:81:16:53:ec: 45:e1:4b:09:b6:70:5c:0f:a7:5b:d3:46:49:78:89: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:69:E2:03:54:FA:3D:82:48:C2:F2:D1:82:32:CF:71:26:C6:0D:E1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7WniA1T6PYJIwvLRgjLPcSbGDeE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.220.0/22 Signature Algorithm: sha256WithRSAEncryption 93:0c:9e:3e:5a:90:c1:82:16:8d:c6:97:ca:5e:df:d6:1a:b1: 8f:0e:6b:29:15:9f:1c:67:77:91:bc:95:1f:c0:d8:b1:e3:6e: 53:83:ab:fc:b9:0e:18:8b:e6:c2:7e:64:ff:66:b5:48:3f:f3: 70:da:cc:8f:37:31:89:88:48:c9:d2:c2:a0:93:51:9e:e0:2b: f8:68:fa:db:b8:17:63:f5:d9:4d:bf:39:f6:64:04:a2:62:4c: b6:be:df:f3:96:74:d1:b1:38:f6:5e:a7:82:6f:18:b4:7d:60: dc:62:2b:c3:38:6e:59:e5:36:73:1b:e7:70:e4:f5:b8:c4:c7: 39:bc:e5:2b:29:b0:f1:e7:d2:2c:ec:15:7e:03:31:85:3a:d8: 55:fa:d9:e3:56:9f:e2:58:ab:2d:27:a0:d7:40:bb:f9:03:23: b3:d4:d9:e6:a3:2a:88:2b:61:fb:d5:ed:a4:68:2b:7b:08:b5: 6a:5c:b9:8f:34:db:6b:dd:8e:11:2a:69:5f:8b:e7:e6:d4:91: a9:f5:03:f3:c6:27:35:4c:4a:38:a9:d5:31:0c:3f:82:bd:33: 9e:0f:33:b2:be:ed:2c:25:88:87:3d:e4:bd:b4:4e:06:0f:b3: c5:82:b2:7e:17:fe:fd:80:7b:ae:bf:da:c7:6e:5b:bf:64:28: 9f:8a:aa:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVENjlFMjAzNTRGQTNE ODI0OEMyRjJEMTgyMzJDRjcxMjZDNjBERTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmkRtzne2fEyUjIlfY53eE6f8qLi6UuGi4qwQXJFbPCUnzrhFl 79bh5xw5/YcBQa1lSo1x0HNCNTuekGikMRsSMb2RwxI4UAOl5hEviY0KNYtCo8RY W1PrsVQwrkxQIz5N+4jH5b0QvFI+poBS6O2xpaHLmkCE+ntoSRgDRQzBNmL4DB9s Gs2EeovQX81ZXA0KgyLrmdZ3ErC7crhhRwDFnJUBHiEA7gBFUlRuX0vQPrAVNM7Y ISdARjDBbkKK0httMS0v9gVaQzHMR2cd/bVfeCkQeLtONeNP9AoVUQSkIheeyNDh iP+dnugjgRZT7EXhSwm2cFwPp1vTRkl4iZQpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7WniA1T6PYJIwvLRgjLPcSbGDeEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdXbmlBMVQ2UFlKSXd2TFJn akxQY1NiR0RlRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx ntwwDQYJKoZIhvcNAQELBQADggEBAJMMnj5akMGCFo3Gl8pe39YasY8OaykVnxxn d5G8lR/A2LHjblODq/y5DhiL5sJ+ZP9mtUg/83DazI83MYmISMnSwqCTUZ7gK/ho +tu4F2P12U2/OfZkBKJiTLa+3/OWdNGxOPZep4JvGLR9YNxiK8M4blnlNnMb53Dk 9bjExzm85SspsPHn0izsFX4DMYU62FX62eNWn+JYqy0noNdAu/kDI7PU2eajKogr YfvV7aRoK3sItWpcuY8022vdjhEqaV+L5+bUkan1A/PGJzVMSjip1TEMP4K9M54P M7K+7SwliIc95L20TgYPs8WCsn4X/v2Ae66/2sduW79kKJ+KquQ= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org