$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa File: 8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa (raw, json) Hash identifier: LnY0rYMx0qBZM0AjMDs6wqFENO6kBhBtgUp09TrsHHg= Subject key identifier: F1:3A:17:53:14:C1:01:4B:B8:1D:73:30:C4:A7:34:08:89:51:6D:02 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D5B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa Signing time: Fri 01 Sep 2023 10:14:42 +0000 ROA not before: Fri 01 Sep 2023 10:14:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7515 (0x1d5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F13A175314C1014BB81D7330C4A7340889516D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:3b:80:e5:7a:52:a4:8c:d1:6f:9f:7f:5a: d5:03:2e:4f:75:e2:7c:ad:42:ec:c4:80:19:40:51: d0:ea:5b:c8:9e:c1:4a:d7:47:a1:61:e2:51:49:4a: c0:e1:e4:c8:df:42:03:3d:49:a3:ed:65:c3:81:c8: 9e:cf:c0:64:61:ed:97:77:03:e7:00:b3:70:e1:86: 0c:6d:10:24:f2:3e:f3:44:a6:d3:77:21:6d:74:fd: cd:f2:3b:78:08:2e:1b:10:b6:20:5c:58:d0:43:81: a2:40:42:62:c7:58:15:95:d4:7f:fc:02:b4:68:4b: 7c:af:0a:74:ea:dd:a5:28:6f:f4:23:48:17:64:40: 68:18:b2:0d:60:6d:5f:13:62:31:3c:18:c7:94:b2: f2:1d:d3:cd:66:78:20:f5:bc:c1:1e:ee:b2:42:b6: 12:48:e0:0c:42:1b:d0:50:40:00:83:c3:68:36:4a: 07:0e:99:fe:10:21:7a:99:f6:26:6b:17:c4:87:85: 57:2e:27:a4:e8:71:f1:a4:42:b5:2f:d9:f1:6e:8e: aa:8e:c1:40:aa:bf:6b:eb:4e:d0:e9:bf:39:2a:9c: 4d:b3:98:3d:e5:19:94:6e:b5:08:79:b1:0d:41:78: 28:0a:99:6c:c5:e4:34:29:83:4a:fa:e7:2f:ec:28: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3A:17:53:14:C1:01:4B:B8:1D:73:30:C4:A7:34:08:89:51:6D:02 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.96.0/21 Signature Algorithm: sha256WithRSAEncryption 18:ff:7d:f2:20:e3:ea:d9:e8:a7:73:56:df:c2:c4:6a:af:25: a4:1d:e4:6f:ba:94:40:12:c7:31:6f:0e:0e:18:d4:35:60:7c: fd:ef:31:0a:ba:54:43:a9:4d:d5:d8:ad:c8:b1:e0:12:52:0c: 41:e9:de:00:e9:75:ab:7a:3d:8f:a5:c6:c6:39:af:60:04:c9: 13:50:47:5f:b7:58:2b:8e:16:37:d0:f9:4b:19:42:92:2f:d7: 96:c6:30:db:eb:10:6f:5b:cd:a0:92:52:9c:c6:1d:30:cb:ec: ed:1e:48:77:f9:f8:c3:89:53:aa:93:93:c2:a1:b6:ff:3d:3a: 28:23:f1:af:98:af:3c:27:20:50:b9:56:a1:cc:a3:8d:21:be: 40:4a:24:c3:dd:ad:fd:3f:f1:c8:ba:57:83:19:d0:76:0a:81: 4e:e5:1b:42:ba:e9:9a:c0:0e:ce:e6:cc:09:2e:eb:18:bc:c4: af:1d:d8:e9:24:50:ac:d3:f4:bf:54:e3:1d:51:5d:37:61:5d: 8f:ba:b1:87:a7:7a:e9:f5:4d:de:bf:15:bd:7f:1a:4b:50:bd: 69:23:c8:9a:b4:eb:6c:b9:c5:ee:53:01:9a:af:46:11:94:0d: fa:94:d7:46:5e:16:e8:9c:ee:9d:6b:24:4d:4e:3f:98:f7:7e: 47:70:59:72 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxM0ExNzUzMTRDMTAx NEJCODFENzMzMEM0QTczNDA4ODk1MTZEMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEejuA5XpSpIzRb59/WtUDLk914nytQuzEgBlAUdDqW8iewUrX R6Fh4lFJSsDh5MjfQgM9SaPtZcOByJ7PwGRh7Zd3A+cAs3DhhgxtECTyPvNEptN3 IW10/c3yO3gILhsQtiBcWNBDgaJAQmLHWBWV1H/8ArRoS3yvCnTq3aUob/QjSBdk QGgYsg1gbV8TYjE8GMeUsvId081meCD1vMEe7rJCthJI4AxCG9BQQACDw2g2SgcO mf4QIXqZ9iZrF8SHhVcuJ6TocfGkQrUv2fFujqqOwUCqv2vrTtDpvzkqnE2zmD3l GZRutQh5sQ1BeCgKmWzF5DQpg0r65y/sKKVLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8ToXUxTBAUu4HXMwxKc0CIlRbQIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhUb1hVeFRCQVV1NEhYTXd4 S2MwQ0lsUmJRSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nmAwDQYJKoZIhvcNAQELBQADggEBABj/ffIg4+rZ6KdzVt/CxGqvJaQd5G+6lEAS xzFvDg4Y1DVgfP3vMQq6VEOpTdXYrcix4BJSDEHp3gDpdat6PY+lxsY5r2AEyRNQ R1+3WCuOFjfQ+UsZQpIv15bGMNvrEG9bzaCSUpzGHTDL7O0eSHf5+MOJU6qTk8Kh tv89Oigj8a+YrzwnIFC5VqHMo40hvkBKJMPdrf0/8ci6V4MZ0HYKgU7lG0K66ZrA Ds7mzAku6xi8xK8d2OkkUKzT9L9U4x1RXTdhXY+6sYeneun1Td6/Fb1/GktQvWkj yJq062y5xe5TAZqvRhGUDfqU10ZeFuic7p1rJE1OP5j3fkdwWXI= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org