$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/It2Ns4bx2GZT0qNj4Wib3A0junk.roa File: It2Ns4bx2GZT0qNj4Wib3A0junk.roa (raw, json) Hash identifier: dIttpc6p62Fn1IaHSXouw+mP7mxkRmNNZ1+t/vIE+TM= Subject key identifier: 22:DD:8D:B3:86:F1:D8:66:53:D2:A3:63:E1:68:9B:DC:0D:23:BA:79 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E3C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/It2Ns4bx2GZT0qNj4Wib3A0junk.roa Signing time: Fri 01 Sep 2023 10:15:49 +0000 ROA not before: Fri 01 Sep 2023 10:15:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 49.159.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7740 (0x1e3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=22DD8DB386F1D86653D2A363E1689BDC0D23BA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:03:50:22:6e:8a:a3:d7:b3:d4:39:9c:44: 5b:44:bf:08:bd:cc:2e:26:e3:1b:06:21:67:d4:69: da:4b:96:07:cd:0f:17:98:8c:1d:2a:3a:ff:1e:6e: f8:7a:b4:00:4a:38:c9:60:66:ef:20:b0:38:be:f0: 17:c2:ee:de:18:a0:94:0b:00:c6:0b:87:db:3a:b5: 95:a3:95:b9:eb:0f:09:de:12:92:49:a0:cb:8c:89: c3:b8:25:d4:6d:be:b5:02:04:28:1c:f0:ab:e0:ac: 14:9c:a8:e5:98:dd:35:3e:7a:f1:89:e0:cd:db:96: 57:72:ff:24:94:9f:6d:39:30:db:70:74:03:4c:86: bb:2d:20:e1:bb:a6:61:d8:22:40:e9:6f:27:61:d3: ea:f8:2b:05:00:d0:be:eb:9c:02:45:5f:52:ca:50: 8d:cc:93:eb:81:d4:e7:59:44:a6:aa:78:a7:61:39: 80:8a:79:29:13:99:fb:ce:61:3d:94:d3:f9:bb:36: 4d:ec:37:8e:43:e0:a6:8a:f3:d0:1c:a7:a4:bb:e5: 47:18:0a:c4:fb:52:d4:f6:05:c0:6a:ad:44:80:fd: c6:92:55:d6:78:c0:b0:2c:af:ff:c6:ce:b1:be:36: 83:fa:4e:99:9b:c6:d4:64:72:1f:60:4e:39:f6:b4: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DD:8D:B3:86:F1:D8:66:53:D2:A3:63:E1:68:9B:DC:0D:23:BA:79 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/It2Ns4bx2GZT0qNj4Wib3A0junk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.76.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:ce:ca:70:81:a0:82:b0:de:65:67:f7:2c:51:35:60:36:a1: 5b:8d:63:d2:52:0c:c0:42:68:ef:1e:3e:5e:7b:f4:6a:32:b7: e3:e6:9d:91:1d:a2:26:29:dd:74:7a:9b:84:bb:84:17:ae:67: b5:22:0c:4c:a4:6a:d0:17:74:84:88:5e:0d:14:a0:7a:65:67: 47:5d:b0:da:01:6a:b2:92:53:04:e7:c3:f7:f4:32:1a:3c:86: 43:9c:af:80:f0:d8:d1:5f:8d:46:2a:21:bc:6f:67:af:b0:1c: f4:bc:b5:3f:8d:f0:47:25:14:52:ca:06:ef:a9:70:b2:f9:eb: 94:29:79:9f:f8:a5:f6:14:ca:58:64:01:d2:41:b4:c6:db:59: 68:aa:f4:50:19:cf:77:14:0a:24:98:fd:53:fd:a2:b5:1b:ad: bb:53:ce:82:b6:a2:6f:4b:5e:08:33:3b:83:f4:63:f5:81:fb: 9c:51:ea:f7:16:56:e4:3c:e4:2b:c2:9e:65:c2:8c:4e:8e:62: 7c:39:8e:3e:db:c3:9b:5c:52:c6:25:66:f3:1f:0b:59:98:64: 32:cd:22:01:84:5d:1f:c5:4a:ce:60:a3:59:7d:39:3b:ef:09: ab:73:bb:de:f1:1d:a5:5c:65:40:50:8a:18:41:aa:ec:32:38: f3:5e:0e:68 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIyREQ4REIzODZGMUQ4 NjY1M0QyQTM2M0UxNjg5QkRDMEQyM0JBNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/ywNQIm6Ko9ez1DmcRFtEvwi9zC4m4xsGIWfUadpLlgfNDxeY jB0qOv8ebvh6tABKOMlgZu8gsDi+8BfC7t4YoJQLAMYLh9s6tZWjlbnrDwneEpJJ oMuMicO4JdRtvrUCBCgc8KvgrBScqOWY3TU+evGJ4M3blldy/ySUn205MNtwdANM hrstIOG7pmHYIkDpbydh0+r4KwUA0L7rnAJFX1LKUI3Mk+uB1OdZRKaqeKdhOYCK eSkTmfvOYT2U0/m7Nk3sN45D4KaK89Acp6S75UcYCsT7UtT2BcBqrUSA/caSVdZ4 wLAsr//GzrG+NoP6TpmbxtRkch9gTjn2tIw7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIt2Ns4bx2GZT0qNj4Wib3A0junkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0l0Mk5zNGJ4MkdaVDBxTmo0 V2liM0EwanVuay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n0wwDQYJKoZIhvcNAQELBQADggEBAB/OynCBoIKw3mVn9yxRNWA2oVuNY9JSDMBC aO8ePl579Goyt+PmnZEdoiYp3XR6m4S7hBeuZ7UiDEykatAXdISIXg0UoHplZ0dd sNoBarKSUwTnw/f0Mho8hkOcr4Dw2NFfjUYqIbxvZ6+wHPS8tT+N8EclFFLKBu+p cLL565QpeZ/4pfYUylhkAdJBtMbbWWiq9FAZz3cUCiSY/VP9orUbrbtTzoK2om9L XggzO4P0Y/WB+5xR6vcWVuQ85CvCnmXCjE6OYnw5jj7bw5tcUsYlZvMfC1mYZDLN IgGEXR/FSs5go1l9OTvvCatzu97xHaVcZUBQihhBquwyOPNeDmg= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org