$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa File: Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa (raw, json) Hash identifier: /zr89+6QUzhF3qpXhYCuUMCHFix5SXqvKvJBNgBZIPU= Subject key identifier: 3A:38:3A:7A:83:97:75:E0:B5:94:45:81:3F:15:3E:CC:E2:C2:32:8A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E36 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa Signing time: Fri 01 Sep 2023 10:15:48 +0000 ROA not before: Fri 01 Sep 2023 10:15:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7734 (0x1e36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3A383A7A839775E0B59445813F153ECCE2C2328A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:a5:f2:d0:65:4c:46:ea:ae:0e:03:3d:84: 4b:a0:6d:36:06:2d:a4:37:cf:9b:90:58:86:15:5f: 9f:f9:71:56:20:bf:11:4a:ee:a1:49:98:dc:56:0c: 19:4b:9b:4a:7e:dd:6c:3a:c8:9e:7a:a3:b0:10:a6: ca:d1:3c:da:56:93:21:6b:67:b3:16:08:72:3f:a5: a4:b5:18:03:78:83:da:ca:e2:7b:b7:b4:88:d3:e2: a6:c5:5a:ac:68:b7:25:2f:7a:59:12:09:07:ce:63: 90:85:59:f3:be:d3:a3:a6:c9:a7:5c:2d:c3:67:83: 85:b1:a9:8b:df:18:89:6e:22:98:4d:cf:33:17:fb: 58:60:84:ce:9b:2a:5a:3b:10:e3:78:a4:f8:70:f2: 91:3b:03:48:1b:d9:58:a7:f5:e4:87:d4:88:33:a1: 69:57:7c:5d:5f:37:ad:48:09:93:84:9e:70:b5:c3: ab:61:b7:cd:d8:0f:33:75:b5:77:98:dc:7c:05:51: bb:f3:34:d3:c1:1c:f8:03:0c:b1:1b:55:3a:da:5c: e2:b2:da:25:ab:d6:d6:74:82:90:aa:2f:00:4b:64: 34:f2:06:81:0f:46:cb:5a:b6:90:8b:47:75:db:dd: 3f:3e:09:52:d3:35:0f:94:ba:e3:c0:73:f9:1f:38: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:3A:7A:83:97:75:E0:B5:94:45:81:3F:15:3E:CC:E2:C2:32:8A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/15 Signature Algorithm: sha256WithRSAEncryption 00:3f:27:43:e0:29:3a:93:68:d7:3c:32:1a:9c:45:52:fa:32: e9:f2:17:dc:a6:fe:ab:76:12:c3:85:cf:f4:e7:7b:c8:37:12: 78:5c:4d:8b:0e:a3:7d:0e:11:a2:af:d3:fb:78:fe:7e:0c:09: 59:cd:80:7b:29:58:92:31:6f:5b:9c:83:38:06:2f:d3:35:8e: e2:c5:74:60:f1:75:0a:8a:70:b0:1e:cb:8e:2c:d0:bb:f5:c5: 9f:ed:43:8a:ef:8f:e1:46:d2:bf:c6:9b:75:02:d4:4b:f6:59: a8:d2:0f:33:40:d2:37:f8:31:b3:be:a6:e8:cd:52:0c:78:f1: 58:02:54:e1:b1:4a:8b:c2:22:9f:a0:5d:47:ef:63:ec:ab:f0: 74:d7:1d:44:f0:30:aa:90:ac:20:a4:24:73:96:59:ba:e0:2f: ba:ae:2a:79:28:ba:f5:86:db:05:d2:f5:2d:b4:75:82:db:e8: b2:f7:d4:da:b0:cb:80:3f:2c:58:fa:32:7d:4f:86:e7:47:28: 41:0d:07:b9:9d:de:7f:1e:1c:e4:8a:c4:e8:51:9c:57:2e:5e: ad:87:16:7a:9c:8d:d9:11:9f:0a:11:45:cc:96:d3:d6:66:cf: 04:b5:b0:d3:c1:c0:d3:81:84:08:6a:fc:94:3a:c3:cf:07:5e: e6:0d:ea:5c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICHjYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNBMzgzQTdBODM5Nzc1 RTBCNTk0NDU4MTNGMTUzRUNDRTJDMjMyOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo+aXy0GVMRuquDgM9hEugbTYGLaQ3z5uQWIYVX5/5cVYgvxFK 7qFJmNxWDBlLm0p+3Ww6yJ56o7AQpsrRPNpWkyFrZ7MWCHI/paS1GAN4g9rK4nu3 tIjT4qbFWqxotyUvelkSCQfOY5CFWfO+06OmyadcLcNng4WxqYvfGIluIphNzzMX +1hghM6bKlo7EON4pPhw8pE7A0gb2Vin9eSH1IgzoWlXfF1fN61ICZOEnnC1w6th t83YDzN1tXeY3HwFUbvzNNPBHPgDDLEbVTraXOKy2iWr1tZ0gpCqLwBLZDTyBoEP RstatpCLR3Xb3T8+CVLTNQ+UuuPAc/kfOPLzAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUOjg6eoOXdeC1lEWBPxU+zOLCMoowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09qZzZlb09YZGVDMWxFV0JQ eFUtek9MQ01vby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEx njANBgkqhkiG9w0BAQsFAAOCAQEAAD8nQ+ApOpNo1zwyGpxFUvoy6fIX3Kb+q3YS w4XP9Od7yDcSeFxNiw6jfQ4Roq/T+3j+fgwJWc2AeylYkjFvW5yDOAYv0zWO4sV0 YPF1CopwsB7LjizQu/XFn+1Diu+P4UbSv8abdQLUS/ZZqNIPM0DSN/gxs76m6M1S DHjxWAJU4bFKi8Iin6BdR+9j7KvwdNcdRPAwqpCsIKQkc5ZZuuAvuq4qeSi69Ybb BdL1LbR1gtvosvfU2rDLgD8sWPoyfU+G50coQQ0HuZ3efx4c5IrE6FGcVy5erYcW epyN2RGfChFFzJbT1mbPBLWw08HA04GECGr8lDrDzwde5g3qXA== -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org