$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTZNSaDkCTniy47O5Dr0CQaRTX0.roa File: PTZNSaDkCTniy47O5Dr0CQaRTX0.roa (raw, json) Hash identifier: 67mb75uy8taVcIbcE+3vZlsvTlZzzhaA5/CmbE9qVkc= Subject key identifier: 3D:36:4D:49:A0:E4:09:39:E2:CB:8E:CE:E4:3A:F4:09:06:91:4D:7D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E0C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTZNSaDkCTniy47O5Dr0CQaRTX0.roa Signing time: Fri 01 Sep 2023 10:15:37 +0000 ROA not before: Fri 01 Sep 2023 10:15:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7692 (0x1e0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3D364D49A0E40939E2CB8ECEE43AF40906914D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:13:a4:d5:4b:63:9c:9f:30:f3:fc:2d:db: 71:64:fe:3b:b5:c3:84:f1:50:20:03:76:0f:f5:9c: 30:69:41:ec:05:ff:a1:6f:2e:cf:0c:73:4d:e8:34: b3:71:fe:48:06:75:f4:9e:de:c8:eb:b1:52:a5:59: 43:cb:c6:34:2e:c8:06:2f:8f:b1:1c:80:5f:30:19: 62:ac:28:35:62:22:8c:f7:8e:27:f8:89:d7:5f:13: fc:dd:7c:bc:69:d2:c2:49:83:d5:af:80:3e:0b:d2: 0b:2b:46:d5:ac:dc:f4:bd:82:be:f0:00:b6:bf:57: 6b:5f:ec:d3:35:38:95:75:29:b5:bf:32:32:e0:e4: bd:70:3b:52:a7:29:e6:b5:f3:02:99:e9:3d:1f:d7: df:a5:ae:f2:63:c7:75:47:ab:ae:72:bf:db:2c:2c: da:54:b7:03:d4:5d:6b:d9:2b:87:de:8d:51:ad:21: 71:ff:c5:9d:54:7b:33:99:fd:2b:95:ae:84:59:12: f9:73:65:4a:f1:57:71:53:09:e6:d9:64:26:19:1f: e1:7a:ca:23:56:72:81:eb:7f:ad:b0:d8:3a:ec:f7: 9e:eb:2c:5b:53:ac:4c:54:10:66:93:ae:59:0b:6a: 20:66:07:20:81:dd:f3:88:a4:4b:1b:de:2c:30:c9: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:36:4D:49:A0:E4:09:39:E2:CB:8E:CE:E4:3A:F4:09:06:91:4D:7D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTZNSaDkCTniy47O5Dr0CQaRTX0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.147.0/24 Signature Algorithm: sha256WithRSAEncryption 35:08:9d:1b:a8:b6:c4:b7:cc:51:27:2a:08:05:ed:06:54:09: 3d:68:9b:97:d5:76:b4:d7:f1:93:af:d0:01:e4:62:b8:a2:f6: ec:41:62:68:1f:28:95:5b:91:d6:15:76:34:73:35:e4:26:85: 34:7b:07:8d:d4:25:71:c8:34:99:99:5d:e1:c6:68:2d:1a:f7: 03:f3:41:7f:b1:31:a6:60:54:6b:0d:e3:d8:38:af:2e:e8:bd: f4:95:e9:48:79:61:da:3a:c1:e2:b4:f4:ff:1a:1f:f1:bf:1f: 8d:0f:da:07:57:ca:88:87:aa:8a:e2:01:99:0f:09:98:ef:09: c4:8e:ea:69:26:7f:b8:68:4b:17:50:40:fe:6e:7d:ad:3b:40: 1b:d7:9a:80:48:84:00:cf:06:be:49:7b:b4:75:d4:1d:36:7e: 95:31:c8:db:f9:35:6c:ef:d2:84:94:2a:c9:85:4b:c4:ce:3a: 01:8e:04:ce:0b:a6:5d:c3:4b:76:f7:fc:52:da:66:e4:82:54: 89:83:71:75:31:eb:77:b2:d6:6b:5f:d7:44:3d:38:d5:dd:7f: b7:4e:67:c7:93:72:4f:3b:08:0d:42:77:bc:6a:d5:91:31:59: 5b:40:99:62:41:91:3c:74:f0:c6:f6:2c:32:3d:7c:9f:01:45: 76:b6:b6:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNEMzY0RDQ5QTBFNDA5 MzlFMkNCOEVDRUU0M0FGNDA5MDY5MTREN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+6BOk1UtjnJ8w8/wt23Fk/ju1w4TxUCADdg/1nDBpQewF/6Fv Ls8Mc03oNLNx/kgGdfSe3sjrsVKlWUPLxjQuyAYvj7EcgF8wGWKsKDViIoz3jif4 iddfE/zdfLxp0sJJg9WvgD4L0gsrRtWs3PS9gr7wALa/V2tf7NM1OJV1KbW/MjLg 5L1wO1KnKea18wKZ6T0f19+lrvJjx3VHq65yv9ssLNpUtwPUXWvZK4fejVGtIXH/ xZ1UezOZ/SuVroRZEvlzZUrxV3FTCebZZCYZH+F6yiNWcoHrf62w2Drs957rLFtT rExUEGaTrlkLaiBmByCB3fOIpEsb3iwwyclJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPTZNSaDkCTniy47O5Dr0CQaRTX0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BUWk5TYURrQ1RuaXk0N081 RHIwQ1FhUlRYMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx npMwDQYJKoZIhvcNAQELBQADggEBADUInRuotsS3zFEnKggF7QZUCT1om5fVdrTX 8ZOv0AHkYrii9uxBYmgfKJVbkdYVdjRzNeQmhTR7B43UJXHINJmZXeHGaC0a9wPz QX+xMaZgVGsN49g4ry7ovfSV6Uh5Ydo6weK09P8aH/G/H40P2gdXyoiHqoriAZkP CZjvCcSO6mkmf7hoSxdQQP5ufa07QBvXmoBIhADPBr5Je7R11B02fpUxyNv5NWzv 0oSUKsmFS8TOOgGOBM4Lpl3DS3b3/FLaZuSCVImDcXUx63ey1mtf10Q9ONXdf7dO Z8eTck87CA1Cd7xq1ZExWVtAmWJBkTx08Mb2LDI9fJ8BRXa2tnk= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org