$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WHltOwH3BSwlJ_QY-BJiFuyUluA.roa File: WHltOwH3BSwlJ_QY-BJiFuyUluA.roa (raw, json) Hash identifier: K+41zmkE4r6lX97awdTxR/tZ5Oo1/Emquu7JESTTPzs= Subject key identifier: 58:79:6D:3B:01:F7:05:2C:25:27:F4:18:F8:12:62:16:EC:94:96:E0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D85 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WHltOwH3BSwlJ_QY-BJiFuyUluA.roa Signing time: Fri 01 Sep 2023 10:14:56 +0000 ROA not before: Fri 01 Sep 2023 10:14:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 49.159.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7557 (0x1d85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=58796D3B01F7052C2527F418F8126216EC9496E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:8a:7b:4a:26:19:ea:21:09:56:e8:d4:42: f9:07:3b:89:9d:43:82:09:f2:80:af:7f:9f:9f:f4: b8:bc:8f:ce:0f:c0:b0:24:22:9e:44:9a:7c:f9:b6: 7d:27:84:28:80:27:ec:e7:0c:2f:24:47:11:15:80: be:e0:a2:df:bb:62:cd:38:d3:09:d1:6c:b4:a7:41: c4:12:fd:3c:bd:1a:c3:61:be:40:10:89:3a:3d:2a: 32:7b:32:c8:cd:29:7a:f8:19:c8:53:d5:ea:5f:a3: 23:e4:35:b4:c3:84:55:74:a2:f8:d3:b2:df:31:66: 9a:34:67:7b:9c:1c:1c:7f:cc:a1:4f:36:48:f2:74: fd:02:0c:bf:31:46:c1:70:48:e7:2a:02:3f:a7:ac: 1b:5a:ca:b5:59:2e:1b:7c:15:34:04:ab:95:60:a8: 60:0a:17:f1:09:ea:e0:7e:41:31:eb:c1:2e:cc:b6: da:5b:27:0d:86:6f:ec:b3:03:a2:e9:f8:98:66:4a: 2e:34:59:1b:90:1d:ac:81:24:39:c9:be:61:57:4d: e4:d2:d5:05:ab:67:be:02:dc:c2:36:ed:e1:b8:27: a6:60:08:a6:6d:8e:45:1b:ad:59:e4:d4:30:e8:66: c7:af:0b:1e:58:b5:14:33:98:bf:04:72:f3:ff:e4: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:6D:3B:01:F7:05:2C:25:27:F4:18:F8:12:62:16:EC:94:96:E0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WHltOwH3BSwlJ_QY-BJiFuyUluA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.176.0/20 Signature Algorithm: sha256WithRSAEncryption 16:9f:33:5d:9c:f2:28:04:0e:79:ac:bf:d1:4e:22:d3:d1:40: f1:a1:50:48:59:9b:76:78:59:b1:aa:a8:c8:7f:16:31:ad:46: a4:f7:f0:29:4b:27:34:ae:05:85:d1:93:de:89:c6:d0:96:f7: e8:5b:1e:b0:eb:43:b0:ed:09:27:a4:44:53:84:81:ce:64:2a: 32:c4:0b:12:9d:1c:59:18:a8:d6:f3:a3:b4:69:ae:5a:ee:8c: 0e:8d:9f:fc:b4:4d:f1:4c:de:95:33:ff:4a:8e:ba:fc:bd:87: b0:3b:76:07:b5:6f:f4:b0:37:e3:61:1b:0b:cf:54:e4:c8:f4: ff:82:27:02:ca:5f:55:03:32:bc:66:d3:80:b3:60:a2:5b:32: 05:db:64:35:c6:5e:e2:1c:5a:61:5b:e2:b9:03:cc:9b:39:83: 2c:8d:c5:4b:ae:cb:45:40:fc:bf:33:9a:09:00:d9:5d:82:f2: d4:08:2f:9f:29:33:1a:8f:35:12:76:f9:a3:75:d5:51:24:9c: cc:cb:60:96:9c:20:9c:15:e8:e9:9a:28:98:4e:dd:be:f3:b6: d4:a9:fd:ff:57:1f:b8:0c:e7:d4:4d:9e:b2:ef:ba:be:8b:29: fe:0e:7e:fe:7a:bb:81:29:42:58:43:74:0f:d1:ca:bf:4b:f1: 7c:b0:00:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU4Nzk2RDNCMDFGNzA1 MkMyNTI3RjQxOEY4MTI2MjE2RUM5NDk2RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC404p7SiYZ6iEJVujUQvkHO4mdQ4IJ8oCvf5+f9Li8j84PwLAk Ip5Emnz5tn0nhCiAJ+znDC8kRxEVgL7got+7Ys040wnRbLSnQcQS/Ty9GsNhvkAQ iTo9KjJ7MsjNKXr4GchT1epfoyPkNbTDhFV0ovjTst8xZpo0Z3ucHBx/zKFPNkjy dP0CDL8xRsFwSOcqAj+nrBtayrVZLht8FTQEq5VgqGAKF/EJ6uB+QTHrwS7Mttpb Jw2Gb+yzA6Lp+JhmSi40WRuQHayBJDnJvmFXTeTS1QWrZ74C3MI27eG4J6ZgCKZt jkUbrVnk1DDoZsevCx5YtRQzmL8EcvP/5JwRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWHltOwH3BSwlJ/QY+BJiFuyUluAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dIbHRPd0gzQlN3bEpfUVkt QkppRnV5VWx1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx n7AwDQYJKoZIhvcNAQELBQADggEBABafM12c8igEDnmsv9FOItPRQPGhUEhZm3Z4 WbGqqMh/FjGtRqT38ClLJzSuBYXRk96JxtCW9+hbHrDrQ7DtCSekRFOEgc5kKjLE CxKdHFkYqNbzo7RprlrujA6Nn/y0TfFM3pUz/0qOuvy9h7A7dge1b/SwN+NhGwvP VOTI9P+CJwLKX1UDMrxm04CzYKJbMgXbZDXGXuIcWmFb4rkDzJs5gyyNxUuuy0VA /L8zmgkA2V2C8tQIL58pMxqPNRJ2+aN11VEknMzLYJacIJwV6OmaKJhO3b7zttSp /f9XH7gM59RNnrLvur6LKf4Ofv56u4EpQlhDdA/Ryr9L8XywACs= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org