$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1VvQYqPWAafw3aMly6Pl53owoI.roa File: Z1VvQYqPWAafw3aMly6Pl53owoI.roa (raw, json) Hash identifier: 2yDVzM8H1SbiQAvXSfl3duuS+ra9+8b31dQO2nLfzHs= Subject key identifier: 67:55:6F:41:8A:8F:58:06:9F:C3:76:8C:97:2E:8F:97:9D:E8:C2:82 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DBC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1VvQYqPWAafw3aMly6Pl53owoI.roa Signing time: Fri 01 Sep 2023 10:15:13 +0000 ROA not before: Fri 01 Sep 2023 10:15:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7612 (0x1dbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=67556F418A8F58069FC3768C972E8F979DE8C282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:a8:00:4e:17:c6:11:88:0b:90:37:95:28: 83:73:99:27:f2:70:ea:4c:8b:ed:1c:31:28:b1:9c: 0e:26:14:6a:d7:9e:dd:69:14:fa:86:30:3d:d4:68: 84:20:8d:c4:e0:2c:72:cb:68:35:c5:a8:46:d2:e0: 45:cc:eb:6b:d1:c0:7f:90:27:c2:7d:c4:7d:e8:10: bf:88:47:ca:52:f3:5b:ab:83:0d:17:d8:c5:4a:53: 09:c1:ad:29:58:aa:fd:56:5f:2e:41:87:5b:36:41: 1c:fc:8c:ba:fb:07:52:56:93:ca:a4:31:28:76:e0: ab:0e:66:5e:c4:09:a3:85:33:74:35:83:9c:cb:79: 64:3d:63:13:90:e3:3a:e5:8e:45:68:d4:93:77:a8: 43:dc:e9:c3:64:8d:14:7c:89:6c:8f:6d:dc:82:83: eb:9c:fb:48:8e:1e:a8:b9:dd:00:db:44:e8:b8:17: 78:5e:3d:2e:de:ef:f8:e7:f7:1c:2f:b6:01:c8:ab: 43:55:83:25:31:93:bc:bd:04:c0:7a:08:96:8d:2e: 53:82:95:cb:68:3e:6c:d7:aa:24:51:80:d6:4f:98: d7:d4:88:3b:74:5c:98:16:90:4a:b9:c4:56:04:73: 57:8f:a4:6c:10:4c:19:f2:38:4f:da:f7:0d:6e:9b: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:55:6F:41:8A:8F:58:06:9F:C3:76:8C:97:2E:8F:97:9D:E8:C2:82 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1VvQYqPWAafw3aMly6Pl53owoI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9b:5b:d7:4b:17:d9:49:d8:ce:a7:88:3e:4c:28:18:de:cb:a9: 61:7c:39:b7:d4:fb:6d:0d:20:9e:c3:fc:70:9a:08:68:20:cc: 11:45:c7:6a:22:a3:b5:6f:e7:1c:44:3c:fa:77:e8:8a:89:e2: f0:26:6d:75:84:bf:29:2e:f3:b5:9c:f4:b0:94:67:84:89:66: 02:f8:ce:a7:9a:26:4a:f9:47:cd:40:98:b6:3f:4c:bf:4c:3e: ba:59:51:d7:47:c9:45:ca:f0:72:a7:05:de:6e:4a:b5:eb:a8: c1:a6:a3:8e:bb:64:73:f4:0e:4e:7a:71:04:33:f0:eb:53:45: 16:66:18:42:9f:0c:ca:68:b1:7d:8c:00:56:23:78:ff:2b:98: bd:09:8c:56:eb:32:c4:af:44:84:91:80:f8:db:53:d7:1d:ac: 7d:ed:de:8f:0b:95:3d:28:51:23:45:73:96:4d:6d:18:9d:81: c8:62:7a:85:60:f4:ef:a1:d0:06:b8:36:a2:88:70:c3:2e:9b: 49:80:6e:6f:1c:f1:32:7c:dc:34:b9:a1:77:dd:22:4c:7e:07: 13:4b:4f:77:ee:77:9d:86:0e:17:90:d6:a9:6f:52:fb:1d:f0: 63:c2:02:52:85:ed:ff:d8:1c:41:6c:52:f9:80:3d:cf:07:ad: cf:82:07:86 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICHbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3NTU2RjQxOEE4RjU4 MDY5RkMzNzY4Qzk3MkU4Rjk3OURFOEMyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF4KgAThfGEYgLkDeVKINzmSfycOpMi+0cMSixnA4mFGrXnt1p FPqGMD3UaIQgjcTgLHLLaDXFqEbS4EXM62vRwH+QJ8J9xH3oEL+IR8pS81urgw0X 2MVKUwnBrSlYqv1WXy5Bh1s2QRz8jLr7B1JWk8qkMSh24KsOZl7ECaOFM3Q1g5zL eWQ9YxOQ4zrljkVo1JN3qEPc6cNkjRR8iWyPbdyCg+uc+0iOHqi53QDbROi4F3he PS7e7/jn9xwvtgHIq0NVgyUxk7y9BMB6CJaNLlOClctoPmzXqiRRgNZPmNfUiDt0 XJgWkEq5xFYEc1ePpGwQTBnyOE/a9w1um5iJAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUZ1VvQYqPWAafw3aMly6Pl53owoIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1oxVnZRWXFQV0FhZnczYU1s eTZQbDUzb3dvSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx njANBgkqhkiG9w0BAQsFAAOCAQEAm1vXSxfZSdjOp4g+TCgY3supYXw5t9T7bQ0g nsP8cJoIaCDMEUXHaiKjtW/nHEQ8+nfoioni8CZtdYS/KS7ztZz0sJRnhIlmAvjO p5omSvlHzUCYtj9Mv0w+ullR10fJRcrwcqcF3m5Kteuowaajjrtkc/QOTnpxBDPw 61NFFmYYQp8MymixfYwAViN4/yuYvQmMVusyxK9EhJGA+NtT1x2sfe3ejwuVPShR I0Vzlk1tGJ2ByGJ6hWD076HQBrg2oohwwy6bSYBubxzxMnzcNLmhd90iTH4HE0tP d+53nYYOF5DWqW9S+x3wY8ICUoXt/9gcQWxS+YA9zwetz4IHhg== -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org