$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bcFfV0r8NIgKaEAjCgBLsMGaIqU.roa File: bcFfV0r8NIgKaEAjCgBLsMGaIqU.roa (raw, json) Hash identifier: gw5tp45ocf3Sjhy+oQfUEKkT+1nBgGhgU1Db1es/pEQ= Subject key identifier: 6D:C1:5F:57:4A:FC:34:88:0A:68:40:23:0A:00:4B:B0:C1:9A:22:A5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DAA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bcFfV0r8NIgKaEAjCgBLsMGaIqU.roa Signing time: Fri 01 Sep 2023 10:15:08 +0000 ROA not before: Fri 01 Sep 2023 10:15:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7594 (0x1daa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6DC15F574AFC34880A6840230A004BB0C19A22A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:5a:b5:84:fe:ec:4d:58:0a:4e:6b:6f:78: dc:00:ec:fa:ae:c7:dc:13:56:38:b2:f7:64:3c:76: ec:44:a0:18:b5:e4:ac:fe:0b:df:44:aa:cb:d9:be: 2b:5a:81:0f:f0:68:c8:12:cc:1b:88:80:a4:ae:3d: f1:ff:e7:2c:25:e5:b9:f2:8c:aa:93:50:e2:4d:92: 0b:2d:4b:35:6d:36:f2:91:ef:ff:2d:40:6a:9c:1b: 20:fe:29:da:4e:71:db:d8:df:05:20:9f:c3:fd:5e: c8:85:14:92:03:65:2b:79:04:e6:44:18:c2:4f:eb: 1a:84:cd:58:54:89:ea:8c:7c:6d:87:e0:c4:72:a3: 55:7c:40:36:23:e1:4b:a3:ad:10:c6:0a:9e:cf:ac: 9c:0b:b6:0c:b1:a9:73:6a:87:24:b1:3c:16:69:54: e5:96:a0:87:d7:a5:79:d4:48:86:bc:81:c2:68:d8: 3c:da:ad:b9:3e:09:e7:06:45:3d:f1:90:98:1c:95: 16:c1:62:f7:11:4e:90:33:99:4d:f8:38:cc:0a:93: 6f:55:d5:dd:bd:54:b1:ac:61:e9:22:2f:91:22:80: 00:a3:3a:ea:e6:de:80:e1:b8:cb:9a:92:3b:ae:c1: d0:c0:ac:84:d5:4a:c7:e4:86:d6:bf:ea:bd:5e:29: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C1:5F:57:4A:FC:34:88:0A:68:40:23:0A:00:4B:B0:C1:9A:22:A5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bcFfV0r8NIgKaEAjCgBLsMGaIqU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:84:6b:ad:e9:d8:dc:dd:0e:ef:27:2a:0c:67:f6:d7:ca:51: e0:05:17:41:6f:4e:ef:ba:d5:34:ca:6f:5c:cd:3a:54:c5:5e: 13:03:1a:18:78:ce:4c:e0:61:a4:5d:b3:23:40:4a:b6:b5:38: f4:8e:ef:ad:e6:44:b7:c9:a3:f0:0b:18:48:5b:c0:57:16:ad: b5:1a:81:4a:02:68:49:79:7e:63:66:9d:18:e2:a1:59:9a:14: cc:e8:e2:4e:0c:25:51:38:13:06:3a:54:95:af:e9:63:c1:61: d6:9e:14:f6:47:4a:cf:01:54:dc:ea:d5:3e:80:a3:b0:8d:31: 48:b1:b1:91:de:e0:49:53:af:e9:17:f2:af:a8:95:37:a1:35: 6f:5e:2f:74:ca:13:82:40:38:c4:dd:d1:87:51:dd:fc:00:df: c1:7b:b0:e2:17:57:ad:a5:71:8f:3d:86:10:07:93:f3:f0:a6: 3e:28:54:8c:71:72:c1:54:6c:12:56:e3:6c:3c:ab:9a:3c:28: bf:53:8b:1e:5d:e7:c0:09:eb:57:3d:c7:cf:3b:83:6a:90:02: 28:d5:52:b8:67:bd:3e:d6:bd:9e:21:09:85:66:61:e9:3a:e6: ba:8d:1a:ec:62:b5:8d:4b:48:5f:55:f1:f0:43:ad:3b:a3:27: a3:83:1a:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZEQzE1RjU3NEFGQzM0 ODgwQTY4NDAyMzBBMDA0QkIwQzE5QTIyQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpjlq1hP7sTVgKTmtveNwA7Pqux9wTVjiy92Q8duxEoBi15Kz+ C99EqsvZvitagQ/waMgSzBuIgKSuPfH/5ywl5bnyjKqTUOJNkgstSzVtNvKR7/8t QGqcGyD+KdpOcdvY3wUgn8P9XsiFFJIDZSt5BOZEGMJP6xqEzVhUieqMfG2H4MRy o1V8QDYj4UujrRDGCp7PrJwLtgyxqXNqhySxPBZpVOWWoIfXpXnUSIa8gcJo2Dza rbk+CecGRT3xkJgclRbBYvcRTpAzmU34OMwKk29V1d29VLGsYekiL5EigACjOurm 3oDhuMuakjuuwdDArITVSsfkhta/6r1eKStdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbcFfV0r8NIgKaEAjCgBLsMGaIqUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2JjRmZWMHI4TklnS2FFQWpD Z0JMc01HYUlxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n3AwDQYJKoZIhvcNAQELBQADggEBAEuEa63p2NzdDu8nKgxn9tfKUeAFF0FvTu+6 1TTKb1zNOlTFXhMDGhh4zkzgYaRdsyNASra1OPSO763mRLfJo/ALGEhbwFcWrbUa gUoCaEl5fmNmnRjioVmaFMzo4k4MJVE4EwY6VJWv6WPBYdaeFPZHSs8BVNzq1T6A o7CNMUixsZHe4ElTr+kX8q+olTehNW9eL3TKE4JAOMTd0YdR3fwA38F7sOIXV62l cY89hhAHk/Pwpj4oVIxxcsFUbBJW42w8q5o8KL9Tix5d58AJ61c9x887g2qQAijV UrhnvT7WvZ4hCYVmYek65rqNGuxitY1LSF9V8fBDrTujJ6ODGms= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org