$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hedIFKTRy9uTLhHsKECQRwge7yM.roa File: hedIFKTRy9uTLhHsKECQRwge7yM.roa (raw, json) Hash identifier: Kbgt2eUEewT9nTpjpiVOk1jFCNb24V0/QEaCHZXjHh8= Subject key identifier: 85:E7:48:14:A4:D1:CB:DB:93:2E:11:EC:28:40:90:47:08:1E:EF:23 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E4D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hedIFKTRy9uTLhHsKECQRwge7yM.roa Signing time: Fri 01 Sep 2023 10:15:52 +0000 ROA not before: Fri 01 Sep 2023 10:15:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7757 (0x1e4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=85E74814A4D1CBDB932E11EC28409047081EEF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:30:ea:bc:00:14:0e:f2:3b:a7:86:1f:6b:0c: 7b:40:61:f5:99:94:87:67:87:ee:e0:e7:14:a0:e6: 71:74:64:c5:db:b4:0f:32:98:a5:c5:20:a5:91:6c: 07:7b:75:1c:fa:32:fd:67:b0:0b:e1:c3:c4:72:99: fe:cf:a6:ea:54:b8:49:80:0a:80:32:48:62:89:3c: 09:1d:dd:df:5c:d5:35:3b:cb:63:51:d6:b7:03:44: 52:e5:72:1c:e2:ba:11:ba:8c:89:4b:5d:af:d0:4a: 23:ae:97:26:b9:81:73:ce:89:f2:e9:0e:02:44:8c: a7:cf:52:34:b4:22:f3:90:5e:72:c4:38:3d:d6:f5: 95:ef:0f:b4:52:e3:3a:95:ca:5f:b1:9c:16:47:b1: 44:73:5c:4b:ef:78:f3:28:60:de:74:6e:54:b0:16: 91:d9:21:82:0c:bd:78:e4:6c:80:2e:99:12:94:cb: ae:68:f1:1d:ad:8c:4d:12:c7:c2:ba:88:65:d8:55: 83:9c:fe:33:9f:25:8a:8c:36:79:59:0c:d5:e5:fc: 62:fc:00:98:22:2e:ba:2d:56:f3:1d:05:7d:36:ad: 80:70:f1:0c:ed:94:f6:83:01:05:b7:7e:6e:eb:39: a9:c0:ae:08:8c:2b:43:04:cc:ab:25:43:95:18:02: 69:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E7:48:14:A4:D1:CB:DB:93:2E:11:EC:28:40:90:47:08:1E:EF:23 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hedIFKTRy9uTLhHsKECQRwge7yM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.32.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:ba:e4:90:15:6d:01:71:c5:bd:de:48:1e:35:72:77:71:20: 02:00:ac:a8:90:ae:0e:b7:96:a5:8e:9d:65:d5:5e:f7:61:8f: d8:69:e6:02:46:65:7e:a4:9f:25:ce:5b:c7:77:a8:06:65:65: 37:dc:1a:40:52:ce:47:2b:80:12:0b:a1:8c:69:44:b3:f7:00: 08:bc:60:77:4f:65:c8:26:b0:fa:4e:80:4c:af:35:ce:56:c8: 74:84:cf:e4:88:fd:6e:c1:f6:d1:13:27:f9:eb:14:b3:a0:61: 15:91:67:ab:5e:ac:94:ab:f5:b5:50:e3:e1:9a:21:23:8b:ab: f2:ad:e8:e7:c7:58:4c:f1:51:f3:69:d7:d8:14:47:12:81:dd: 98:4c:e5:70:79:ca:d9:ad:07:2a:db:39:7c:42:02:bb:bb:00: b3:31:33:e3:55:26:23:07:90:21:23:2f:ec:0a:ec:8a:cc:7a: e8:3d:e7:56:09:11:98:bc:20:7d:d4:d8:9a:aa:77:6e:4d:66: 1e:16:96:89:d0:20:cf:2f:eb:b0:19:83:47:dd:c5:cb:18:ce: 28:1d:93:92:4f:66:6f:8d:5b:a6:2a:3b:da:25:df:5f:b5:4a: f5:03:36:50:aa:7a:69:4f:6c:04:d0:f2:00:c6:69:64:12:96: 1f:db:f9:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg1RTc0ODE0QTREMUNC REI5MzJFMTFFQzI4NDA5MDQ3MDgxRUVGMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnMOq8ABQO8junhh9rDHtAYfWZlIdnh+7g5xSg5nF0ZMXbtA8y mKXFIKWRbAd7dRz6Mv1nsAvhw8Rymf7PpupUuEmACoAySGKJPAkd3d9c1TU7y2NR 1rcDRFLlchziuhG6jIlLXa/QSiOulya5gXPOifLpDgJEjKfPUjS0IvOQXnLEOD3W 9ZXvD7RS4zqVyl+xnBZHsURzXEvvePMoYN50blSwFpHZIYIMvXjkbIAumRKUy65o 8R2tjE0Sx8K6iGXYVYOc/jOfJYqMNnlZDNXl/GL8AJgiLrotVvMdBX02rYBw8Qzt lPaDAQW3fm7rOanArgiMK0MEzKslQ5UYAmkvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhedIFKTRy9uTLhHsKECQRwge7yMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hlZElGS1RSeTl1VExoSHNL RUNRUndnZTd5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx niAwDQYJKoZIhvcNAQELBQADggEBAHy65JAVbQFxxb3eSB41cndxIAIArKiQrg63 lqWOnWXVXvdhj9hp5gJGZX6knyXOW8d3qAZlZTfcGkBSzkcrgBILoYxpRLP3AAi8 YHdPZcgmsPpOgEyvNc5WyHSEz+SI/W7B9tETJ/nrFLOgYRWRZ6terJSr9bVQ4+Ga ISOLq/Kt6OfHWEzxUfNp19gURxKB3ZhM5XB5ytmtByrbOXxCAru7ALMxM+NVJiMH kCEjL+wK7IrMeug951YJEZi8IH3U2Jqqd25NZh4WlonQIM8v67AZg0fdxcsYzigd k5JPZm+NW6YqO9ol31+1SvUDNlCqemlPbATQ8gDGaWQSlh/b+aw= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:13 2024 by rpki-client on console-ams.rpki-client.org