$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o4HgJnzieJCKErKQDrjOaUoUi1k.roa File: o4HgJnzieJCKErKQDrjOaUoUi1k.roa (raw, json) Hash identifier: yDFKdFmQ3GWFkN1gHjpXroOPpcEdVUwodloozZtGN+o= Subject key identifier: A3:81:E0:26:7C:E2:78:90:8A:12:B2:90:0E:B8:CE:69:4A:14:8B:59 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D6C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o4HgJnzieJCKErKQDrjOaUoUi1k.roa Signing time: Fri 01 Sep 2023 10:14:48 +0000 ROA not before: Fri 01 Sep 2023 10:14:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7532 (0x1d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A381E0267CE278908A12B2900EB8CE694A148B59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:c6:20:e1:f8:e7:09:1f:2a:58:c9:ab:3d: 05:2e:de:ba:d5:ee:65:45:ba:62:d3:57:02:3d:fe: 08:71:56:4b:91:b8:b6:2e:24:64:98:6d:95:24:a8: 78:f4:3b:6b:df:fe:2b:2e:03:70:3b:22:54:c8:49: ac:fb:ff:8f:d6:02:6b:46:bd:67:51:8f:5e:77:97: 78:ac:7e:48:60:f1:54:8c:42:19:65:d1:33:90:90: d9:98:93:e9:3a:b2:93:ac:1e:62:8d:98:c4:65:16: 29:c1:c2:e2:54:f7:f7:91:10:cf:0b:3a:1b:a2:1c: 76:1e:5c:ed:f3:06:81:f9:05:50:a3:36:d5:a2:52: 0e:7a:3b:eb:1c:00:17:c7:dc:44:14:27:c7:35:71: da:f1:3b:f5:af:ac:1c:65:b6:fb:84:c0:75:96:e7: a3:81:2a:51:cf:6a:e3:dc:79:1c:b6:84:b0:55:7a: e8:78:e2:11:96:cd:2b:dd:b7:5a:6c:1c:0d:94:21: 0e:54:b7:91:3c:e0:21:88:85:5d:53:c7:7d:52:93: 6c:6c:86:41:de:58:60:b4:f8:bf:ab:12:b2:4e:70: 54:ae:02:c1:9b:c7:a7:aa:b3:08:96:f5:3b:aa:66: 4d:5a:44:3e:cf:60:26:91:5e:70:b6:2e:db:ab:f9: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:81:E0:26:7C:E2:78:90:8A:12:B2:90:0E:B8:CE:69:4A:14:8B:59 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o4HgJnzieJCKErKQDrjOaUoUi1k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.232.0/21 Signature Algorithm: sha256WithRSAEncryption 47:de:9e:c3:30:7d:65:89:35:20:f6:11:46:8f:ee:af:9c:da: ee:25:fc:fc:94:a8:9c:7f:15:f3:85:95:ec:11:54:12:21:ca: 08:2e:f0:02:48:35:99:00:56:1c:2f:34:06:27:b9:24:8f:ec: 16:dd:89:7e:1d:b7:5d:f1:bc:ac:8d:ba:81:fd:4a:34:8f:c6: 43:41:1d:e7:ea:b4:69:c2:79:e6:04:d7:7a:3d:50:01:ff:fb: 2d:b6:32:95:4e:12:2c:54:38:75:fd:c6:36:da:bc:42:0f:1f: ac:11:12:5d:2a:d9:dd:a0:56:c8:52:82:03:f2:65:36:ed:a2: 59:1b:f9:c1:32:bf:40:ec:bb:c5:74:1d:80:77:2b:b2:7d:1f: 5c:e8:0c:55:f2:a4:7a:10:a9:68:08:4f:62:14:75:5e:48:f9: 69:bd:69:e4:1f:14:2e:45:a9:39:95:73:12:dc:92:f3:71:00: 2d:f4:1b:a3:91:b6:37:d4:9b:76:f0:1c:ff:6b:08:b1:de:61: 81:f9:ae:1f:50:50:0f:0e:5f:84:00:f7:4e:77:57:c2:87:c4: 07:02:d5:02:57:d0:24:3b:d8:91:0d:b2:ab:fb:78:81:1b:46: 49:bc:a6:56:37:b2:bb:ab:54:3a:0a:e0:20:df:65:b8:62:7a: bc:a0:86:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEzODFFMDI2N0NFMjc4 OTA4QTEyQjI5MDBFQjhDRTY5NEExNDhCNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR3cYg4fjnCR8qWMmrPQUu3rrV7mVFumLTVwI9/ghxVkuRuLYu JGSYbZUkqHj0O2vf/isuA3A7IlTISaz7/4/WAmtGvWdRj153l3isfkhg8VSMQhll 0TOQkNmYk+k6spOsHmKNmMRlFinBwuJU9/eREM8LOhuiHHYeXO3zBoH5BVCjNtWi Ug56O+scABfH3EQUJ8c1cdrxO/WvrBxltvuEwHWW56OBKlHPauPceRy2hLBVeuh4 4hGWzSvdt1psHA2UIQ5Ut5E84CGIhV1Tx31Sk2xshkHeWGC0+L+rErJOcFSuAsGb x6eqswiW9TuqZk1aRD7PYCaRXnC2Ltur+VqJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUo4HgJnzieJCKErKQDrjOaUoUi1kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL280SGdKbnppZUpDS0VyS1FE cmpPYVVvVWkxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n+gwDQYJKoZIhvcNAQELBQADggEBAEfensMwfWWJNSD2EUaP7q+c2u4l/PyUqJx/ FfOFlewRVBIhyggu8AJINZkAVhwvNAYnuSSP7BbdiX4dt13xvKyNuoH9SjSPxkNB HefqtGnCeeYE13o9UAH/+y22MpVOEixUOHX9xjbavEIPH6wREl0q2d2gVshSggPy ZTbtolkb+cEyv0Dsu8V0HYB3K7J9H1zoDFXypHoQqWgIT2IUdV5I+Wm9aeQfFC5F qTmVcxLckvNxAC30G6ORtjfUm3bwHP9rCLHeYYH5rh9QUA8OX4QA9053V8KHxAcC 1QJX0CQ72JENsqv7eIEbRkm8plY3srurVDoK4CDfZbhieryghus= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org