$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa File: tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa (raw, json) Hash identifier: 1Z/t3CU30uTwoa6aqkcTjF5k/IugGxJctVT2qerj8nA= Subject key identifier: B7:1F:F2:6F:B6:64:19:11:2F:FF:85:98:4E:B4:C5:DE:DF:70:D9:E2 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DCE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa Signing time: Fri 01 Sep 2023 10:15:19 +0000 ROA not before: Fri 01 Sep 2023 10:15:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 49.159.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7630 (0x1dce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B71FF26FB66419112FFF85984EB4C5DEDF70D9E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:8a:ac:cc:6f:d3:47:ad:fa:8c:bc:6f:dc: f1:3e:cc:d7:12:8e:72:1c:d9:54:d3:98:41:d4:80: 63:17:3b:29:1b:6d:a6:e1:13:7d:da:0a:3d:0d:1f: db:de:38:0d:c9:6c:5f:e8:99:14:94:4a:2a:1a:93: 05:37:99:a6:e0:ea:42:fb:e4:7c:86:2a:1f:65:64: df:2f:b0:43:2c:22:ce:a6:09:89:b7:0a:23:19:00: eb:a7:0b:5a:e2:93:3f:97:f5:38:58:08:eb:f5:2f: 79:cf:db:30:33:0b:bc:a1:e6:c4:b0:af:09:a7:35: fe:a7:8c:b3:57:c9:ee:e1:78:af:95:00:a7:3a:48: 21:3a:a7:3a:61:96:79:a1:5a:83:7f:b3:4a:33:ad: 77:bb:b7:96:75:f2:85:99:66:f2:62:ce:cc:a6:bc: 68:2e:dd:ea:ff:e5:13:e0:48:9b:64:b3:8d:9f:4e: e8:09:37:46:24:dd:df:aa:29:0d:34:23:b5:69:ec: 58:43:f9:a8:db:47:a5:92:f6:19:d1:f9:e8:b1:bf: 0f:16:a9:81:14:55:61:a8:43:e3:46:ab:eb:c9:c7: 5a:77:53:01:29:73:c0:8b:73:aa:d9:89:90:c0:53: 7b:9a:c3:6a:45:1d:77:72:09:02:0a:dd:32:e4:e1: 33:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1F:F2:6F:B6:64:19:11:2F:FF:85:98:4E:B4:C5:DE:DF:70:D9:E2 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.218.0/23 Signature Algorithm: sha256WithRSAEncryption 20:0a:8c:f9:05:52:a0:ce:1e:28:50:fc:90:35:17:8a:e1:01: f8:cf:72:fa:a4:4f:0c:9d:58:ab:91:68:1d:45:9d:24:ad:ee: d7:2f:91:3e:28:3f:cd:6d:a3:20:e2:dd:f2:3a:40:43:f4:0b: 22:60:0d:e7:dc:56:f6:11:57:25:d6:1b:49:3b:a2:2d:57:4e: b9:ca:ec:b7:8b:ba:2b:07:00:0d:20:b7:7f:bb:93:fa:d4:2d: 78:76:ed:b8:55:a8:e4:c2:b1:26:8d:27:88:b6:b6:89:92:07: d6:e9:81:24:22:fb:95:88:44:3d:a9:00:e9:0b:02:3a:81:03: f4:20:a0:d5:88:31:7d:19:2a:61:3e:47:82:20:54:52:be:8b: ce:71:f5:5e:83:9c:48:15:7b:d5:34:27:5f:5f:cd:f3:3e:b3: b8:8b:d3:5a:b6:5a:d9:cd:ac:24:da:cd:f1:28:9c:c3:20:01: e2:cc:fa:e7:a5:60:f8:a8:43:0f:4b:c0:a6:99:16:a3:b1:60: 5e:43:69:98:65:ea:81:7a:48:04:dc:98:dd:6b:95:ec:9f:86: 49:be:09:0b:b7:d3:f4:b0:a3:12:19:e9:29:7c:0f:9e:e8:b7: fa:bd:34:33:da:df:d2:50:5a:4c:b6:14:47:89:c3:04:01:25: 5d:20:db:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3MUZGMjZGQjY2NDE5 MTEyRkZGODU5ODRFQjRDNURFREY3MEQ5RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6JIqszG/TR636jLxv3PE+zNcSjnIc2VTTmEHUgGMXOykbbabh E33aCj0NH9veOA3JbF/omRSUSioakwU3mabg6kL75HyGKh9lZN8vsEMsIs6mCYm3 CiMZAOunC1rikz+X9ThYCOv1L3nP2zAzC7yh5sSwrwmnNf6njLNXye7heK+VAKc6 SCE6pzphlnmhWoN/s0ozrXe7t5Z18oWZZvJizsymvGgu3er/5RPgSJtks42fTugJ N0Yk3d+qKQ00I7Vp7FhD+ajbR6WS9hnR+eixvw8WqYEUVWGoQ+NGq+vJx1p3UwEp c8CLc6rZiZDAU3uaw2pFHXdyCQIK3TLk4TOPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtx/yb7ZkGREv/4WYTrTF3t9w2eIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3R4X3liN1prR1JFdl80V1lU clRGM3Q5dzJlSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEx n9owDQYJKoZIhvcNAQELBQADggEBACAKjPkFUqDOHihQ/JA1F4rhAfjPcvqkTwyd WKuRaB1FnSSt7tcvkT4oP81toyDi3fI6QEP0CyJgDefcVvYRVyXWG0k7oi1XTrnK 7LeLuisHAA0gt3+7k/rULXh27bhVqOTCsSaNJ4i2tomSB9bpgSQi+5WIRD2pAOkL AjqBA/QgoNWIMX0ZKmE+R4IgVFK+i85x9V6DnEgVe9U0J19fzfM+s7iL01q2WtnN rCTazfEonMMgAeLM+uelYPioQw9LwKaZFqOxYF5DaZhl6oF6SATcmN1rleyfhkm+ CQu30/SwoxIZ6Sl8D57ot/q9NDPa39JQWky2FEeJwwQBJV0g2yg= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org