$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa File: 1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa (raw, json) Hash identifier: tOHRTcP5J/7UWPn51cdxOdktdSENFVqA0g/FjX0Ggdc= Subject key identifier: D6:7D:42:88:BD:BE:FB:B8:0D:94:78:4A:6D:24:D5:46:A2:34:7C:9E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EA4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa Signing time: Fri 01 Sep 2023 10:16:18 +0000 ROA not before: Fri 01 Sep 2023 10:16:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7844 (0x1ea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D67D4288BDBEFBB80D94784A6D24D546A2347C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:71:6e:7f:d0:12:dd:76:3d:18:0c:5c:f0: e5:56:02:ac:47:6c:fc:a7:62:7f:ac:97:27:14:8d: 7b:04:5c:ad:a8:af:30:ef:8b:d8:2c:5c:ff:84:1b: f0:db:f8:30:85:06:c7:8a:69:ce:8e:59:c2:cb:2d: a3:66:56:6f:a0:4d:03:8d:33:fa:d5:0d:49:a7:96: e1:c4:9d:17:0d:4a:da:6c:16:35:5e:6a:25:6c:d0: e0:2b:50:fa:09:8f:04:61:73:69:29:8f:43:94:47: 02:55:d7:a8:89:ab:cb:c1:60:c2:0f:56:e8:41:bc: 95:54:09:2c:ca:c7:1d:19:bc:88:21:f8:49:39:d5: a1:1a:17:e0:54:34:25:24:08:21:1b:4a:72:1a:89: 7f:9f:d5:5a:d0:82:df:e0:dd:af:63:0f:c1:a1:97: d7:4a:e0:49:a4:92:b4:37:74:5b:66:15:17:b1:7b: f3:ba:fc:5b:23:37:0f:44:51:6f:69:38:65:2e:e9: fb:ce:da:f6:c4:00:2e:60:7e:fc:85:17:46:5f:2a: 54:1d:ad:af:5f:d0:e3:a1:11:b5:12:70:e8:31:03: e2:82:e0:55:0d:21:50:35:fe:49:5f:95:99:71:e3: b0:03:53:44:50:90:7d:12:f2:70:9d:1b:02:59:c3: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7D:42:88:BD:BE:FB:B8:0D:94:78:4A:6D:24:D5:46:A2:34:7C:9E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.57.0/24 Signature Algorithm: sha256WithRSAEncryption 97:97:d9:a4:43:79:bf:4c:44:55:27:2a:48:b0:d8:3d:cc:1a: 32:5c:cb:96:5c:85:52:4f:62:2d:36:52:b6:41:bd:e3:01:ab: 46:ca:71:40:34:db:24:fd:fd:a0:8b:53:ce:fe:12:09:78:d1: 75:6b:40:28:07:75:65:25:79:0c:ba:05:fc:d1:7b:37:80:37: d0:7c:32:e3:1d:92:87:c0:62:41:11:1a:be:9c:33:3c:dc:68: 84:25:ca:6d:b3:e3:26:98:35:63:3e:26:39:79:1e:fc:86:2d: 9f:68:a4:67:2e:b6:39:38:66:bb:6d:78:96:b7:f9:26:ed:db: 24:b8:cd:1f:c8:c1:5b:f2:02:6f:ef:2b:d9:77:aa:ab:fa:17: 9e:08:a9:f7:bb:21:3d:3b:10:e4:7d:23:ac:f0:c6:83:a7:85: b6:b7:a9:83:48:98:7e:6a:54:5b:3a:07:ce:8e:fc:0d:ed:da: 67:81:af:99:f1:70:aa:21:2e:46:19:59:ca:93:58:79:42:80: 52:00:f5:2f:de:ff:a0:58:23:5d:02:02:05:29:e5:c2:d5:44: 11:ac:58:43:32:a7:df:ef:10:18:a6:c9:9f:b0:d8:29:0e:22: f5:a5:8d:ec:a8:aa:62:d7:3b:6f:1d:ce:d6:ab:ef:44:82:67: 35:18:f5:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ2N0Q0Mjg4QkRCRUZC QjgwRDk0Nzg0QTZEMjRENTQ2QTIzNDdDOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS3nFuf9AS3XY9GAxc8OVWAqxHbPynYn+slycUjXsEXK2orzDv i9gsXP+EG/Db+DCFBseKac6OWcLLLaNmVm+gTQONM/rVDUmnluHEnRcNStpsFjVe aiVs0OArUPoJjwRhc2kpj0OURwJV16iJq8vBYMIPVuhBvJVUCSzKxx0ZvIgh+Ek5 1aEaF+BUNCUkCCEbSnIaiX+f1VrQgt/g3a9jD8Ghl9dK4EmkkrQ3dFtmFRexe/O6 /FsjNw9EUW9pOGUu6fvO2vbEAC5gfvyFF0ZfKlQdra9f0OOhEbUScOgxA+KC4FUN IVA1/klflZlx47ADU0RQkH0S8nCdGwJZw2uzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1n1CiL2++7gNlHhKbSTVRqI0fJ4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFuMUNpTDItLTdnTmxIaEti U1RWUnFJMGZKNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx njkwDQYJKoZIhvcNAQELBQADggEBAJeX2aRDeb9MRFUnKkiw2D3MGjJcy5ZchVJP Yi02UrZBveMBq0bKcUA02yT9/aCLU87+Egl40XVrQCgHdWUleQy6BfzRezeAN9B8 MuMdkofAYkERGr6cMzzcaIQlym2z4yaYNWM+Jjl5HvyGLZ9opGcutjk4ZrtteJa3 +Sbt2yS4zR/IwVvyAm/vK9l3qqv6F54Iqfe7IT07EOR9I6zwxoOnhba3qYNImH5q VFs6B86O/A3t2meBr5nxcKohLkYZWcqTWHlCgFIA9S/e/6BYI10CAgUp5cLVRBGs WEMyp9/vEBimyZ+w2CkOIvWljeyoqmLXO28dztar70SCZzUY9fg= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org