$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2CnytNR4tH8e9fAz8aDYfIHm64I.roa File: 2CnytNR4tH8e9fAz8aDYfIHm64I.roa (raw, json) Hash identifier: SRgup+NVjzgQDnyKVNLFL/iSydS8aWpPvpik9xnSLiM= Subject key identifier: D8:29:F2:B4:D4:78:B4:7F:1E:F5:F0:33:F1:A0:D8:7C:81:E6:EB:82 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DB5 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2CnytNR4tH8e9fAz8aDYfIHm64I.roa Signing time: Fri 01 Sep 2023 10:15:11 +0000 ROA not before: Fri 01 Sep 2023 10:15:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 49.159.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7605 (0x1db5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D829F2B4D478B47F1EF5F033F1A0D87C81E6EB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:c0:40:48:20:13:c6:ce:ee:ae:a6:3b:a6: b2:97:c5:c0:b7:8e:49:ad:2c:96:fa:e7:c1:3a:3c: 0a:37:80:6b:34:0b:49:ae:a1:b8:73:61:22:15:4f: 63:7a:51:95:47:17:b1:42:26:88:01:f0:d7:e1:87: b2:22:14:6e:08:9d:e7:89:3a:62:ef:d5:71:75:20: 04:a1:d4:62:2a:2e:05:77:e5:b9:7e:18:28:2d:1d: f0:2e:aa:dc:9d:c6:16:7b:5c:e2:b8:0b:63:cd:c7: 2d:44:75:9a:e3:59:75:5a:6a:68:b7:ee:c2:da:21: da:d4:5f:ed:2d:24:58:c1:d0:b7:88:d2:a5:ca:d7: bb:f6:05:e3:13:93:f8:be:14:94:e1:e7:4a:b3:4b: fe:0d:5f:9f:12:01:f2:f3:41:da:fc:7b:c6:a2:b4: 8b:e7:b9:3f:bd:32:d9:8c:95:57:d2:58:4e:57:78: 95:89:ad:39:59:17:62:f9:e1:d5:b9:27:8a:77:2d: 63:f9:4e:fe:2d:47:93:2d:c9:a1:5e:1f:7f:b1:d1: 80:9a:28:8c:2e:37:5e:ae:67:28:56:68:6e:f4:37: 16:c7:e4:3c:68:2e:62:c8:9b:b1:ff:63:d1:d4:62: 9c:65:3c:d7:65:72:df:2f:82:41:ff:a7:c8:ea:60: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:29:F2:B4:D4:78:B4:7F:1E:F5:F0:33:F1:A0:D8:7C:81:E6:EB:82 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2CnytNR4tH8e9fAz8aDYfIHm64I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.212.0/22 Signature Algorithm: sha256WithRSAEncryption 09:00:5d:84:01:c7:b5:52:8b:8d:2f:b3:76:61:05:60:5b:15: 31:56:9d:59:2a:64:e5:6e:a8:fc:36:7b:12:3a:16:f0:35:6f: d7:59:c5:82:31:58:0e:9f:38:ad:6b:6e:8b:50:f8:a4:66:89: 3c:67:3c:f2:52:bb:9a:5f:b9:f9:04:bf:b8:9d:ea:69:57:01: 99:91:12:1b:56:75:28:18:b5:9d:de:ad:86:9d:2b:fc:2a:24: 53:7d:17:5a:39:22:f9:ac:ac:99:77:cb:1b:a1:ea:b4:0e:01: c8:c3:d6:1e:be:f2:63:cb:65:3b:fd:53:58:d2:84:48:9c:0a: d2:f1:c2:1a:db:5b:3a:5c:63:e4:92:0d:b2:7f:37:7f:0c:88: a4:26:f8:3b:de:cc:b9:df:38:90:1a:60:39:9b:56:c4:85:63: d4:20:22:46:5b:57:60:73:37:11:c6:b6:9b:34:31:ff:22:22: d1:57:01:ea:52:29:28:6a:62:6d:66:7d:b6:ef:40:b0:9f:4f: 63:69:dd:87:fd:23:72:6b:98:a2:b9:c7:c5:54:17:8e:93:3d: 8c:09:61:97:1c:f1:4d:ea:ea:cb:84:5d:c6:8c:79:43:ce:bf: f6:95:cd:2d:48:99:dd:58:92:ef:f2:89:6a:c3:8e:f3:0d:50: c5:51:57:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ4MjlGMkI0RDQ3OEI0 N0YxRUY1RjAzM0YxQTBEODdDODFFNkVCODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb3sBASCATxs7urqY7prKXxcC3jkmtLJb658E6PAo3gGs0C0mu obhzYSIVT2N6UZVHF7FCJogB8Nfhh7IiFG4IneeJOmLv1XF1IASh1GIqLgV35bl+ GCgtHfAuqtydxhZ7XOK4C2PNxy1EdZrjWXVaami37sLaIdrUX+0tJFjB0LeI0qXK 17v2BeMTk/i+FJTh50qzS/4NX58SAfLzQdr8e8aitIvnuT+9MtmMlVfSWE5XeJWJ rTlZF2L54dW5J4p3LWP5Tv4tR5MtyaFeH3+x0YCaKIwuN16uZyhWaG70NxbH5Dxo LmLIm7H/Y9HUYpxlPNdlct8vgkH/p8jqYNqjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2CnytNR4tH8e9fAz8aDYfIHm64IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJDbnl0TlI0dEg4ZTlmQXo4 YURZZklIbTY0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n9QwDQYJKoZIhvcNAQELBQADggEBAAkAXYQBx7VSi40vs3ZhBWBbFTFWnVkqZOVu qPw2exI6FvA1b9dZxYIxWA6fOK1rbotQ+KRmiTxnPPJSu5pfufkEv7id6mlXAZmR EhtWdSgYtZ3erYadK/wqJFN9F1o5IvmsrJl3yxuh6rQOAcjD1h6+8mPLZTv9U1jS hEicCtLxwhrbWzpcY+SSDbJ/N38MiKQm+DvezLnfOJAaYDmbVsSFY9QgIkZbV2Bz NxHGtps0Mf8iItFXAepSKShqYm1mfbbvQLCfT2Np3Yf9I3JrmKK5x8VUF46TPYwJ YZcc8U3q6suEXcaMeUPOv/aVzS1Imd1Yku/yiWrDjvMNUMVRV1Q= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org