$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa File: 2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa (raw, json) Hash identifier: GfgsPoY+ivJBJ/AMT7jVMd1PoeoW7fCofX8V+NOW4WY= Subject key identifier: DA:37:13:AE:DE:E7:60:A9:09:66:E6:4F:34:77:7A:1F:06:2A:A5:03 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D94 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa Signing time: Fri 01 Sep 2023 10:15:01 +0000 ROA not before: Fri 01 Sep 2023 10:15:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7572 (0x1d94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DA3713AEDEE760A90966E64F34777A1F062AA503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:b8:90:3b:19:ef:92:91:0c:08:07:ed:b0: 3c:6c:6d:2e:5e:fd:f5:aa:34:32:8f:06:02:78:45: 11:b0:8a:82:ac:26:84:4d:1f:5a:96:bb:5b:ce:1f: fe:80:d0:28:8d:82:c3:c6:f3:c3:3b:4e:ea:32:ae: 76:0c:30:64:99:b3:21:7d:5f:fe:a8:a9:44:78:be: 1c:b8:f4:32:9d:a9:10:96:b7:31:1d:2c:5e:de:11: 35:80:53:72:d8:e2:8e:2f:00:62:3d:f5:75:04:a1: 2f:de:15:05:aa:9d:b8:49:04:8e:eb:60:47:58:38: 2a:1c:61:37:a4:a2:23:b2:75:a2:fe:b4:03:48:8a: f9:a4:d0:cc:7d:b6:9b:d5:4e:37:44:99:d7:d6:c1: 75:59:a1:27:5a:a4:49:e2:97:9d:99:b4:aa:8d:89: 9d:84:94:ff:38:a7:2a:07:11:98:1f:9e:26:6d:12: f3:f0:01:88:da:e6:94:38:3c:4c:fe:1d:0d:e2:91: 65:28:07:d2:13:07:38:37:7d:45:9e:a0:36:a3:80: f1:11:45:b1:69:c0:cc:b4:37:72:cf:0c:eb:39:c6: e0:20:2b:df:b2:c2:03:df:15:05:5a:fe:80:21:f7: e5:9d:93:8f:0e:5d:d7:c3:2b:8a:b1:f3:61:6c:46: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:37:13:AE:DE:E7:60:A9:09:66:E6:4F:34:77:7A:1F:06:2A:A5:03 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.40.0/21 Signature Algorithm: sha256WithRSAEncryption 19:9f:14:1d:84:7b:7a:48:4e:00:f5:a9:d2:d1:16:97:4b:6f: e9:b9:ae:8a:27:1b:49:76:a1:4d:93:50:09:e8:1e:89:6e:33: 74:41:31:e2:25:5d:b7:ba:f3:c6:87:bb:84:fb:6f:33:b1:9f: 0d:57:15:71:49:1f:34:98:e6:0d:38:2f:bc:b6:7a:28:0c:8e: 7c:5a:e8:3b:94:88:cd:04:f6:54:57:55:31:56:3e:4a:5c:9a: ac:5b:98:47:18:57:6a:c0:1b:53:0e:15:f5:00:50:aa:42:ee: 24:a7:bd:70:18:5e:2b:4d:37:b1:af:b8:53:cb:bb:cf:09:b2: e2:22:bd:6b:d6:b1:41:8d:5d:f4:d4:f9:0e:0e:9f:49:90:b5: 1c:02:2c:b3:5a:e8:e5:d4:83:84:d7:c6:15:9f:b2:9e:98:c4: 5e:85:e3:b3:e4:cf:10:e8:0d:3d:e1:05:67:d4:a5:6e:90:4f: 52:98:a3:e6:9c:87:7a:21:3b:42:b7:d1:b0:b6:31:77:b1:6c: 08:14:fa:21:66:1b:02:2b:36:c5:36:63:98:b7:05:27:88:be: 0c:21:65:29:ce:4c:b8:9d:5b:bc:52:ab:a1:2c:52:20:38:ff: 30:f8:94:97:69:79:4b:63:9e:a4:0a:7f:75:1e:5e:56:08:8c: 4d:8c:0a:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERBMzcxM0FFREVFNzYw QTkwOTY2RTY0RjM0Nzc3QTFGMDYyQUE1MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1eriQOxnvkpEMCAftsDxsbS5e/fWqNDKPBgJ4RRGwioKsJoRN H1qWu1vOH/6A0CiNgsPG88M7TuoyrnYMMGSZsyF9X/6oqUR4vhy49DKdqRCWtzEd LF7eETWAU3LY4o4vAGI99XUEoS/eFQWqnbhJBI7rYEdYOCocYTekoiOydaL+tANI ivmk0Mx9tpvVTjdEmdfWwXVZoSdapEnil52ZtKqNiZ2ElP84pyoHEZgfniZtEvPw AYja5pQ4PEz+HQ3ikWUoB9ITBzg3fUWeoDajgPERRbFpwMy0N3LPDOs5xuAgK9+y wgPfFQVa/oAh9+Wdk48OXdfDK4qx82FsRoINAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2jcTrt7nYKkJZuZPNHd6HwYqpQMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJqY1RydDduWUtrSlp1WlBO SGQ2SHdZcXBRTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nygwDQYJKoZIhvcNAQELBQADggEBABmfFB2Ee3pITgD1qdLRFpdLb+m5roonG0l2 oU2TUAnoHoluM3RBMeIlXbe688aHu4T7bzOxnw1XFXFJHzSY5g04L7y2eigMjnxa 6DuUiM0E9lRXVTFWPkpcmqxbmEcYV2rAG1MOFfUAUKpC7iSnvXAYXitNN7GvuFPL u88JsuIivWvWsUGNXfTU+Q4On0mQtRwCLLNa6OXUg4TXxhWfsp6YxF6F47PkzxDo DT3hBWfUpW6QT1KYo+ach3ohO0K30bC2MXexbAgU+iFmGwIrNsU2Y5i3BSeIvgwh ZSnOTLidW7xSq6EsUiA4/zD4lJdpeUtjnqQKf3UeXlYIjE2MCnU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org