$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3YZ-sC6H-loPToHahP6pNc-v1Qg.roa File: 3YZ-sC6H-loPToHahP6pNc-v1Qg.roa (raw, json) Hash identifier: vZEfcnkSH70wQIDYTe8KLdrqMcUpUYegT/v8YYoiD5s= Subject key identifier: DD:86:7E:B0:2E:87:FA:5A:0F:4E:81:DA:84:FE:A9:35:CF:AF:D5:08 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D69 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3YZ-sC6H-loPToHahP6pNc-v1Qg.roa Signing time: Fri 01 Sep 2023 10:14:47 +0000 ROA not before: Fri 01 Sep 2023 10:14:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7529 (0x1d69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DD867EB02E87FA5A0F4E81DA84FEA935CFAFD508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:78:5d:5c:c1:c4:4b:6a:38:dd:49:fc:ac: 39:39:60:f1:c8:3e:0c:47:06:0d:3b:f6:84:f8:4c: a3:e1:d7:88:89:9a:d9:27:c4:d1:c6:91:56:ad:14: 08:59:d5:f8:7f:3d:00:77:eb:47:ec:cf:5a:a8:7d: 6d:08:0d:5f:21:b3:5b:92:e2:45:29:90:79:79:40: 13:79:98:25:f5:14:0e:58:10:c3:e2:de:b3:a7:f2: 09:3a:e5:ea:51:e8:49:6f:fe:d3:24:8b:8e:c1:3d: b0:06:0d:11:7f:75:a7:6c:a1:6f:63:1f:a6:67:c1: a4:0f:a3:de:87:f1:10:1d:5c:6d:26:49:4b:27:1d: 27:aa:19:cc:b9:31:4a:6e:c5:61:99:be:6b:8d:90: 41:10:1d:ec:5c:a0:38:4b:57:d9:b0:ad:c5:13:f6: 43:67:e3:71:12:8b:f7:68:05:19:05:c8:11:15:d8: 8f:0c:aa:2f:58:67:d7:a4:43:41:67:01:28:bb:8c: 4b:4f:36:84:0d:c0:57:b6:9c:2c:94:69:9f:7a:4e: da:e5:12:d6:c9:ea:48:12:a9:a7:ca:06:79:13:f3: e8:df:ea:2b:8f:bb:1e:c3:cc:98:cf:b8:01:c8:3b: 64:85:4b:5f:4e:f5:0e:5b:16:c6:55:c1:a5:53:15: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:86:7E:B0:2E:87:FA:5A:0F:4E:81:DA:84:FE:A9:35:CF:AF:D5:08 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3YZ-sC6H-loPToHahP6pNc-v1Qg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:30:e7:c6:50:e9:09:90:a6:3f:e7:e4:fe:34:2c:af:a9:5d: 59:69:9a:5c:ad:4f:be:6e:e6:f7:d8:82:a1:a9:c1:43:43:b9: 7c:af:de:53:82:4e:44:ec:97:84:b9:e0:3c:cd:be:dd:d0:1d: 53:8a:3c:c4:58:d2:10:a2:68:3d:dd:ce:be:3e:90:a2:8d:66: 84:b3:da:0a:22:9f:7a:78:1d:10:7a:57:fc:68:d1:0c:3b:13: 53:d6:c4:bd:3a:69:be:db:d8:fd:11:da:17:94:d1:bc:63:67: 30:b6:81:1e:1b:89:f4:2b:b1:98:58:49:ae:54:bd:91:3c:30: 46:42:66:14:0f:6a:80:62:2a:8a:7d:31:71:c1:c8:52:f1:21: 45:c8:c8:ea:fb:a8:84:24:fc:5b:b4:eb:15:1a:c6:95:88:e3: dd:1d:0c:f1:ed:2e:3d:75:c5:61:74:84:43:0d:ec:16:62:0f: b7:9b:0f:9c:d0:0a:48:44:5f:24:63:4d:de:91:22:dc:17:ab: b1:c9:39:7c:63:63:db:a5:2d:ca:16:5f:5e:21:41:d8:25:b4: 84:00:61:18:a7:c1:36:c9:5f:0a:e1:c8:71:1f:37:11:8e:00: 2c:cd:ef:df:11:71:6c:67:01:6d:8b:32:1f:ae:55:bc:3e:df: b8:71:05:c2 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICHWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEREODY3RUIwMkU4N0ZB NUEwRjRFODFEQTg0RkVBOTM1Q0ZBRkQ1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPlXhdXMHES2o43Un8rDk5YPHIPgxHBg079oT4TKPh14iJmtkn xNHGkVatFAhZ1fh/PQB360fsz1qofW0IDV8hs1uS4kUpkHl5QBN5mCX1FA5YEMPi 3rOn8gk65epR6Elv/tMki47BPbAGDRF/dadsoW9jH6ZnwaQPo96H8RAdXG0mSUsn HSeqGcy5MUpuxWGZvmuNkEEQHexcoDhLV9mwrcUT9kNn43ESi/doBRkFyBEV2I8M qi9YZ9ekQ0FnASi7jEtPNoQNwFe2nCyUaZ96TtrlEtbJ6kgSqafKBnkT8+jf6iuP ux7DzJjPuAHIO2SFS19O9Q5bFsZVwaVTFWBPAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU3YZ+sC6H+loPToHahP6pNc+v1QgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNZWi1zQzZILWxvUFRvSGFo UDZwTmMtdjFRZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx njANBgkqhkiG9w0BAQsFAAOCAQEAEjDnxlDpCZCmP+fk/jQsr6ldWWmaXK1Pvm7m 99iCoanBQ0O5fK/eU4JOROyXhLngPM2+3dAdU4o8xFjSEKJoPd3Ovj6Qoo1mhLPa CiKfengdEHpX/GjRDDsTU9bEvTppvtvY/RHaF5TRvGNnMLaBHhuJ9CuxmFhJrlS9 kTwwRkJmFA9qgGIqin0xccHIUvEhRcjI6vuohCT8W7TrFRrGlYjj3R0M8e0uPXXF YXSEQw3sFmIPt5sPnNAKSERfJGNN3pEi3Bersck5fGNj26UtyhZfXiFB2CW0hABh GKfBNslfCuHIcR83EY4ALM3v3xFxbGcBbYsyH65VvD7fuHEFwg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org