$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Aqc4jsKR3wyItIKHEHblfOMwuxk.roa File: Aqc4jsKR3wyItIKHEHblfOMwuxk.roa (raw, json) Hash identifier: E/eeClID8fdSi6TgI4Acmvw+Qjp3ToautRfQJfIHHrg= Subject key identifier: 02:A7:38:8E:C2:91:DF:0C:88:B4:82:87:10:76:E5:7C:E3:30:BB:19 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D9D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Aqc4jsKR3wyItIKHEHblfOMwuxk.roa Signing time: Fri 01 Sep 2023 10:15:04 +0000 ROA not before: Fri 01 Sep 2023 10:15:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7581 (0x1d9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=02A7388EC291DF0C88B482871076E57CE330BB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:42:0e:9d:f4:ec:0f:82:fd:92:f7:bb:6e: 14:ca:22:16:8b:b4:1f:b1:dc:e4:44:c0:fc:fa:bc: 67:22:f0:81:d6:c9:d5:c2:01:b8:b6:79:9c:f3:5c: 63:d3:c5:77:60:fe:45:45:2b:fe:24:be:bc:27:58: 3f:57:dc:bd:d2:4f:12:97:95:82:a7:7a:a0:c9:d9: e5:e5:9e:67:c6:16:b4:e6:e9:09:91:70:1a:72:86: 21:aa:8d:74:9d:8a:62:fc:1f:2e:1b:af:3c:30:e9: 14:8a:a5:db:47:a9:83:fc:a3:8f:92:35:64:0a:6c: 40:3a:e3:ea:28:55:9a:6d:f9:6d:3e:8d:ab:65:72: 37:e8:39:c6:95:4e:cd:ea:24:13:7b:f2:c9:e2:0d: 82:1f:f4:85:49:45:d1:5d:a2:c3:e2:a3:8d:d2:c4: 79:70:2b:56:6a:6f:ab:2f:38:bd:4b:ce:c5:c9:9b: 72:34:54:1e:e2:e9:85:0d:79:6c:36:c9:05:72:48: e2:9e:9e:de:d9:2d:a7:ae:1a:25:29:fa:a4:eb:a1: 3e:46:7a:f0:61:6e:25:9a:eb:ac:ec:ce:df:da:0a: d8:72:8e:f6:6c:5b:61:52:dc:22:e9:10:19:ba:d2: 6f:da:13:30:f7:9c:76:3d:41:65:1a:4d:20:e4:1e: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A7:38:8E:C2:91:DF:0C:88:B4:82:87:10:76:E5:7C:E3:30:BB:19 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Aqc4jsKR3wyItIKHEHblfOMwuxk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.240.0/21 Signature Algorithm: sha256WithRSAEncryption 25:e7:e1:3f:96:5a:ac:c8:01:46:c2:b5:34:62:e1:2c:f1:f9: ad:28:5d:23:9e:c9:ce:ae:a2:24:2a:05:b6:f8:40:3e:dd:23: f1:b4:4a:11:74:a8:de:c4:4a:b4:d7:ce:99:43:53:6f:e0:26: 7b:3f:72:e5:18:dd:fa:71:be:f0:1a:db:c7:85:c9:55:51:c4: c9:46:b9:d1:5f:72:03:bf:96:e4:c7:7e:f6:89:c6:25:57:8e: d5:b7:49:33:a9:2f:d7:19:d9:8e:00:25:5d:71:fd:d1:76:22: ba:21:7b:4a:36:7a:72:15:4b:2e:57:78:f8:c1:24:c1:6c:b6: be:37:85:7d:4c:8c:40:2e:20:f7:b5:bc:c0:ae:37:c3:74:d2: 48:22:f8:54:00:e2:c5:ba:4c:23:40:0a:b7:f4:f4:22:de:25: f4:27:e5:3b:04:7f:78:a3:f1:58:1d:09:41:2f:16:b7:fc:a0: 04:3a:7a:f7:09:d1:e7:d5:a7:e9:a0:89:ec:d0:e8:a9:25:00: 59:7b:7f:08:ae:1d:ba:0f:0c:c9:a7:2f:02:87:7d:6d:67:c6: 5b:f9:26:fc:c3:8d:ce:27:aa:69:02:b2:52:a2:02:ae:35:58: 2b:bc:4b:35:4b:26:de:fe:1e:7d:78:0a:a9:71:e1:e7:10:6e: ad:d7:b2:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAyQTczODhFQzI5MURG MEM4OEI0ODI4NzEwNzZFNTdDRTMzMEJCMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQiEIOnfTsD4L9kve7bhTKIhaLtB+x3OREwPz6vGci8IHWydXC Abi2eZzzXGPTxXdg/kVFK/4kvrwnWD9X3L3STxKXlYKneqDJ2eXlnmfGFrTm6QmR cBpyhiGqjXSdimL8Hy4brzww6RSKpdtHqYP8o4+SNWQKbEA64+ooVZpt+W0+jatl cjfoOcaVTs3qJBN78sniDYIf9IVJRdFdosPio43SxHlwK1Zqb6svOL1LzsXJm3I0 VB7i6YUNeWw2yQVySOKent7ZLaeuGiUp+qTroT5GevBhbiWa66zszt/aCthyjvZs W2FS3CLpEBm60m/aEzD3nHY9QWUaTSDkHgLXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAqc4jsKR3wyItIKHEHblfOMwuxkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FxYzRqc0tSM3d5SXRJS0hF SGJsZk9Nd3V4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nvAwDQYJKoZIhvcNAQELBQADggEBACXn4T+WWqzIAUbCtTRi4Szx+a0oXSOeyc6u oiQqBbb4QD7dI/G0ShF0qN7ESrTXzplDU2/gJns/cuUY3fpxvvAa28eFyVVRxMlG udFfcgO/luTHfvaJxiVXjtW3STOpL9cZ2Y4AJV1x/dF2Irohe0o2enIVSy5XePjB JMFstr43hX1MjEAuIPe1vMCuN8N00kgi+FQA4sW6TCNACrf09CLeJfQn5TsEf3ij 8VgdCUEvFrf8oAQ6evcJ0efVp+mgiezQ6KklAFl7fwiuHboPDMmnLwKHfW1nxlv5 JvzDjc4nqmkCslKiAq41WCu8SzVLJt7+Hn14Cqlx4ecQbq3Xsis= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org