$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FavXfN2QyiL_l2sodKegOKB_VGI.roa File: FavXfN2QyiL_l2sodKegOKB_VGI.roa (raw, json) Hash identifier: 7srcIH3/iIygAG/3TZ/6ztiXrkNki6fc/oQysEM4MYU= Subject key identifier: 15:AB:D7:7C:DD:90:CA:22:FF:97:6B:28:74:A7:A0:38:A0:7F:54:62 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D83 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FavXfN2QyiL_l2sodKegOKB_VGI.roa Signing time: Fri 01 Sep 2023 10:14:56 +0000 ROA not before: Fri 01 Sep 2023 10:14:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7555 (0x1d83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=15ABD77CDD90CA22FF976B2874A7A038A07F5462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:e9:2c:a1:be:82:42:20:d7:9a:f1:d8:6e: 34:d8:bd:e7:0c:5f:e2:c9:bc:44:ed:29:41:93:f8: ac:6d:8f:d3:62:12:91:16:a4:a6:34:64:19:a5:68: 8c:69:c8:40:69:fc:c9:59:1a:54:04:a8:92:37:48: 2a:37:ff:c7:33:ad:b3:23:4f:6f:3b:e2:6d:98:3a: 74:dc:54:2e:8f:c6:a2:b5:a8:f2:77:92:e1:63:15: 4c:5b:8d:12:7d:9c:bb:25:b6:fe:27:2f:13:dd:04: 34:75:85:26:39:cf:5e:2b:bb:44:9c:c2:e2:3b:5e: 9e:fe:b6:3c:ca:5d:5f:b5:b5:79:ec:bf:61:c2:d1: 9f:88:e1:1d:60:87:f8:1f:61:d8:3c:2c:1b:34:3d: ce:ae:e9:1a:a5:9c:35:db:46:2a:34:95:24:9c:a5: d6:0b:88:a8:42:5b:93:a3:58:f1:a8:77:91:54:15: 9a:eb:66:47:ca:5c:c2:c3:cf:f2:be:3d:c3:36:22: 47:07:bf:b3:65:30:3c:e8:5d:a5:4b:cf:20:11:97: a2:b7:3f:39:b5:b0:b2:40:82:45:dd:2b:57:60:da: 6a:59:69:16:25:04:cf:25:fb:2c:11:54:ba:93:03: 14:d5:1a:ee:b2:f8:14:2c:8e:c6:52:8b:ee:52:5a: 9f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AB:D7:7C:DD:90:CA:22:FF:97:6B:28:74:A7:A0:38:A0:7F:54:62 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FavXfN2QyiL_l2sodKegOKB_VGI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.184.0/21 Signature Algorithm: sha256WithRSAEncryption 93:d9:5c:29:9a:c0:e6:f8:cc:fc:3d:c2:f2:30:a5:b0:e4:af: f9:5f:00:2c:47:7b:01:a4:a9:3e:2e:a3:53:b0:f7:4d:97:25: 98:fb:68:14:47:34:4e:1f:9c:fc:83:3b:f7:74:c5:c4:30:f4: 63:a0:f9:0b:e3:52:1f:4d:4d:b5:5d:21:b8:38:a9:c7:a4:00: 45:41:ff:ed:d4:b7:23:81:4f:4a:d5:52:c8:8f:43:70:b0:1e: e7:ae:6c:0e:44:3c:bf:b9:8f:73:6e:f9:bb:31:33:17:00:c5: 0b:fc:03:30:f3:9b:ea:bf:43:47:af:e3:57:7a:b7:10:7a:a5: c7:d2:42:94:74:20:c1:1e:db:ec:d2:50:c2:24:94:72:c6:63: cb:ef:99:2e:db:8d:85:69:40:2c:5b:bf:ee:21:ee:2f:71:e6: 1c:f0:f9:b4:1e:8b:8c:36:75:f1:ad:64:0e:bb:8f:c6:db:3d: db:af:5e:24:71:00:19:ea:9a:e8:f2:79:01:28:40:d2:82:5d: bc:0b:a8:13:c4:0a:ac:06:4d:23:25:48:4d:ca:b4:1c:cf:2b: df:17:55:87:82:78:f2:9a:59:6a:ec:e0:97:26:44:af:41:c5: ac:3c:cf:1d:1a:fc:58:54:f6:41:71:1c:95:ef:0c:25:ef:4a: 86:37:a8:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE1QUJENzdDREQ5MENB MjJGRjk3NkIyODc0QTdBMDM4QTA3RjU0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzEeksob6CQiDXmvHYbjTYvecMX+LJvETtKUGT+Kxtj9NiEpEW pKY0ZBmlaIxpyEBp/MlZGlQEqJI3SCo3/8czrbMjT2874m2YOnTcVC6PxqK1qPJ3 kuFjFUxbjRJ9nLsltv4nLxPdBDR1hSY5z14ru0ScwuI7Xp7+tjzKXV+1tXnsv2HC 0Z+I4R1gh/gfYdg8LBs0Pc6u6RqlnDXbRio0lSScpdYLiKhCW5OjWPGod5FUFZrr ZkfKXMLDz/K+PcM2IkcHv7NlMDzoXaVLzyARl6K3Pzm1sLJAgkXdK1dg2mpZaRYl BM8l+ywRVLqTAxTVGu6y+BQsjsZSi+5SWp+vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFavXfN2QyiL/l2sodKegOKB/VGIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZhdlhmTjJReWlMX2wyc29k S2VnT0tCX1ZHSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nrgwDQYJKoZIhvcNAQELBQADggEBAJPZXCmawOb4zPw9wvIwpbDkr/lfACxHewGk qT4uo1Ow902XJZj7aBRHNE4fnPyDO/d0xcQw9GOg+QvjUh9NTbVdIbg4qcekAEVB /+3UtyOBT0rVUsiPQ3CwHueubA5EPL+5j3Nu+bsxMxcAxQv8AzDzm+q/Q0ev41d6 txB6pcfSQpR0IMEe2+zSUMIklHLGY8vvmS7bjYVpQCxbv+4h7i9x5hzw+bQei4w2 dfGtZA67j8bbPduvXiRxABnqmujyeQEoQNKCXbwLqBPECqwGTSMlSE3KtBzPK98X VYeCePKaWWrs4JcmRK9Bxaw8zx0a/FhU9kFxHJXvDCXvSoY3qHc= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org