$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H19aXGNPYH_W0SITYDtBubHroQY.roa File: H19aXGNPYH_W0SITYDtBubHroQY.roa (raw, json) Hash identifier: do7i1iH2C5wP+4dQnl7jg5Ud2jk4pA5wwciBJ2rV42I= Subject key identifier: 1F:5F:5A:5C:63:4F:60:7F:D6:D1:22:13:60:3B:41:B9:B1:EB:A1:06 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D4F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H19aXGNPYH_W0SITYDtBubHroQY.roa Signing time: Fri 01 Sep 2023 10:14:39 +0000 ROA not before: Fri 01 Sep 2023 10:14:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7503 (0x1d4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1F5F5A5C634F607FD6D12213603B41B9B1EBA106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:f8:cd:46:ea:89:d3:d0:c5:72:a3:ef:51: 86:d6:1c:4d:65:df:63:02:f1:8f:a9:18:68:da:17: 39:f5:ba:92:e0:14:45:50:87:a3:39:6c:b3:7a:90: 21:b3:ed:e9:68:50:3d:53:1a:43:82:15:bd:d9:f1: c1:f2:5b:d7:d6:8d:02:60:c8:ed:bc:06:d9:03:70: 50:31:41:e8:67:c2:e1:e5:d1:37:9f:62:98:c3:0e: e9:78:ac:73:43:0c:51:66:2d:88:14:f5:c6:f7:bd: d2:5e:cb:0d:c3:d7:b9:71:b2:b3:04:21:21:5c:99: 97:b8:ba:f7:a1:3a:1d:f6:40:0a:d5:92:fd:cb:29: 7f:4a:38:10:03:ad:e5:81:da:f4:f9:85:ac:83:05: c8:fc:e8:1d:36:61:8c:0f:52:dc:b0:19:cd:27:3a: 72:7d:c1:94:a4:6c:e5:f9:d2:22:94:03:24:0d:a8: 05:bf:5d:01:a0:7f:50:6d:23:b3:8e:5a:8e:f2:99: 97:04:2f:85:7a:c8:4c:aa:22:5d:4d:83:b4:c8:7a: d3:db:37:00:f7:ae:4f:bf:da:3f:12:e6:44:9a:fd: 20:8a:4a:37:ed:1f:a0:84:e0:54:f4:a9:d3:7c:15: bc:ac:b2:a0:af:1b:6f:2d:01:da:f8:63:f7:22:96: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5F:5A:5C:63:4F:60:7F:D6:D1:22:13:60:3B:41:B9:B1:EB:A1:06 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H19aXGNPYH_W0SITYDtBubHroQY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.168.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:b0:91:76:24:6e:5d:41:dc:a4:73:c5:b9:74:7c:a4:cb:94: fe:14:2c:0e:d6:21:20:98:06:86:cb:16:ad:38:05:bf:39:f4: 27:8e:27:f4:f7:18:64:13:9d:b0:1e:93:94:ad:e0:b6:06:6b: 4a:d0:0b:0b:78:0b:a0:85:1f:21:49:b1:fe:29:0c:08:ca:e4: 9e:35:f4:eb:2b:5d:fa:65:ba:89:e5:79:95:ea:ae:67:bc:a7: b8:b9:ba:5d:6b:03:42:e9:d8:53:34:43:bf:7b:c3:28:77:42: f8:02:62:aa:52:74:48:1d:65:af:58:8c:c7:0a:4e:1a:27:43: 12:8e:b4:b4:b3:b8:af:07:f7:04:15:6e:56:c9:d5:8d:ad:5b: b3:20:52:0d:0b:5d:7a:25:81:88:27:4c:32:02:f6:c9:2b:aa: 35:d4:8a:3b:24:f7:7b:e2:a5:26:d0:85:c3:86:30:a4:2e:60: 95:da:7d:58:0f:b3:f3:1e:d9:64:c1:09:09:ac:fb:60:64:cf: 2f:1a:69:0a:87:3e:7f:49:4b:79:b1:de:f9:56:fe:0d:64:60: ee:a6:ef:76:b7:a0:f6:20:af:30:52:f9:e2:ae:4f:04:cd:7f: ad:07:5b:cc:ff:55:2f:95:72:55:e9:ff:34:f1:73:8d:d1:83: 74:5a:d3:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFGNUY1QTVDNjM0RjYw N0ZENkQxMjIxMzYwM0I0MUI5QjFFQkExMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi3vjNRuqJ09DFcqPvUYbWHE1l32MC8Y+pGGjaFzn1upLgFEVQ h6M5bLN6kCGz7eloUD1TGkOCFb3Z8cHyW9fWjQJgyO28BtkDcFAxQehnwuHl0Tef YpjDDul4rHNDDFFmLYgU9cb3vdJeyw3D17lxsrMEISFcmZe4uvehOh32QArVkv3L KX9KOBADreWB2vT5hayDBcj86B02YYwPUtywGc0nOnJ9wZSkbOX50iKUAyQNqAW/ XQGgf1BtI7OOWo7ymZcEL4V6yEyqIl1Ng7TIetPbNwD3rk+/2j8S5kSa/SCKSjft H6CE4FT0qdN8FbyssqCvG28tAdr4Y/ciliF9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUH19aXGNPYH/W0SITYDtBubHroQYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0gxOWFYR05QWUhfVzBTSVRZ RHRCdWJIcm9RWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nqgwDQYJKoZIhvcNAQELBQADggEBAFqwkXYkbl1B3KRzxbl0fKTLlP4ULA7WISCY BobLFq04Bb859CeOJ/T3GGQTnbAek5St4LYGa0rQCwt4C6CFHyFJsf4pDAjK5J41 9OsrXfpluonleZXqrme8p7i5ul1rA0Lp2FM0Q797wyh3QvgCYqpSdEgdZa9YjMcK ThonQxKOtLSzuK8H9wQVblbJ1Y2tW7MgUg0LXXolgYgnTDIC9skrqjXUijsk93vi pSbQhcOGMKQuYJXafVgPs/Me2WTBCQms+2Bkzy8aaQqHPn9JS3mx3vlW/g1kYO6m 73a3oPYgrzBS+eKuTwTNf60HW8z/VS+VclXp/zTxc43Rg3Ra07E= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org