$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa File: J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa (raw, json) Hash identifier: 7uKdYb68Xkqd1FqzV6SKb0mkEHLI+nXQN9AmLtchupM= Subject key identifier: 27:D0:0D:56:F5:88:48:0E:C9:4B:58:C7:8F:E2:98:64:53:28:D2:74 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E66 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa Signing time: Fri 01 Sep 2023 10:16:00 +0000 ROA not before: Fri 01 Sep 2023 10:16:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 49.159.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7782 (0x1e66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=27D00D56F588480EC94B58C78FE298645328D274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:5c:48:bd:cd:69:7f:de:fa:e4:5a:27:4e: f2:0c:56:81:22:5d:b8:f5:cb:97:69:7e:8e:25:e3: 2d:23:f6:9c:cc:71:73:1b:1f:dc:36:42:0f:be:c4: 48:3b:c9:bd:88:f7:03:55:cb:69:19:54:d1:41:79: 66:cd:43:99:82:1a:75:1f:88:86:53:63:91:36:cb: 17:69:af:b8:46:7b:e1:f2:f8:03:9b:03:b0:35:30: 45:be:46:d4:da:62:d0:cf:29:a8:37:1f:fc:14:94: 66:58:0b:8c:07:1d:ce:b7:db:70:e5:fd:1f:6e:11: 1f:95:05:24:69:90:e4:57:d4:9f:99:57:93:f8:73: 49:47:e4:47:2b:68:90:5c:32:b5:78:17:9d:ce:62: ec:cb:e6:62:9e:21:b1:3a:c4:79:c5:0d:e6:4b:9d: bf:55:9b:cf:c2:48:f4:1f:b0:db:22:38:f3:79:3a: 3a:80:c7:a1:0b:57:2d:96:d1:1a:55:9d:a9:9d:b1: f0:6b:89:1e:aa:d5:90:b0:12:a7:d7:48:8a:ea:18: e7:93:69:c2:9f:cc:64:a7:7b:ca:60:4f:bd:69:e4: 52:d9:a2:ef:6d:71:45:2f:e0:4f:87:4c:9c:3f:6c: bb:33:ff:dc:7e:6f:d1:ef:29:44:81:fa:af:c7:e9: ba:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:0D:56:F5:88:48:0E:C9:4B:58:C7:8F:E2:98:64:53:28:D2:74 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.252.0/22 Signature Algorithm: sha256WithRSAEncryption 26:a7:30:2f:55:b9:bb:9d:11:30:4d:16:e7:4b:50:29:b9:b3: b6:65:ce:44:8a:55:51:ff:86:4e:ce:2e:84:cd:fb:58:61:67: 37:d0:61:fd:e4:2a:15:fb:1a:08:fc:8e:87:46:01:ee:87:9b: ea:cf:35:9a:46:f9:6b:ab:fc:78:47:23:8f:d2:5d:8c:d6:fd: 02:fc:75:01:61:13:06:c2:16:00:6c:37:cb:e9:15:cd:74:30: f5:8c:47:11:35:8e:4b:d0:4d:6e:d5:7c:6e:3e:de:27:4a:30: d1:b9:6e:7c:0d:95:35:3a:10:70:5f:4a:0e:54:b7:54:36:b1: cf:43:ba:2b:41:78:91:78:9a:3f:ac:ea:25:6f:a0:ef:08:e0: d3:e0:cc:fd:8e:74:4e:2e:73:f8:7e:59:fe:7c:34:0b:19:1f: 90:c0:87:7a:3d:0d:73:39:55:e2:9d:e2:f4:89:e4:29:b4:78: f0:f4:30:f2:ad:da:cc:2d:75:51:af:20:7b:86:36:f0:ee:d8: 84:1d:9a:3d:96:ab:be:43:06:69:b0:b3:73:11:7a:7f:23:b6: 60:d1:1a:05:37:1c:4e:21:49:54:94:c0:fd:ea:20:05:2c:71: 48:a1:d4:fe:c8:23:bd:84:13:dc:4d:2b:db:6f:4f:fa:a0:31: da:03:d5:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI3RDAwRDU2RjU4ODQ4 MEVDOTRCNThDNzhGRTI5ODY0NTMyOEQyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpYlxIvc1pf9765FonTvIMVoEiXbj1y5dpfo4l4y0j9pzMcXMb H9w2Qg++xEg7yb2I9wNVy2kZVNFBeWbNQ5mCGnUfiIZTY5E2yxdpr7hGe+Hy+AOb A7A1MEW+RtTaYtDPKag3H/wUlGZYC4wHHc6323Dl/R9uER+VBSRpkORX1J+ZV5P4 c0lH5EcraJBcMrV4F53OYuzL5mKeIbE6xHnFDeZLnb9Vm8/CSPQfsNsiOPN5OjqA x6ELVy2W0RpVnamdsfBriR6q1ZCwEqfXSIrqGOeTacKfzGSne8pgT71p5FLZou9t cUUv4E+HTJw/bLsz/9x+b9HvKUSB+q/H6bpZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJ9ANVvWISA7JS1jHj+KYZFMo0nQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0o5QU5WdldJU0E3SlMxakhq LUtZWkZNbzBuUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n/wwDQYJKoZIhvcNAQELBQADggEBACanMC9VubudETBNFudLUCm5s7ZlzkSKVVH/ hk7OLoTN+1hhZzfQYf3kKhX7Ggj8jodGAe6Hm+rPNZpG+Wur/HhHI4/SXYzW/QL8 dQFhEwbCFgBsN8vpFc10MPWMRxE1jkvQTW7VfG4+3idKMNG5bnwNlTU6EHBfSg5U t1Q2sc9DuitBeJF4mj+s6iVvoO8I4NPgzP2OdE4uc/h+Wf58NAsZH5DAh3o9DXM5 VeKd4vSJ5Cm0ePD0MPKt2swtdVGvIHuGNvDu2IQdmj2Wq75DBmmws3MRen8jtmDR GgU3HE4hSVSUwP3qIAUscUih1P7II72EE9xNK9tvT/qgMdoD1aQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org