$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MBEiztaFWN_f_itxCOJVVwnMu4Y.roa File: MBEiztaFWN_f_itxCOJVVwnMu4Y.roa (raw, json) Hash identifier: tbV/YsohfEf97sOo2pXtoXDkIY1Ts3nf3RKbOvDMcKw= Subject key identifier: 30:11:22:CE:D6:85:58:DF:DF:FE:2B:71:08:E2:55:57:09:CC:BB:86 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E14 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MBEiztaFWN_f_itxCOJVVwnMu4Y.roa Signing time: Fri 01 Sep 2023 10:15:39 +0000 ROA not before: Fri 01 Sep 2023 10:15:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7700 (0x1e14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=301122CED68558DFDFFE2B7108E2555709CCBB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:a5:d1:5d:67:24:a7:10:a8:8d:dc:9d:62: 6d:e6:c7:0b:1b:4d:9f:6f:3c:4d:d9:4c:44:47:fc: 13:af:35:b5:8f:a2:79:b1:61:46:ed:4f:63:bd:44: b7:e7:12:37:bd:00:3d:22:9c:89:77:b5:0a:bd:2e: c6:f3:91:e0:27:c2:c4:41:82:c0:9d:f9:32:8e:17: 25:7d:8f:38:5f:15:a8:41:10:e9:f6:ad:28:89:26: 31:d0:fc:2e:f6:34:6e:83:64:cd:3c:58:f8:04:80: 4c:50:92:18:8d:5a:ad:94:29:2c:09:2d:82:cc:4c: 3a:4b:e4:05:e3:90:34:4a:57:ed:bc:8f:7d:ef:4c: c3:47:26:91:e3:90:03:56:68:cb:8a:e7:4d:17:4e: 0d:27:23:17:fa:c7:3c:05:8b:4d:2f:b3:6d:b9:7a: 6a:d0:05:4f:23:fe:81:d1:2d:a4:6a:5c:fb:45:8e: 1a:26:f0:96:da:35:18:f7:e1:1d:9c:93:14:80:46: 79:bb:9a:81:41:d9:14:85:bb:28:30:9a:5b:0c:25: 76:c9:09:d7:4e:60:48:a9:2a:cb:6f:73:61:2b:42: 64:99:b0:16:ef:9c:e2:3e:3a:0b:9c:66:04:b4:6a: 7f:74:f7:96:da:e4:2f:e9:7c:04:18:63:b7:39:d5: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:22:CE:D6:85:58:DF:DF:FE:2B:71:08:E2:55:57:09:CC:BB:86 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MBEiztaFWN_f_itxCOJVVwnMu4Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.104.0/21 Signature Algorithm: sha256WithRSAEncryption 86:c8:72:78:6a:30:7e:36:9c:22:47:71:9c:1f:7f:9c:99:ca: 92:08:f8:be:d5:8d:f2:5e:64:c0:68:c2:e7:cc:e5:26:82:b4: f0:5e:cd:e3:79:6d:9a:eb:9e:8c:d1:44:37:3a:5a:c6:2b:a4: 0e:58:66:51:72:18:a3:58:64:3e:f8:60:b3:0f:9e:eb:61:ea: c4:83:b6:cb:e6:b8:93:77:68:f8:26:03:5b:0d:cf:aa:2b:14: 8d:a5:cd:fd:74:a6:0a:88:79:13:e2:ca:77:ab:33:3d:75:5b: ff:7c:67:79:fe:70:ad:d8:70:14:49:c7:d5:ed:92:6f:61:a9: c0:4e:8c:83:30:ab:a2:7d:ad:00:92:ee:8e:d2:84:35:cf:04: 80:26:4c:4d:7a:31:a1:22:5b:85:d8:da:35:12:60:a3:1c:90: 27:93:15:5f:f2:4a:30:9c:27:7f:d8:1d:c1:0d:0b:92:1a:fe: 2d:62:9f:72:4b:0a:23:0b:b9:ed:90:e2:11:85:b2:53:63:f3: dd:3f:47:11:e1:59:cd:f9:a6:df:e4:d5:db:fd:90:d4:b0:85: f0:82:29:5c:e2:a4:b9:8d:c4:74:06:11:c8:89:c9:74:f8:53: da:34:b3:97:a8:3d:cd:d4:d8:f9:d1:07:de:5f:fe:37:b1:ef: b1:09:82:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMwMTEyMkNFRDY4NTU4 REZERkZFMkI3MTA4RTI1NTU3MDlDQ0JCODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVv6XRXWckpxCojdydYm3mxwsbTZ9vPE3ZTERH/BOvNbWPonmx YUbtT2O9RLfnEje9AD0inIl3tQq9LsbzkeAnwsRBgsCd+TKOFyV9jzhfFahBEOn2 rSiJJjHQ/C72NG6DZM08WPgEgExQkhiNWq2UKSwJLYLMTDpL5AXjkDRKV+28j33v TMNHJpHjkANWaMuK500XTg0nIxf6xzwFi00vs225emrQBU8j/oHRLaRqXPtFjhom 8JbaNRj34R2ckxSARnm7moFB2RSFuygwmlsMJXbJCddOYEipKstvc2ErQmSZsBbv nOI+OgucZgS0an9095ba5C/pfAQYY7c51VihAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMBEiztaFWN/f/itxCOJVVwnMu4YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01CRWl6dGFGV05fZl9pdHhD T0pWVnduTXU0WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nmgwDQYJKoZIhvcNAQELBQADggEBAIbIcnhqMH42nCJHcZwff5yZypII+L7VjfJe ZMBowufM5SaCtPBezeN5bZrrnozRRDc6WsYrpA5YZlFyGKNYZD74YLMPnuth6sSD tsvmuJN3aPgmA1sNz6orFI2lzf10pgqIeRPiynerMz11W/98Z3n+cK3YcBRJx9Xt km9hqcBOjIMwq6J9rQCS7o7ShDXPBIAmTE16MaEiW4XY2jUSYKMckCeTFV/ySjCc J3/YHcENC5Ia/i1in3JLCiMLue2Q4hGFslNj890/RxHhWc35pt/k1dv9kNSwhfCC KVzipLmNxHQGEciJyXT4U9o0s5eoPc3U2PnRB95f/jex77EJgqI= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org