$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OaupZkyRKxKre-Fmiu4dmV3VzzI.roa File: OaupZkyRKxKre-Fmiu4dmV3VzzI.roa (raw, json) Hash identifier: hoFZaJS3P4GXdgz+0xz+mgp20PYDX3TGoQGJVaWG8q8= Subject key identifier: 39:AB:A9:66:4C:91:2B:12:AB:7B:E1:66:8A:EE:1D:99:5D:D5:CF:32 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E3B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OaupZkyRKxKre-Fmiu4dmV3VzzI.roa Signing time: Fri 01 Sep 2023 10:15:49 +0000 ROA not before: Fri 01 Sep 2023 10:15:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7739 (0x1e3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=39ABA9664C912B12AB7BE1668AEE1D995DD5CF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:6c:c0:be:0b:9a:d0:94:a9:e3:75:b1:9e: 58:08:a6:6f:53:ab:c5:66:43:70:0f:fd:48:b3:b9: 14:55:66:ec:aa:1b:ba:ad:64:38:38:f6:e4:bc:10: ba:13:c8:12:25:26:f4:1a:05:84:8f:b0:e6:23:1a: 38:6b:6f:4e:82:80:a4:2b:53:fd:4c:93:95:fd:fe: 4b:96:22:46:c4:a7:ea:57:62:52:18:c2:72:a8:7a: 13:5f:70:3d:d0:18:05:be:f7:37:30:28:4a:a9:29: b2:a4:cd:1f:d9:e9:0a:57:df:45:b5:a4:cf:19:38: 2b:3b:3c:bd:8b:46:d8:67:f3:51:72:f1:88:5d:bc: 4f:9b:9c:e0:48:c8:2c:fd:2c:49:35:52:a6:56:37: dc:b3:a9:f4:56:df:1e:60:1d:51:a1:da:83:a8:be: 45:2a:5e:23:60:03:7d:fe:a6:c3:7b:f5:f3:fa:b9: a8:9c:66:59:63:36:65:a4:43:2e:11:58:27:22:75: 06:13:bb:d8:8e:4e:98:8a:f1:9d:41:5b:86:31:be: 93:01:16:8b:4e:80:d1:84:a8:74:32:66:39:8a:a5: 17:3d:d1:dc:0c:99:7a:4d:2d:8c:28:c7:eb:18:32: 3a:5c:a0:9a:51:b1:70:83:64:53:fb:64:13:77:8c: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AB:A9:66:4C:91:2B:12:AB:7B:E1:66:8A:EE:1D:99:5D:D5:CF:32 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OaupZkyRKxKre-Fmiu4dmV3VzzI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.61.0/24 Signature Algorithm: sha256WithRSAEncryption 71:6e:a8:cd:4b:9b:68:fb:ba:1e:23:64:8d:37:36:83:59:3e: 78:21:db:c1:6c:3d:60:ea:43:4b:79:83:67:0e:26:b7:70:88: 7f:d2:40:13:54:b1:3c:c3:51:2f:a6:58:52:45:12:e2:e8:5d: 58:ab:a9:c4:80:10:4a:b4:b1:ff:81:38:4b:ef:e3:52:f3:fa: 8a:62:8d:b7:02:5e:d0:34:67:e9:6d:80:e7:75:ee:20:95:66: db:55:aa:5d:27:44:b7:93:83:3c:60:4e:3c:20:5e:84:35:25: 46:39:94:e2:e6:4a:00:89:13:e9:9d:ef:42:fd:a9:64:b6:bb: c4:c1:67:47:52:a8:d8:d4:02:f3:e5:18:25:38:dc:fc:f8:ba: c7:ae:a2:b2:f9:0a:e5:cf:a0:b4:59:62:4c:50:b3:8b:5c:0a: 70:59:aa:e5:1f:b1:ef:c4:56:0b:76:b5:ab:8c:b1:75:80:6d: de:f7:06:ba:1c:4c:42:1f:50:8d:a2:8b:14:98:c1:96:ae:64: 65:bf:d7:45:6b:88:58:06:14:bd:2e:1d:2b:a5:f9:cf:9d:13: 92:7e:76:66:f2:90:2a:f3:2d:9c:67:b2:c4:a4:34:c6:8c:0b: e2:49:65:d4:dd:7d:be:88:2b:dc:50:f4:29:21:3c:16:7c:5d: e4:3f:6d:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM5QUJBOTY2NEM5MTJC MTJBQjdCRTE2NjhBRUUxRDk5NURENUNGMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzdGzAvgua0JSp43WxnlgIpm9Tq8VmQ3AP/UizuRRVZuyqG7qt ZDg49uS8ELoTyBIlJvQaBYSPsOYjGjhrb06CgKQrU/1Mk5X9/kuWIkbEp+pXYlIY wnKoehNfcD3QGAW+9zcwKEqpKbKkzR/Z6QpX30W1pM8ZOCs7PL2LRthn81Fy8Yhd vE+bnOBIyCz9LEk1UqZWN9yzqfRW3x5gHVGh2oOovkUqXiNgA33+psN79fP6uaic ZlljNmWkQy4RWCcidQYTu9iOTpiK8Z1BW4YxvpMBFotOgNGEqHQyZjmKpRc90dwM mXpNLYwox+sYMjpcoJpRsXCDZFP7ZBN3jMz5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOaupZkyRKxKre+Fmiu4dmV3VzzIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09hdXBaa3lSS3hLcmUtRm1p dTRkbVYzVnp6SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx nj0wDQYJKoZIhvcNAQELBQADggEBAHFuqM1Lm2j7uh4jZI03NoNZPngh28FsPWDq Q0t5g2cOJrdwiH/SQBNUsTzDUS+mWFJFEuLoXVirqcSAEEq0sf+BOEvv41Lz+opi jbcCXtA0Z+ltgOd17iCVZttVql0nRLeTgzxgTjwgXoQ1JUY5lOLmSgCJE+md70L9 qWS2u8TBZ0dSqNjUAvPlGCU43Pz4useuorL5CuXPoLRZYkxQs4tcCnBZquUfse/E Vgt2tauMsXWAbd73BrocTEIfUI2iixSYwZauZGW/10VriFgGFL0uHSul+c+dE5J+ dmbykCrzLZxnssSkNMaMC+JJZdTdfb6IK9xQ9CkhPBZ8XeQ/bf0= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org