$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PnDRZ3jzPLIsAyanqlmHElBCr3M.roa File: PnDRZ3jzPLIsAyanqlmHElBCr3M.roa (raw, json) Hash identifier: L9TakZREM/KwTrThoQji+Fjo1PIqjNSLaVj0+qbLT+M= Subject key identifier: 3E:70:D1:67:78:F3:3C:B2:2C:03:26:A7:AA:59:87:12:50:42:AF:73 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EBE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PnDRZ3jzPLIsAyanqlmHElBCr3M.roa Signing time: Fri 01 Sep 2023 10:16:24 +0000 ROA not before: Fri 01 Sep 2023 10:16:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7870 (0x1ebe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3E70D16778F33CB22C0326A7AA5987125042AF73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:99:9a:f7:4a:62:1f:dd:e9:ae:b6:1f:b7:09: 82:8d:1c:51:a6:b8:59:d8:57:bb:6f:3f:bc:aa:a0: f5:8f:f7:21:9d:7d:fd:b3:c7:8f:85:7b:99:b1:42: be:22:4a:3b:29:56:15:39:57:99:ca:ce:32:9a:b6: 91:92:a7:55:b0:ca:94:03:70:89:96:24:d0:14:ae: d8:54:45:f8:52:01:6b:ef:60:38:e1:79:9e:e3:86: de:52:1f:4f:26:aa:cb:75:f0:0a:6f:9a:bc:d3:81: 98:74:13:02:26:a0:4a:8a:b2:33:15:58:03:44:32: 3c:8d:05:fd:c6:7a:f6:53:60:49:41:5b:16:96:e3: 1b:4e:49:19:05:e2:10:5e:94:4a:2f:65:cf:7d:1d: 77:74:66:b4:c3:ad:c3:c9:ba:43:0a:25:5e:20:79: 46:fc:cf:d9:e5:33:d8:79:33:89:4e:2b:e9:54:33: e0:ff:fe:97:fe:45:fb:38:8a:6d:e0:46:53:a3:a8: 29:8b:4f:fe:85:a1:46:39:55:a4:6d:61:34:0f:68: e2:91:4c:fd:2a:22:36:52:18:1e:cc:ef:73:b6:f8: 22:0c:34:d8:98:3e:92:be:5e:d5:3c:37:b0:67:50: bb:1b:00:93:f7:a9:45:9b:51:94:07:80:0a:e2:0d: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:70:D1:67:78:F3:3C:B2:2C:03:26:A7:AA:59:87:12:50:42:AF:73 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PnDRZ3jzPLIsAyanqlmHElBCr3M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.160.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:69:8d:a8:ed:7e:34:de:1b:11:35:c2:59:cb:23:52:b3:40: 2d:fb:2d:20:02:ad:4e:61:b2:ce:c2:0c:ed:41:99:5c:5e:1f: 3f:75:18:9b:79:9f:20:76:0c:a9:33:99:35:bb:00:4e:72:e1: 10:24:7b:1e:8d:e1:6b:84:82:ac:1e:c3:1a:9d:9d:72:b7:1d: f3:3a:cd:6e:41:7d:aa:c0:f4:9f:d3:d8:09:21:31:c3:9c:31: fd:a9:65:b6:e0:14:5a:7a:d5:b7:a6:a2:38:40:df:87:26:9e: 50:6d:8a:59:29:79:50:ac:f8:3e:89:88:b9:8d:39:0d:93:7a: 69:ff:f0:8f:82:5c:69:b0:bc:8e:6e:1c:c7:10:4f:23:2a:a3: 01:43:8c:8a:9e:10:a8:2a:02:31:12:9f:2e:7b:90:da:3c:30: a4:5a:2f:f7:e2:6a:09:5b:6d:39:5b:a6:6c:f6:15:ad:59:83: 61:a2:66:8b:f7:97:84:09:1c:fd:73:6a:64:34:b3:a0:65:12: da:f9:58:0a:d3:87:41:d7:2d:1e:47:07:aa:f8:db:29:f7:2f: 2e:1a:48:0a:f1:36:41:ed:8e:e8:af:95:87:02:ab:69:33:66: 8e:3a:6f:ad:48:aa:82:d9:b5:67:95:2f:83:e8:1b:84:d9:e2: 8b:20:24:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNFNzBEMTY3NzhGMzND QjIyQzAzMjZBN0FBNTk4NzEyNTA0MkFGNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsmZr3SmIf3emuth+3CYKNHFGmuFnYV7tvP7yqoPWP9yGdff2z x4+Fe5mxQr4iSjspVhU5V5nKzjKatpGSp1WwypQDcImWJNAUrthURfhSAWvvYDjh eZ7jht5SH08mqst18ApvmrzTgZh0EwImoEqKsjMVWANEMjyNBf3GevZTYElBWxaW 4xtOSRkF4hBelEovZc99HXd0ZrTDrcPJukMKJV4geUb8z9nlM9h5M4lOK+lUM+D/ /pf+Rfs4im3gRlOjqCmLT/6FoUY5VaRtYTQPaOKRTP0qIjZSGB7M73O2+CIMNNiY PpK+XtU8N7BnULsbAJP3qUWbUZQHgAriDaXjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPnDRZ3jzPLIsAyanqlmHElBCr3MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BuRFJaM2p6UExJc0F5YW5x bG1IRWxCQ3IzTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nqAwDQYJKoZIhvcNAQELBQADggEBAF9pjajtfjTeGxE1wlnLI1KzQC37LSACrU5h ss7CDO1BmVxeHz91GJt5nyB2DKkzmTW7AE5y4RAkex6N4WuEgqwewxqdnXK3HfM6 zW5BfarA9J/T2AkhMcOcMf2pZbbgFFp61bemojhA34cmnlBtilkpeVCs+D6JiLmN OQ2Temn/8I+CXGmwvI5uHMcQTyMqowFDjIqeEKgqAjESny57kNo8MKRaL/fiaglb bTlbpmz2Fa1Zg2GiZov3l4QJHP1zamQ0s6BlEtr5WArTh0HXLR5HB6r42yn3Ly4a SArxNkHtjuivlYcCq2kzZo46b61IqoLZtWeVL4PoG4TZ4osgJNA= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org