$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SQ75CQP63CpF3dIZBH0D1AmcW-M.roa File: SQ75CQP63CpF3dIZBH0D1AmcW-M.roa (raw, json) Hash identifier: 2Lbv1dnUk8vApAKiK4K5n+xgZ7B80iGoi5ZP7FZkp6c= Subject key identifier: 49:0E:F9:09:03:FA:DC:2A:45:DD:D2:19:04:7D:03:D4:09:9C:5B:E3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DEF Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SQ75CQP63CpF3dIZBH0D1AmcW-M.roa Signing time: Fri 01 Sep 2023 10:15:28 +0000 ROA not before: Fri 01 Sep 2023 10:15:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7663 (0x1def) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=490EF90903FADC2A45DDD219047D03D4099C5BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:b7:99:3c:84:e6:28:65:38:9a:2a:f8:ce: 34:99:0f:8e:d3:e8:10:e0:b4:67:db:ff:dc:18:37: c4:cd:8b:79:5c:7a:21:bf:fd:c3:30:d1:57:e5:72: 23:fb:39:38:16:76:53:62:76:01:e6:f3:f0:42:3d: 70:79:25:20:4d:cf:8c:e1:47:42:fe:1b:2d:dd:b3: 38:73:0f:95:85:3a:55:0a:d6:7c:ed:ef:8b:2c:e1: 6d:4e:f4:91:31:84:58:af:37:94:a4:68:23:31:4f: b9:5d:12:b5:0e:8b:b3:6a:2f:d3:fc:58:8c:39:e0: a5:38:c1:a7:aa:16:86:c9:10:05:f5:3f:4f:3b:0b: f5:ce:46:30:af:05:f2:e8:7b:82:0f:d2:db:8a:04: 14:50:04:6f:e2:80:ec:5f:ee:4e:51:33:93:45:77: 89:72:21:e8:46:42:9c:4f:6a:f9:95:03:64:ab:af: 43:42:8f:84:ca:d4:de:d2:f7:0d:f7:97:68:12:02: 58:c8:da:1b:4e:f5:bb:bb:0a:b4:13:b8:72:aa:2f: 19:40:3e:91:a1:06:f8:8e:a1:3f:20:49:2f:fb:85: d1:5d:42:08:ec:b5:87:55:61:07:2f:68:4a:1e:49: 25:34:47:df:bb:8d:c3:f6:93:8a:4f:00:44:27:b1: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0E:F9:09:03:FA:DC:2A:45:DD:D2:19:04:7D:03:D4:09:9C:5B:E3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SQ75CQP63CpF3dIZBH0D1AmcW-M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.0.0/16 Signature Algorithm: sha256WithRSAEncryption 25:b3:88:0f:5d:09:42:ac:e7:a2:a3:f9:58:75:d7:fd:17:f2: 7b:da:83:f2:de:ee:2c:d7:bf:1a:7c:b6:d6:1c:f5:af:d2:e7: fc:71:3f:0d:d8:41:4f:1e:fc:fd:4b:c8:36:48:f4:ab:a1:d9: 99:1b:f7:41:63:bd:bc:bb:b0:61:62:20:40:5c:fb:74:4e:20: 90:44:c2:f4:da:26:c3:0f:95:72:8a:24:90:eb:74:ae:89:ac: fd:b1:5e:e5:c2:fd:70:70:c3:87:9e:df:e9:3d:c5:23:07:9b: 13:c3:a4:ba:e1:22:81:15:6e:ad:6d:32:7d:bb:2d:0b:d2:b9: 0f:05:f5:f8:06:9f:ca:04:1b:3e:ea:d1:92:b3:e7:84:3d:c2: cb:44:8f:d6:21:c4:03:11:40:b1:8b:fc:ef:10:43:a7:a2:67: cf:3f:36:0f:84:8a:a4:91:74:19:3c:be:0f:e9:b3:61:cd:74: ba:9b:d3:1a:dd:9e:d8:37:b3:b2:67:1d:81:58:23:ae:19:df: 45:37:2a:fa:53:61:9d:79:83:0a:a8:ef:83:8c:c1:d5:f2:97: e4:1c:c3:47:9d:4b:22:97:f9:18:be:b2:07:18:f9:e5:66:48: 16:b8:54:91:f6:6a:45:48:1b:e1:83:53:44:a7:82:ac:a2:f0: d3:b4:1a:4a -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICHe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ5MEVGOTA5MDNGQURD MkE0NURERDIxOTA0N0QwM0Q0MDk5QzVCRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2J7eZPITmKGU4mir4zjSZD47T6BDgtGfb/9wYN8TNi3lceiG/ /cMw0VflciP7OTgWdlNidgHm8/BCPXB5JSBNz4zhR0L+Gy3dszhzD5WFOlUK1nzt 74ss4W1O9JExhFivN5SkaCMxT7ldErUOi7NqL9P8WIw54KU4waeqFobJEAX1P087 C/XORjCvBfLoe4IP0tuKBBRQBG/igOxf7k5RM5NFd4lyIehGQpxPavmVA2Srr0NC j4TK1N7S9w33l2gSAljI2htO9bu7CrQTuHKqLxlAPpGhBviOoT8gSS/7hdFdQgjs tYdVYQcvaEoeSSU0R9+7jcP2k4pPAEQnseXVAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUSQ75CQP63CpF3dIZBH0D1AmcW+MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NRNzVDUVA2M0NwRjNkSVpC SDBEMUFtY1ctTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx nzANBgkqhkiG9w0BAQsFAAOCAQEAJbOID10JQqznoqP5WHXX/Rfye9qD8t7uLNe/ Gny21hz1r9Ln/HE/DdhBTx78/UvINkj0q6HZmRv3QWO9vLuwYWIgQFz7dE4gkETC 9Nomww+VcookkOt0roms/bFe5cL9cHDDh57f6T3FIwebE8OkuuEigRVurW0yfbst C9K5DwX1+AafygQbPurRkrPnhD3Cy0SP1iHEAxFAsYv87xBDp6Jnzz82D4SKpJF0 GTy+D+mzYc10upvTGt2e2DezsmcdgVgjrhnfRTcq+lNhnXmDCqjvg4zB1fKX5BzD R51LIpf5GL6yBxj55WZIFrhUkfZqRUgb4YNTRKeCrKLw07QaSg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org