$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WWRghiue7oQTtufkslW1xk4zUio.roa File: WWRghiue7oQTtufkslW1xk4zUio.roa (raw, json) Hash identifier: 7FVGtpwR3oJLfEdEr0UveaM0fcHPWh+/tUVV4gpDlZg= Subject key identifier: 59:64:60:86:2B:9E:EE:84:13:B6:E7:E4:B2:55:B5:C6:4E:33:52:2A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DC7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WWRghiue7oQTtufkslW1xk4zUio.roa Signing time: Fri 01 Sep 2023 10:15:17 +0000 ROA not before: Fri 01 Sep 2023 10:15:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7623 (0x1dc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=596460862B9EEE8413B6E7E4B255B5C64E33522A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:4f:60:df:cf:ea:28:c7:9c:7b:80:b3:5d: f7:4a:b4:15:81:fe:0e:2f:2d:1a:12:f9:2d:0b:38: 96:9c:86:fc:45:91:3b:ac:d8:46:3f:1d:7f:9b:0a: 17:10:dc:4e:24:16:aa:13:5d:16:c8:c7:4a:1e:43: 3f:e1:d2:ed:a5:bb:76:cc:28:51:cd:49:69:6d:53: b1:63:de:05:ec:a9:c5:a6:d3:ff:45:b2:cc:68:36: 5c:56:aa:4f:23:fe:78:d2:88:4d:f1:b8:fb:d0:15: 00:da:ba:5f:e1:8e:9b:1f:c1:5c:35:6c:df:80:d9: 5f:18:44:ea:ab:19:21:c6:f1:e0:a9:d1:39:8b:76: 6d:de:bd:1d:0d:5a:ba:8a:70:90:18:82:0e:75:68: dc:4e:25:6d:e5:7d:7f:4e:fd:f6:d1:d1:0f:c8:c7: 1a:4c:c1:fb:d7:ea:23:7a:6c:26:28:cf:9c:9f:43: df:80:5b:c4:ad:65:a1:85:14:02:ed:17:27:40:fc: 53:f6:23:82:63:de:32:9c:77:b1:d1:34:58:29:d2: ef:0b:9c:05:73:4a:ad:d1:e2:b1:63:93:44:a5:bd: 34:ac:a4:0c:c0:be:45:06:53:c8:8a:29:20:10:d0: f5:53:45:a3:f2:e3:af:20:19:f2:c5:2f:ab:53:a5: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:60:86:2B:9E:EE:84:13:B6:E7:E4:B2:55:B5:C6:4E:33:52:2A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WWRghiue7oQTtufkslW1xk4zUio.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.224.0/21 Signature Algorithm: sha256WithRSAEncryption 14:bf:8a:0b:63:b8:25:ac:fd:dc:75:d9:a3:2f:45:55:07:44: 3f:e2:e6:d5:a4:27:3d:83:5c:42:87:6e:47:22:dd:a1:d7:78: e6:c7:40:33:da:e2:90:7f:10:57:b1:70:c3:bf:7f:fc:54:33: ca:9d:aa:13:25:48:10:92:13:4e:07:d1:ae:5d:c5:26:49:a5: 9c:0d:f9:ce:ed:6e:37:31:80:d7:e1:7e:ab:1d:4c:bf:57:f4: d0:e3:86:12:1f:1d:f4:b2:eb:0b:91:95:c4:34:2e:e3:d7:1c: a9:a1:59:5a:00:87:99:ed:2e:35:bb:4a:be:e7:f7:35:8b:7e: 16:c2:de:e6:01:3a:3a:68:b4:02:bf:2d:f6:6a:94:51:85:e0: 4f:72:11:35:62:67:5f:17:e1:b1:c9:af:3e:fc:f2:05:00:10: cc:65:7e:3c:a6:99:f9:fd:d7:8b:22:7d:33:ed:c2:55:a0:f7: 91:c9:e7:64:97:89:48:22:fc:7e:08:a1:e7:65:75:9c:52:2e: 63:23:d9:91:31:b9:87:56:9b:e7:cd:6f:34:20:2d:08:8e:3b: e5:2e:74:5f:34:3c:b3:f5:c7:d3:67:04:c7:d3:c8:df:4e:f4: a9:f1:60:ff:ec:6f:32:67:90:45:67:9d:71:71:28:8f:a1:e9: e1:d5:7d:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU5NjQ2MDg2MkI5RUVF ODQxM0I2RTdFNEIyNTVCNUM2NEUzMzUyMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKU9g38/qKMece4CzXfdKtBWB/g4vLRoS+S0LOJachvxFkTus 2EY/HX+bChcQ3E4kFqoTXRbIx0oeQz/h0u2lu3bMKFHNSWltU7Fj3gXsqcWm0/9F ssxoNlxWqk8j/njSiE3xuPvQFQDaul/hjpsfwVw1bN+A2V8YROqrGSHG8eCp0TmL dm3evR0NWrqKcJAYgg51aNxOJW3lfX9O/fbR0Q/IxxpMwfvX6iN6bCYoz5yfQ9+A W8StZaGFFALtFydA/FP2I4Jj3jKcd7HRNFgp0u8LnAVzSq3R4rFjk0SlvTSspAzA vkUGU8iKKSAQ0PVTRaPy468gGfLFL6tTpfi3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWWRghiue7oQTtufkslW1xk4zUiowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dXUmdoaXVlN29RVHR1Zmtz bFcxeGs0elVpby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n+AwDQYJKoZIhvcNAQELBQADggEBABS/igtjuCWs/dx12aMvRVUHRD/i5tWkJz2D XEKHbkci3aHXeObHQDPa4pB/EFexcMO/f/xUM8qdqhMlSBCSE04H0a5dxSZJpZwN +c7tbjcxgNfhfqsdTL9X9NDjhhIfHfSy6wuRlcQ0LuPXHKmhWVoAh5ntLjW7Sr7n 9zWLfhbC3uYBOjpotAK/LfZqlFGF4E9yETViZ18X4bHJrz788gUAEMxlfjymmfn9 14sifTPtwlWg95HJ52SXiUgi/H4IoedldZxSLmMj2ZExuYdWm+fNbzQgLQiOO+Uu dF80PLP1x9NnBMfTyN9O9KnxYP/sbzJnkEVnnXFxKI+h6eHVfYg= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org