$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_1-JUTBEfK-Pg9MMr6nWKV87n2E.roa File: _1-JUTBEfK-Pg9MMr6nWKV87n2E.roa (raw, json) Hash identifier: 2SvPLcJkxFuzcrpa/CD5wPJAaXkAqVg8PtI9oBfqfUc= Subject key identifier: FF:5F:89:51:30:44:7C:AF:8F:83:D3:0C:AF:A9:D6:29:5F:3B:9F:61 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DDA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_1-JUTBEfK-Pg9MMr6nWKV87n2E.roa Signing time: Fri 01 Sep 2023 10:15:22 +0000 ROA not before: Fri 01 Sep 2023 10:15:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7642 (0x1dda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FF5F895130447CAF8F83D30CAFA9D6295F3B9F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:55:c4:94:58:1b:06:30:a2:31:fc:29:9c: 4b:cb:7b:a7:d3:3f:c3:38:27:a7:43:50:aa:ba:3c: 79:16:6c:4b:fc:94:f1:8f:d9:2a:23:6d:22:da:50: 9b:44:c9:03:3b:89:9b:e1:26:59:1c:52:8e:6f:b0: 21:1d:4f:0d:aa:eb:be:97:50:8f:43:3a:9d:4b:0a: 99:07:6d:e1:c2:97:af:55:0b:28:10:bf:78:1d:a1: e3:61:ac:98:69:c6:5a:d1:26:db:c1:28:00:e3:39: d8:e3:33:cf:8f:02:57:11:5f:9b:68:50:cc:fa:98: 2a:a7:10:cd:5c:13:95:00:9d:8a:55:89:51:f0:d6: d9:20:61:81:67:1b:10:bf:1c:ad:97:e0:e0:86:ef: c5:92:2f:7e:d2:5c:1e:44:ac:55:73:39:8b:8b:1e: 0f:31:99:b1:99:94:5f:20:19:f1:f0:e5:c7:c2:18: 59:ce:69:23:85:c7:aa:98:fb:b1:1f:72:5f:c9:b6: 98:13:d6:f8:65:78:f0:ea:83:16:ad:63:16:3c:b5: 48:d2:e4:cf:9b:08:1f:6e:45:b9:87:86:8f:1f:4a: 57:e9:16:60:1f:34:28:a6:e6:05:f9:95:06:55:fd: 2f:2e:3b:bc:a9:fb:e6:44:50:9d:c0:13:47:5d:87: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5F:89:51:30:44:7C:AF:8F:83:D3:0C:AF:A9:D6:29:5F:3B:9F:61 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_1-JUTBEfK-Pg9MMr6nWKV87n2E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.168.0/21 Signature Algorithm: sha256WithRSAEncryption 54:10:97:ae:3d:36:04:ca:be:bb:55:e5:3b:5e:a6:d5:a4:7a: 21:9c:b5:f1:0f:79:3e:64:9d:d9:ee:fa:41:e4:8b:f0:73:8c: b5:b5:03:44:bc:df:35:5b:0d:77:81:29:9f:ea:25:75:e9:60: 3d:29:ce:ea:81:69:37:d7:8d:7f:5c:5a:dc:9a:c4:eb:b9:84: 3c:c3:14:ea:79:4d:6a:74:f6:2a:82:51:73:3a:55:a1:fc:64: ea:35:a5:28:17:ec:5b:cf:78:17:79:96:65:7c:79:3e:51:18: 9d:70:f9:34:b3:07:57:3f:1f:0a:2b:4a:2b:98:97:70:90:8c: d6:e6:8a:4e:e1:f4:b3:fb:98:83:8b:50:44:ac:ae:ee:39:51: b8:3a:53:21:a1:fb:01:76:20:d6:f5:7f:d2:f2:72:7d:c4:7f: e3:b4:c5:69:36:9f:3b:02:9e:4d:3d:04:43:c3:e0:d4:62:c9: 13:a4:36:93:48:1a:67:f6:92:fa:75:15:bd:0b:02:1d:1a:e3: 70:48:c5:24:39:0f:50:6b:f6:07:5a:e7:b8:fc:24:ab:5d:fb: 6c:e8:4b:d2:c6:f7:1f:8b:ce:9b:bd:01:a5:c6:84:7e:c9:e4: 84:ed:37:86:b0:dc:55:e9:26:86:ee:9e:9d:ad:66:ed:b6:f9: 9a:be:be:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZGNUY4OTUxMzA0NDdD QUY4RjgzRDMwQ0FGQTlENjI5NUYzQjlGNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSmVXElFgbBjCiMfwpnEvLe6fTP8M4J6dDUKq6PHkWbEv8lPGP 2SojbSLaUJtEyQM7iZvhJlkcUo5vsCEdTw2q676XUI9DOp1LCpkHbeHCl69VCygQ v3gdoeNhrJhpxlrRJtvBKADjOdjjM8+PAlcRX5toUMz6mCqnEM1cE5UAnYpViVHw 1tkgYYFnGxC/HK2X4OCG78WSL37SXB5ErFVzOYuLHg8xmbGZlF8gGfHw5cfCGFnO aSOFx6qY+7Efcl/JtpgT1vhlePDqgxatYxY8tUjS5M+bCB9uRbmHho8fSlfpFmAf NCim5gX5lQZV/S8uO7yp++ZEUJ3AE0ddhwA5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/1+JUTBEfK+Pg9MMr6nWKV87n2EwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL18xLUpVVEJFZkstUGc5TU1y Nm5XS1Y4N24yRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n6gwDQYJKoZIhvcNAQELBQADggEBAFQQl649NgTKvrtV5TteptWkeiGctfEPeT5k ndnu+kHki/BzjLW1A0S83zVbDXeBKZ/qJXXpYD0pzuqBaTfXjX9cWtyaxOu5hDzD FOp5TWp09iqCUXM6VaH8ZOo1pSgX7FvPeBd5lmV8eT5RGJ1w+TSzB1c/HworSiuY l3CQjNbmik7h9LP7mIOLUESsru45Ubg6UyGh+wF2INb1f9Lycn3Ef+O0xWk2nzsC nk09BEPD4NRiyROkNpNIGmf2kvp1Fb0LAh0a43BIxSQ5D1Br9gda57j8JKtd+2zo S9LG9x+Lzpu9AaXGhH7J5ITtN4aw3FXpJobunp2tZu22+Zq+vi4= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org