$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g81aVtZTo4XwQ0mIebWIYPBdHZw.roa File: g81aVtZTo4XwQ0mIebWIYPBdHZw.roa (raw, json) Hash identifier: RLk9d+W0g/TuFy0unmDeT3IhpKzdLHubxi7fabb/SFI= Subject key identifier: 83:CD:5A:56:D6:53:A3:85:F0:43:49:88:79:B5:88:60:F0:5D:1D:9C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E0A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g81aVtZTo4XwQ0mIebWIYPBdHZw.roa Signing time: Fri 01 Sep 2023 10:15:36 +0000 ROA not before: Fri 01 Sep 2023 10:15:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 49.159.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7690 (0x1e0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=83CD5A56D653A385F043498879B58860F05D1D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:f5:5f:d5:08:14:f1:70:b3:bf:a8:c3:b0: b0:b4:da:c3:10:d2:ce:d1:5a:4c:e8:ff:b7:08:2a: d3:04:4e:45:35:57:64:1f:87:a1:03:c9:71:96:6a: b5:bb:de:51:b5:23:7b:0e:98:02:b4:89:06:5d:78: 65:56:0f:a6:c5:f3:10:9c:3d:59:d9:ba:fa:9a:ed: de:e7:e9:8f:cb:20:31:f4:ec:51:ed:5d:2a:df:6a: db:ea:5a:db:ac:ef:da:4f:2f:64:be:7c:04:66:96: f8:be:b5:b1:ef:ff:5f:9d:49:fd:83:55:1d:f1:08: b4:fe:e4:5e:ab:ab:e4:41:45:0a:f4:2d:d4:e7:c0: 66:b9:7c:9f:8e:34:63:42:6b:00:59:db:0f:ef:0e: a9:b4:34:15:8e:52:b8:e0:be:28:aa:9b:08:dd:1a: 7e:f7:42:01:f8:f6:e5:20:c8:97:2a:13:04:aa:59: 9b:bb:eb:9f:d0:b9:d9:ba:60:fe:fb:12:b5:c2:83: e5:dc:12:e1:7e:2b:8c:65:9d:49:fb:b6:30:b4:ce: 6f:79:e0:f1:c1:69:c6:6c:b1:ed:70:8d:c5:93:42: 9d:15:c1:2e:be:c3:57:d7:15:6a:0b:91:a8:b1:aa: 48:47:39:74:7e:a2:40:e9:18:8a:5e:4e:cc:75:08: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CD:5A:56:D6:53:A3:85:F0:43:49:88:79:B5:88:60:F0:5D:1D:9C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g81aVtZTo4XwQ0mIebWIYPBdHZw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.68.0/22 Signature Algorithm: sha256WithRSAEncryption 37:a8:5e:dc:9d:0d:11:d7:bb:e8:7a:4b:05:da:a3:3e:24:59: 74:1d:60:83:2b:16:b4:61:24:b1:30:b8:2b:a5:ae:55:26:04: bc:2e:a1:bd:ef:77:98:09:1a:fe:57:57:6b:6b:15:ee:67:fe: a8:eb:31:39:2f:88:44:e4:2b:33:89:40:7a:17:10:8b:4b:8a: 40:e7:33:45:02:df:50:62:d4:48:12:95:ec:af:34:c2:32:ab: e8:2b:c8:c9:38:37:8b:9c:39:de:f3:87:1e:cc:63:2e:20:a4: 6f:03:f9:3d:7c:8e:f8:ff:3d:51:fa:9a:33:5a:82:19:a0:28: 5a:f2:78:10:15:88:a7:cd:65:20:6c:05:52:70:96:a5:bf:e3: 33:f9:bc:71:f9:e3:5b:84:71:04:a5:d1:bc:ef:22:04:3f:ac: 2f:d9:87:6c:1f:ca:a3:41:ef:5e:1c:8b:cd:f8:63:32:22:e7: fa:23:5e:a9:81:9f:30:21:d9:f5:b9:da:01:70:ed:4a:f7:68: e2:0e:d7:0e:c3:a0:98:a7:f2:02:dd:76:fe:ba:1e:8c:b2:de: 9b:a2:bc:dd:70:a6:28:88:65:73:95:f3:3e:b2:65:31:dd:19: fd:da:84:3b:df:0e:04:55:79:4d:e5:3d:f3:de:27:0b:17:5f: 97:8a:bb:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgzQ0Q1QTU2RDY1M0Ez ODVGMDQzNDk4ODc5QjU4ODYwRjA1RDFEOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrY/Vf1QgU8XCzv6jDsLC02sMQ0s7RWkzo/7cIKtMETkU1V2Qf h6EDyXGWarW73lG1I3sOmAK0iQZdeGVWD6bF8xCcPVnZuvqa7d7n6Y/LIDH07FHt XSrfatvqWtus79pPL2S+fARmlvi+tbHv/1+dSf2DVR3xCLT+5F6rq+RBRQr0LdTn wGa5fJ+ONGNCawBZ2w/vDqm0NBWOUrjgviiqmwjdGn73QgH49uUgyJcqEwSqWZu7 65/Qudm6YP77ErXCg+XcEuF+K4xlnUn7tjC0zm954PHBacZsse1wjcWTQp0VwS6+ w1fXFWoLkaixqkhHOXR+okDpGIpeTsx1CNG/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUg81aVtZTo4XwQ0mIebWIYPBdHZwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2c4MWFWdFpUbzRYd1EwbUll YldJWVBCZEhady5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n0QwDQYJKoZIhvcNAQELBQADggEBADeoXtydDRHXu+h6SwXaoz4kWXQdYIMrFrRh JLEwuCulrlUmBLwuob3vd5gJGv5XV2trFe5n/qjrMTkviETkKzOJQHoXEItLikDn M0UC31Bi1EgSleyvNMIyq+gryMk4N4ucOd7zhx7MYy4gpG8D+T18jvj/PVH6mjNa ghmgKFryeBAViKfNZSBsBVJwlqW/4zP5vHH541uEcQSl0bzvIgQ/rC/Zh2wfyqNB 714ci834YzIi5/ojXqmBnzAh2fW52gFw7Ur3aOIO1w7DoJin8gLddv66Hoyy3pui vN1wpiiIZXOV8z6yZTHdGf3ahDvfDgRVeU3lPfPeJwsXX5eKu9o= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org