$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hM2sSBxgeDHLsfbH84rnwuCh6tg.roa File: hM2sSBxgeDHLsfbH84rnwuCh6tg.roa (raw, json) Hash identifier: fKJA3APZEBtBKqz3Z7lcUiVi9jhECWY/+gN8UVZsRB8= Subject key identifier: 84:CD:AC:48:1C:60:78:31:CB:B1:F6:C7:F3:8A:E7:C2:E0:A1:EA:D8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E0E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hM2sSBxgeDHLsfbH84rnwuCh6tg.roa Signing time: Fri 01 Sep 2023 10:15:37 +0000 ROA not before: Fri 01 Sep 2023 10:15:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7694 (0x1e0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=84CDAC481C607831CBB1F6C7F38AE7C2E0A1EAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:93:66:ac:86:f3:8a:ab:3d:95:3d:93:3d: 74:65:26:af:2d:e3:06:c4:50:af:d8:00:de:86:a7: aa:25:08:7d:12:f4:b5:59:7e:28:06:bb:34:cd:9d: 3c:86:38:82:9f:a4:8c:a1:2b:21:b1:19:93:ae:2f: 87:14:e9:d5:f7:b5:26:1b:58:c9:46:91:fc:40:58: b5:1e:00:11:bd:8c:8a:da:a1:8c:8a:05:3d:ed:49: a4:f4:fa:38:35:96:8e:94:87:cd:b8:27:8a:6e:83: eb:73:c0:5a:a1:fd:7c:8f:04:18:00:72:d9:c2:cc: c9:b8:f8:c0:d6:fb:ad:90:71:b0:c1:da:28:87:07: 41:98:35:ec:ec:fd:92:b9:8b:1d:1b:ad:54:d7:38: b1:3e:f0:55:90:8d:1e:02:e4:ab:f8:92:5a:3f:fd: d7:aa:d4:6b:2b:1e:60:0e:46:e7:76:03:c1:e5:8d: 29:20:71:3f:d3:bf:cc:be:fe:23:78:b9:b4:59:4f: e1:cb:0f:62:eb:71:53:e2:39:0a:df:51:0b:b1:af: 9e:fd:1c:8f:db:8a:c3:cf:87:2a:f3:67:15:ce:2a: ee:0a:f0:87:f3:f7:7b:b4:e1:0a:14:be:3d:c3:9f: df:58:c9:e9:6c:03:89:c0:93:4b:76:b2:e8:3a:5d: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CD:AC:48:1C:60:78:31:CB:B1:F6:C7:F3:8A:E7:C2:E0:A1:EA:D8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hM2sSBxgeDHLsfbH84rnwuCh6tg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.216.0/21 Signature Algorithm: sha256WithRSAEncryption 13:6f:5a:9a:d9:40:b7:bc:f4:22:e6:83:b6:db:a7:78:b7:30: ed:49:11:8d:23:4c:44:81:57:77:2b:fb:3c:8f:a7:cc:53:55: 79:1b:ef:b1:9d:af:8f:68:44:92:94:d9:ba:44:00:62:23:aa: 9a:8d:5e:35:24:75:e7:35:7e:fa:13:89:45:4d:6b:0f:45:23: ce:89:11:82:a2:ad:d8:d6:25:bc:08:ba:ed:57:e5:fb:b8:4c: 29:23:dc:e3:1d:65:1f:e4:f0:a5:f0:cb:65:24:98:ea:b3:b6: 0b:3c:0a:0f:d9:f1:e0:d1:43:55:22:67:e9:e9:04:fe:39:e6: e4:8c:01:0c:7b:e8:a8:bb:f5:0a:a4:6d:65:5b:5b:c8:b0:62: d5:82:13:9c:ac:55:db:2b:c2:74:e2:51:d3:00:f6:a7:f7:48: 25:2f:62:4c:c1:16:f9:a9:ee:cf:19:8b:eb:fd:55:94:d9:ff: 69:33:ed:18:1b:23:21:4c:4b:b1:13:cf:7a:90:f0:8c:83:33: a4:7b:e8:66:37:5f:0e:71:f9:03:37:b0:58:f0:58:05:8a:1f: 7b:5f:e9:13:50:9e:c3:56:3a:c1:82:78:22:ee:7b:6e:16:d1: a7:cd:24:b6:db:33:86:5c:2a:32:ed:ba:c5:de:9a:fb:a2:55: b4:a0:26:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg0Q0RBQzQ4MUM2MDc4 MzFDQkIxRjZDN0YzOEFFN0MyRTBBMUVBRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA7ZNmrIbziqs9lT2TPXRlJq8t4wbEUK/YAN6Gp6olCH0S9LVZ figGuzTNnTyGOIKfpIyhKyGxGZOuL4cU6dX3tSYbWMlGkfxAWLUeABG9jIraoYyK BT3tSaT0+jg1lo6Uh824J4pug+tzwFqh/XyPBBgActnCzMm4+MDW+62QcbDB2iiH B0GYNezs/ZK5ix0brVTXOLE+8FWQjR4C5Kv4klo//deq1GsrHmAORud2A8HljSkg cT/Tv8y+/iN4ubRZT+HLD2LrcVPiOQrfUQuxr579HI/bisPPhyrzZxXOKu4K8Ifz 93u04QoUvj3Dn99YyelsA4nAk0t2sug6XY1fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhM2sSBxgeDHLsfbH84rnwuCh6tgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hNMnNTQnhnZURITHNmYkg4 NHJud3VDaDZ0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n9gwDQYJKoZIhvcNAQELBQADggEBABNvWprZQLe89CLmg7bbp3i3MO1JEY0jTESB V3cr+zyPp8xTVXkb77Gdr49oRJKU2bpEAGIjqpqNXjUkdec1fvoTiUVNaw9FI86J EYKirdjWJbwIuu1X5fu4TCkj3OMdZR/k8KXwy2UkmOqztgs8Cg/Z8eDRQ1UiZ+np BP455uSMAQx76Ki79QqkbWVbW8iwYtWCE5ysVdsrwnTiUdMA9qf3SCUvYkzBFvmp 7s8Zi+v9VZTZ/2kz7RgbIyFMS7ETz3qQ8IyDM6R76GY3Xw5x+QM3sFjwWAWKH3tf 6RNQnsNWOsGCeCLue24W0afNJLbbM4ZcKjLtusXemvuiVbSgJtI= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org