$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jCRNLGNvRvydraX4Bo-MXOaE8rw.roa File: jCRNLGNvRvydraX4Bo-MXOaE8rw.roa (raw, json) Hash identifier: 2RzkEpg5Bub2+Sj69iuG/m8LSgpJwAFzMrRrWZKS1i8= Subject key identifier: 8C:24:4D:2C:63:6F:46:FC:9D:AD:A5:F8:06:8F:8C:5C:E6:84:F2:BC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E8A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jCRNLGNvRvydraX4Bo-MXOaE8rw.roa Signing time: Fri 01 Sep 2023 10:16:11 +0000 ROA not before: Fri 01 Sep 2023 10:16:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7818 (0x1e8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8C244D2C636F46FC9DADA5F8068F8C5CE684F2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:94:b2:11:63:b4:69:55:5e:16:bb:a0:9e: 8f:13:be:a6:f2:58:c8:2b:b1:69:b9:c7:f5:18:91: b0:a5:c8:41:b0:01:0c:a2:79:3f:41:ce:4e:22:dd: e4:fb:b0:7d:e4:49:92:2b:b6:c0:30:1b:cd:9c:fc: c5:ac:56:05:56:9a:38:3b:4a:d6:e1:3a:ac:f6:6c: b9:15:64:53:49:12:4f:4f:96:12:e4:69:c2:8a:d3: 1b:73:ab:b2:a3:3b:6b:52:5b:3a:b6:eb:16:d1:69: d9:c6:07:d6:4d:a1:d1:e7:0f:3f:23:19:65:83:a4: 38:13:a7:32:03:72:8a:3d:81:ea:09:6e:f1:7b:b5: df:e0:7d:4d:b8:3c:6b:1a:f7:4d:2d:66:8b:d1:6a: d6:06:0b:89:66:22:76:3f:90:5c:03:86:4d:cb:0a: 2a:02:e6:9a:77:86:0e:22:77:4c:b7:91:09:e0:da: 76:05:47:48:70:c2:6c:91:64:c0:15:4a:e9:99:dc: 53:a3:f3:a3:4a:8d:c2:65:84:a4:2e:7b:1e:a4:61: f6:71:c9:86:73:ec:66:aa:16:74:3c:1d:e7:36:58: 24:e4:f5:b9:75:da:cf:3e:7c:b2:b1:ca:b0:53:30: b1:12:34:69:3c:5b:b5:c3:af:e9:df:f0:e3:79:28: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:24:4D:2C:63:6F:46:FC:9D:AD:A5:F8:06:8F:8C:5C:E6:84:F2:BC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jCRNLGNvRvydraX4Bo-MXOaE8rw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.64.0/21 Signature Algorithm: sha256WithRSAEncryption 20:4a:b3:cf:1a:14:ff:b9:31:5b:15:90:27:dd:c2:08:07:6d: 21:4d:4c:21:18:15:31:0e:88:e2:90:4d:70:64:0a:7b:5b:33: 7f:00:71:0b:65:b3:aa:3d:65:9b:4c:c1:ee:ca:31:69:a8:b9: 5e:91:19:4b:8a:5c:40:ac:b3:54:80:49:fa:c0:e7:41:88:70: 7b:cc:ea:d6:6a:c4:f7:97:3e:83:11:50:66:02:e5:23:57:45: 17:50:32:43:3e:f7:e4:53:fa:c6:a3:23:8f:be:6e:18:8b:44: 19:36:d7:19:88:3f:15:b9:25:5d:c3:dd:14:32:54:b0:c5:9c: d5:cf:07:38:50:8b:53:61:57:de:99:00:86:ba:8c:28:0e:bf: 58:4b:32:7a:9b:2a:a7:62:4f:b9:45:97:24:94:2e:4a:52:5f: 98:df:8e:07:65:a9:92:bd:47:db:36:49:00:d4:46:eb:37:e9: 0a:af:49:43:6e:c8:a0:20:b5:96:fc:6d:31:64:63:ba:0b:60: 13:0b:ef:5f:fd:5b:8b:28:8c:4a:6b:1b:40:eb:e7:d8:04:b6: 2c:52:3f:09:eb:72:ac:e3:03:8a:ea:dd:2a:d3:a4:aa:ab:cf: 80:14:22:0a:0d:dc:26:9f:0c:ff:f9:6d:6e:1e:12:c3:bb:0d: 13:47:f2:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhDMjQ0RDJDNjM2RjQ2 RkM5REFEQTVGODA2OEY4QzVDRTY4NEYyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRkJSyEWO0aVVeFrugno8TvqbyWMgrsWm5x/UYkbClyEGwAQyi eT9Bzk4i3eT7sH3kSZIrtsAwG82c/MWsVgVWmjg7StbhOqz2bLkVZFNJEk9PlhLk acKK0xtzq7KjO2tSWzq26xbRadnGB9ZNodHnDz8jGWWDpDgTpzIDcoo9geoJbvF7 td/gfU24PGsa900tZovRatYGC4lmInY/kFwDhk3LCioC5pp3hg4id0y3kQng2nYF R0hwwmyRZMAVSumZ3FOj86NKjcJlhKQuex6kYfZxyYZz7GaqFnQ8Hec2WCTk9bl1 2s8+fLKxyrBTMLESNGk8W7XDr+nf8ON5KO8DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjCRNLGNvRvydraX4Bo+MXOaE8rwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pDUk5MR052UnZ5ZHJhWDRC by1NWE9hRThydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx nkAwDQYJKoZIhvcNAQELBQADggEBACBKs88aFP+5MVsVkCfdwggHbSFNTCEYFTEO iOKQTXBkCntbM38AcQtls6o9ZZtMwe7KMWmouV6RGUuKXECss1SASfrA50GIcHvM 6tZqxPeXPoMRUGYC5SNXRRdQMkM+9+RT+sajI4++bhiLRBk21xmIPxW5JV3D3RQy VLDFnNXPBzhQi1NhV96ZAIa6jCgOv1hLMnqbKqdiT7lFlySULkpSX5jfjgdlqZK9 R9s2SQDURus36QqvSUNuyKAgtZb8bTFkY7oLYBML71/9W4sojEprG0Dr59gEtixS PwnrcqzjA4rq3SrTpKqrz4AUIgoN3CafDP/5bW4eEsO7DRNH8tE= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org