$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jI2Foyc-GcZ2ZxjrUjH9eZpEqjo.roa File: jI2Foyc-GcZ2ZxjrUjH9eZpEqjo.roa (raw, json) Hash identifier: 0t1Wa3sz+n5y0LlC9atRY5+B7EWffwuO+ZO0IQMK8Cw= Subject key identifier: 8C:8D:85:A3:27:3E:19:C6:76:67:18:EB:52:31:FD:79:9A:44:AA:3A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DC3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jI2Foyc-GcZ2ZxjrUjH9eZpEqjo.roa Signing time: Fri 01 Sep 2023 10:15:15 +0000 ROA not before: Fri 01 Sep 2023 10:15:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 49.159.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7619 (0x1dc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8C8D85A3273E19C6766718EB5231FD799A44AA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:06:46:46:60:c2:74:a4:38:fb:53:e9:2a: 52:b1:72:aa:63:95:23:8e:f9:0c:ee:9d:73:d4:fc: 85:d8:1d:60:4a:85:66:b7:a7:a7:cb:80:cc:1e:de: d1:99:d8:06:ff:37:82:75:72:75:21:f9:d5:a6:c0: d8:f7:94:b0:48:98:12:d3:61:a5:b1:e0:95:41:7e: 53:0a:c8:c2:1b:e9:45:1f:31:a6:f1:9c:f9:dc:95: a8:d0:3f:1a:56:83:18:3f:ec:79:6e:a9:e5:10:62: 4b:d2:8c:7f:2a:5e:9a:5c:dd:db:46:fa:bd:be:ee: 1e:10:fe:4d:a2:5d:60:90:fc:f4:06:36:c3:9b:c9: df:4a:39:6a:13:62:9c:fb:83:78:34:06:98:8e:c5: bd:56:45:75:e4:19:09:48:18:e5:49:bb:79:b4:4d: 56:81:13:97:28:6a:f6:b9:22:34:3e:be:33:2e:91: 5d:e5:95:b6:a2:5b:bd:8a:2d:87:ec:37:5a:8c:c9: 38:73:2a:66:70:af:96:1e:5e:60:3b:49:04:05:92: 2d:29:2b:e4:47:0a:c3:7c:7b:fc:c0:26:a8:ad:cc: 08:69:c4:1d:17:d8:92:48:4b:30:18:99:c8:7f:0e: dc:3a:a1:f9:98:72:04:a1:d2:e9:7c:44:81:f9:4d: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8D:85:A3:27:3E:19:C6:76:67:18:EB:52:31:FD:79:9A:44:AA:3A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jI2Foyc-GcZ2ZxjrUjH9eZpEqjo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.208.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:60:4a:68:c1:78:f4:fb:01:f6:dc:5f:b4:a6:ec:dc:44:1c: a6:31:c6:8c:3b:8e:9c:1d:22:24:36:f0:cb:3a:14:ad:a4:49: 08:e4:e7:89:04:d6:04:84:c7:b0:c4:41:7b:a9:dd:15:d7:2f: 3f:b2:d0:95:56:8b:7c:aa:75:e7:36:04:13:98:4a:c7:e2:cb: 67:38:19:b6:4e:c3:59:af:ac:71:e0:58:fb:98:03:e4:79:11: 12:7c:94:5a:83:3e:cd:a5:c3:ec:ba:3c:2d:7a:b2:9c:80:0c: 7e:21:7a:61:16:5c:5c:16:ee:aa:d6:6c:97:dc:24:95:21:dc: 6b:b4:1b:50:fc:cd:75:c2:f9:06:24:f4:74:b1:5e:bf:8f:de: 52:6b:e0:fe:54:e1:ae:34:9a:9c:54:a7:08:fd:ff:17:82:5b: 6d:ca:81:d4:93:1d:b9:f9:ac:2b:50:32:a1:b9:d8:cc:b1:1c: ce:c4:13:7c:78:f4:73:c4:83:d1:ee:9a:a8:f4:02:1b:4b:f4: 74:13:0c:07:f5:21:cf:2d:13:57:0f:fc:ca:4a:80:20:42:0d: 3e:03:5f:e2:9e:5f:43:f8:0c:a7:a2:d8:a0:67:74:f3:b0:10: 03:1a:4c:82:c5:ad:2c:a7:20:3c:67:0f:c9:de:5d:f3:04:57: 4a:eb:af:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhDOEQ4NUEzMjczRTE5 QzY3NjY3MThFQjUyMzFGRDc5OUE0NEFBM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDuAZGRmDCdKQ4+1PpKlKxcqpjlSOO+QzunXPU/IXYHWBKhWa3 p6fLgMwe3tGZ2Ab/N4J1cnUh+dWmwNj3lLBImBLTYaWx4JVBflMKyMIb6UUfMabx nPnclajQPxpWgxg/7HluqeUQYkvSjH8qXppc3dtG+r2+7h4Q/k2iXWCQ/PQGNsOb yd9KOWoTYpz7g3g0BpiOxb1WRXXkGQlIGOVJu3m0TVaBE5coava5IjQ+vjMukV3l lbaiW72KLYfsN1qMyThzKmZwr5YeXmA7SQQFki0pK+RHCsN8e/zAJqitzAhpxB0X 2JJISzAYmch/Dtw6ofmYcgSh0ul8RIH5TXNhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjI2Foyc+GcZ2ZxjrUjH9eZpEqjowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pJMkZveWMtR2NaMlp4anJV akg5ZVpwRXFqby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx n9AwDQYJKoZIhvcNAQELBQADggEBAGpgSmjBePT7AfbcX7Sm7NxEHKYxxow7jpwd IiQ28Ms6FK2kSQjk54kE1gSEx7DEQXup3RXXLz+y0JVWi3yqdec2BBOYSsfiy2c4 GbZOw1mvrHHgWPuYA+R5ERJ8lFqDPs2lw+y6PC16spyADH4hemEWXFwW7qrWbJfc JJUh3Gu0G1D8zXXC+QYk9HSxXr+P3lJr4P5U4a40mpxUpwj9/xeCW23KgdSTHbn5 rCtQMqG52MyxHM7EE3x49HPEg9Humqj0AhtL9HQTDAf1Ic8tE1cP/MpKgCBCDT4D X+KeX0P4DKei2KBndPOwEAMaTILFrSynIDxnD8neXfMEV0rrr0I= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org