$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVO2ymbrN25Afe7vdpjhf0NNhjk.roa File: nVO2ymbrN25Afe7vdpjhf0NNhjk.roa (raw, json) Hash identifier: MUYqOwQWwMtRDW8Ey3TFMlc3lgiqUZ+yE30p2ScOz0Y= Subject key identifier: 9D:53:B6:CA:66:EB:37:6E:40:7D:EE:EF:76:98:E1:7F:43:4D:86:39 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E21 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVO2ymbrN25Afe7vdpjhf0NNhjk.roa Signing time: Fri 01 Sep 2023 10:15:42 +0000 ROA not before: Fri 01 Sep 2023 10:15:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7713 (0x1e21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9D53B6CA66EB376E407DEEEF7698E17F434D8639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:45:85:78:02:39:b9:4e:d3:b8:e9:ad:47:26: 47:35:2a:f1:a0:0a:a1:eb:ab:ac:fa:86:88:cc:63: 4d:04:87:8e:25:2d:dc:ad:26:f0:9f:d1:4e:d8:83: b9:65:f5:fc:44:68:3a:cc:55:ff:c0:4f:d8:c6:02: e6:ab:9d:b9:bc:5c:77:68:32:0b:d0:62:c9:dc:70: 7c:63:a1:c4:04:ce:8c:e0:3c:99:67:9b:e4:52:a6: 71:b9:9e:a0:0d:80:84:f9:c5:de:f9:4c:e0:88:65: 8f:d0:0d:6e:2a:49:6d:fc:ec:af:29:6c:3c:21:f6: 0f:e6:4c:70:77:92:b4:04:e0:26:6c:5b:ee:b5:ee: 8e:26:30:79:28:3e:b6:c6:3b:5e:1e:b5:1f:22:20: c9:ed:1b:0f:43:83:7d:bd:4f:6c:1f:6d:08:bc:56: 22:2c:1f:a5:e1:46:db:dc:8e:42:00:47:ba:83:c4: 14:0d:7e:c9:f8:6c:eb:80:9d:bb:34:c7:cb:cb:37: dc:99:0a:bf:bf:63:c3:e6:b4:34:e1:75:b8:00:f8: 54:07:2a:aa:dc:bb:17:29:90:cb:ca:75:b3:05:4e: e6:a2:bc:f1:08:d2:92:43:49:58:ac:d4:dd:c8:b3: ba:2d:fe:24:06:6b:5d:2b:bd:70:16:6e:53:6e:bd: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:53:B6:CA:66:EB:37:6E:40:7D:EE:EF:76:98:E1:7F:43:4D:86:39 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVO2ymbrN25Afe7vdpjhf0NNhjk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.16.0/20 Signature Algorithm: sha256WithRSAEncryption 23:e1:2c:1b:73:17:78:78:2d:43:79:e3:61:c2:6d:e0:86:5e: bc:e6:af:4c:5d:03:12:bb:b3:48:e3:8b:1c:83:dc:69:ae:c2: af:ef:5c:28:25:10:45:24:05:95:61:18:e3:ad:94:43:a1:73: 30:73:f0:5e:f1:3d:cd:8f:70:c4:23:c4:60:2b:f7:2e:e1:ed: 6a:35:00:27:ca:d9:65:8b:cc:a9:d7:7b:41:df:af:da:2f:7f: 17:70:61:4a:69:e2:0a:44:36:08:13:70:6b:f8:ae:bf:7b:34: 83:83:9b:e2:84:3f:e7:e1:bb:3b:55:31:45:71:3c:35:7a:ca: 69:29:65:4a:40:17:ab:3f:d7:3b:67:ce:4b:a9:c7:46:81:74: 6c:02:9f:1a:5a:c2:71:c4:b9:d3:b9:7d:21:3a:76:21:ef:93: e9:cb:77:ca:92:a5:28:a9:92:b2:52:17:22:4d:f7:5e:01:54: 4d:34:59:e1:2a:04:ab:40:e0:40:35:03:eb:b0:5e:2c:ef:95: 4f:a1:28:fb:63:b7:0f:44:c6:8b:66:51:21:fb:55:16:93:d8: 90:eb:b2:d3:f5:98:40:80:e6:dc:60:58:34:7a:6d:fe:9d:12: 28:e6:3d:81:9e:7f:1c:f6:51:aa:ae:c3:b8:94:d9:28:fd:f2: 09:8c:bf:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlENTNCNkNBNjZFQjM3 NkU0MDdERUVFRjc2OThFMTdGNDM0RDg2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiRYV4Ajm5TtO46a1HJkc1KvGgCqHrq6z6hojMY00Eh44lLdyt JvCf0U7Yg7ll9fxEaDrMVf/AT9jGAuarnbm8XHdoMgvQYsnccHxjocQEzozgPJln m+RSpnG5nqANgIT5xd75TOCIZY/QDW4qSW387K8pbDwh9g/mTHB3krQE4CZsW+61 7o4mMHkoPrbGO14etR8iIMntGw9Dg329T2wfbQi8ViIsH6XhRtvcjkIAR7qDxBQN fsn4bOuAnbs0x8vLN9yZCr+/Y8PmtDThdbgA+FQHKqrcuxcpkMvKdbMFTuaivPEI 0pJDSVis1N3Is7ot/iQGa10rvXAWblNuvYapAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnVO2ymbrN25Afe7vdpjhf0NNhjkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25WTzJ5bWJyTjI1QWZlN3Zk cGpoZjBOTmhqay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx nxAwDQYJKoZIhvcNAQELBQADggEBACPhLBtzF3h4LUN542HCbeCGXrzmr0xdAxK7 s0jjixyD3Gmuwq/vXCglEEUkBZVhGOOtlEOhczBz8F7xPc2PcMQjxGAr9y7h7Wo1 ACfK2WWLzKnXe0Hfr9ovfxdwYUpp4gpENggTcGv4rr97NIODm+KEP+fhuztVMUVx PDV6ymkpZUpAF6s/1ztnzkupx0aBdGwCnxpawnHEudO5fSE6diHvk+nLd8qSpSip krJSFyJN914BVE00WeEqBKtA4EA1A+uwXizvlU+hKPtjtw9ExotmUSH7VRaT2JDr stP1mECA5txgWDR6bf6dEijmPYGefxz2Uaquw7iU2Sj98gmMvzc= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org