$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qF506Ktu7jvuX6xUpafSIAuJDSM.roa File: qF506Ktu7jvuX6xUpafSIAuJDSM.roa (raw, json) Hash identifier: 2JSwDuza4Aj9VEZwyOTktAX65S3vmFUR3g7pWyJ/ouI= Subject key identifier: A8:5E:74:E8:AB:6E:EE:3B:EE:5F:AC:54:A5:A7:D2:20:0B:89:0D:23 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D91 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qF506Ktu7jvuX6xUpafSIAuJDSM.roa Signing time: Fri 01 Sep 2023 10:15:01 +0000 ROA not before: Fri 01 Sep 2023 10:15:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.159.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7569 (0x1d91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A85E74E8AB6EEE3BEE5FAC54A5A7D2200B890D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d6:71:16:c0:1c:bc:ce:f2:47:4f:13:a7:d5: 8a:2c:88:ed:c1:cd:35:4a:7a:cb:d9:06:71:ef:f1: 09:34:67:6d:f4:00:b6:fb:4e:d6:aa:99:fa:f6:4c: f7:7a:a5:53:9f:76:a5:02:95:f3:6c:5d:a9:1f:17: bf:cf:b8:14:a6:03:50:90:ba:ac:64:12:96:c4:45: 0d:b4:6c:d3:42:6e:ec:18:3a:fd:20:1c:cf:64:f4: 80:44:f5:b9:03:0c:83:14:a6:85:8c:54:0e:08:10: e1:4c:b8:15:36:82:b6:d7:e6:20:dc:0b:2c:c8:86: 32:d0:a9:36:1c:e6:52:2a:ce:36:b7:41:40:77:a1: b2:6a:de:64:dd:d2:63:45:97:d9:ec:69:5b:e9:70: 39:47:71:fd:b3:d0:6a:55:9d:c7:96:f1:fd:2a:31: 0d:98:7e:07:a4:a0:11:c5:a0:5a:b5:34:3c:e7:82: 02:ef:db:5a:df:2c:4f:d8:19:d4:d7:52:b8:90:99: 18:ac:ee:10:82:9e:22:76:fb:b5:f9:87:dd:4d:a6: a8:18:5c:21:18:81:60:b1:33:67:7a:27:38:a4:2c: 89:12:ef:77:80:ef:c9:19:08:85:22:09:3c:0c:16: 72:5f:79:05:2c:e7:07:44:33:01:7c:4c:0f:86:23: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:74:E8:AB:6E:EE:3B:EE:5F:AC:54:A5:A7:D2:20:0B:89:0D:23 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qF506Ktu7jvuX6xUpafSIAuJDSM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.159.152.0/21 Signature Algorithm: sha256WithRSAEncryption 83:41:a3:1e:19:9b:bb:4a:76:17:d0:73:00:76:2b:a3:50:2a: c5:c6:63:4b:9d:cc:60:60:64:a1:dc:a9:76:1a:6c:85:2a:27: 5c:6d:f9:07:61:3e:e7:61:21:c3:c5:de:0b:aa:e3:15:59:a7: f5:2e:c1:2c:be:97:5a:61:7a:19:09:79:ab:44:af:61:dd:d9: e5:b2:fb:6c:65:18:ed:53:67:f0:d0:79:cb:d4:f4:05:17:81: 3a:5a:3f:79:6d:fe:62:69:9f:52:f2:8b:3b:b6:40:9f:8e:42: 91:45:39:68:16:d8:b9:be:95:5a:a2:52:fe:9c:17:cf:fd:bf: 1d:d5:7d:c5:57:29:18:65:2d:12:9e:33:a5:54:af:f6:a2:0c: 7a:1b:ac:0f:52:fb:c1:1e:8d:b6:4e:06:cc:e5:b9:0f:1e:31: ad:02:01:59:35:e8:68:18:17:af:e5:90:88:83:fa:57:4d:f8: 7c:3d:14:d1:77:ba:f7:43:a4:48:aa:d3:6b:b8:0e:33:0b:ec: db:ac:16:22:e8:a9:e6:46:8a:77:52:39:00:bf:ce:b0:a8:a2: aa:76:2e:c4:10:56:58:c8:94:86:29:c5:97:af:26:1d:7e:a3: 6c:07:ed:e5:94:55:1b:ba:5d:d7:e7:a8:b8:e1:04:91:2b:81: ed:b8:16:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE4NUU3NEU4QUI2RUVF M0JFRTVGQUM1NEE1QTdEMjIwMEI4OTBEMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD21nEWwBy8zvJHTxOn1YosiO3BzTVKesvZBnHv8Qk0Z230ALb7 Ttaqmfr2TPd6pVOfdqUClfNsXakfF7/PuBSmA1CQuqxkEpbERQ20bNNCbuwYOv0g HM9k9IBE9bkDDIMUpoWMVA4IEOFMuBU2grbX5iDcCyzIhjLQqTYc5lIqzja3QUB3 obJq3mTd0mNFl9nsaVvpcDlHcf2z0GpVnceW8f0qMQ2YfgekoBHFoFq1NDznggLv 21rfLE/YGdTXUriQmRis7hCCniJ2+7X5h91NpqgYXCEYgWCxM2d6JzikLIkS73eA 78kZCIUiCTwMFnJfeQUs5wdEMwF8TA+GIzPLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqF506Ktu7jvuX6xUpafSIAuJDSMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3FGNTA2S3R1N2p2dVg2eFVw YWZTSUF1SkRTTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx n5gwDQYJKoZIhvcNAQELBQADggEBAINBox4Zm7tKdhfQcwB2K6NQKsXGY0udzGBg ZKHcqXYabIUqJ1xt+QdhPudhIcPF3guq4xVZp/UuwSy+l1phehkJeatEr2Hd2eWy +2xlGO1TZ/DQecvU9AUXgTpaP3lt/mJpn1Lyizu2QJ+OQpFFOWgW2Lm+lVqiUv6c F8/9vx3VfcVXKRhlLRKeM6VUr/aiDHobrA9S+8EejbZOBszluQ8eMa0CAVk16GgY F6/lkIiD+ldN+Hw9FNF3uvdDpEiq02u4DjML7NusFiLoqeZGindSOQC/zrCooqp2 LsQQVljIlIYpxZevJh1+o2wH7eWUVRu6XdfnqLjhBJErge24FvI= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org