$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jl3htdwWKVHhsHFG2zblnXua1E.roa File: 2jl3htdwWKVHhsHFG2zblnXua1E.roa (raw, json) Hash identifier: fFfsiFe83sA0MIUKvUqN6UJ97dXtHNIPDdlLUiaKjiE= Subject key identifier: DA:39:77:86:D7:70:58:A5:47:86:C1:C5:1B:6C:DB:96:75:EE:6B:51 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E64 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jl3htdwWKVHhsHFG2zblnXua1E.roa Signing time: Fri 01 Sep 2023 10:15:59 +0000 ROA not before: Fri 01 Sep 2023 10:15:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 211.76.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7780 (0x1e64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DA397786D77058A54786C1C51B6CDB9675EE6B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:6f:61:82:36:65:9c:cd:4b:d7:68:34:89: a9:95:c6:11:a7:79:80:87:d9:48:bd:4f:e1:80:e3: 84:cc:94:29:69:ed:a7:6c:73:54:b2:43:40:7e:48: 0e:66:9b:af:bf:49:a5:8e:e7:40:8d:97:22:13:5a: 90:68:13:96:24:40:f2:f0:91:23:f6:29:39:31:0e: 5a:47:b3:9a:4c:39:90:d2:a8:a5:6e:7e:d9:69:49: de:eb:0e:29:21:2b:80:ba:86:2b:a6:e5:a3:09:a9: d0:2a:36:1d:65:47:dd:87:b0:4d:d7:c6:4a:06:e7: 9d:cc:10:ff:c9:c9:2f:78:04:ad:64:95:58:4c:9a: 78:43:90:da:de:2f:f8:19:fc:d4:6d:1a:ad:6f:8f: 20:e1:56:79:ab:d7:4e:fa:bf:22:c6:39:60:c9:d9: 6c:f5:8e:fe:aa:1d:2e:02:6f:1e:7a:52:d8:0e:7a: 20:73:04:39:9d:ac:2f:d2:83:69:b7:26:61:a9:7b: fc:ff:8c:d3:49:8c:20:b3:37:87:c4:ec:a0:de:bc: a1:c5:b7:80:8a:16:dd:34:66:fc:1f:e4:06:7c:ca: bf:b8:a1:c5:dc:cd:ba:45:79:dc:7c:7f:ea:6d:06: 5a:52:f3:56:e4:f2:14:c3:90:47:c2:8c:c3:1a:6c: 4d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:77:86:D7:70:58:A5:47:86:C1:C5:1B:6C:DB:96:75:EE:6B:51 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jl3htdwWKVHhsHFG2zblnXua1E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.72.0/22 Signature Algorithm: sha256WithRSAEncryption a1:00:3b:fd:02:64:e5:c3:da:aa:3d:f4:9a:c1:51:19:0d:a2: 86:0d:5c:0a:dd:93:6e:ec:a3:88:d2:67:e3:2c:61:f3:e0:39: 80:18:da:77:d4:a5:70:35:4b:67:bb:18:83:ac:ac:d0:80:db: 10:52:27:77:28:30:73:0d:e3:cf:df:55:e0:af:72:36:b7:c9: 6e:3c:6d:10:9f:f7:a6:17:dc:ad:eb:cc:2a:c9:d3:cc:28:a3: 61:ee:b6:8e:01:15:33:1e:7c:44:04:91:49:f5:19:c4:f4:34: 22:8c:85:a5:80:a9:c6:dc:07:f0:94:54:fc:ca:dd:36:c2:41: e1:3f:fc:d3:90:11:8b:5a:83:fa:73:6a:b0:cf:fe:2d:f6:6e: f3:93:53:dd:1b:8a:36:61:65:da:92:c5:f5:ee:63:29:df:be: ed:60:79:ee:ec:e1:f8:22:5b:b9:33:a0:18:ce:72:53:d1:d4: c2:48:de:e0:a1:87:fe:a2:1e:8d:46:c0:7e:1a:41:68:cf:46: e2:15:11:cd:e6:c3:14:ec:d0:bf:f4:31:72:07:cc:58:3f:e8: 7d:a3:0f:d2:e5:db:5e:e4:89:8e:09:24:f4:12:69:b6:8d:62: 48:af:74:06:75:f4:9e:c2:29:37:68:88:9e:9f:22:6b:64:88: 28:15:e9:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERBMzk3Nzg2RDc3MDU4 QTU0Nzg2QzFDNTFCNkNEQjk2NzVFRTZCNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1GG9hgjZlnM1L12g0iamVxhGneYCH2Ui9T+GA44TMlClp7ads c1SyQ0B+SA5mm6+/SaWO50CNlyITWpBoE5YkQPLwkSP2KTkxDlpHs5pMOZDSqKVu ftlpSd7rDikhK4C6hium5aMJqdAqNh1lR92HsE3XxkoG553MEP/JyS94BK1klVhM mnhDkNreL/gZ/NRtGq1vjyDhVnmr1076vyLGOWDJ2Wz1jv6qHS4Cbx56UtgOeiBz BDmdrC/Sg2m3JmGpe/z/jNNJjCCzN4fE7KDevKHFt4CKFt00Zvwf5AZ8yr+4ocXc zbpFedx8f+ptBlpS81bk8hTDkEfCjMMabE2FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2jl3htdwWKVHhsHFG2zblnXua1EwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJqbDNodGR3V0tWSGhzSEZH MnpibG5YdWExRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TEgwDQYJKoZIhvcNAQELBQADggEBAKEAO/0CZOXD2qo99JrBURkNooYNXArdk27s o4jSZ+MsYfPgOYAY2nfUpXA1S2e7GIOsrNCA2xBSJ3coMHMN48/fVeCvcja3yW48 bRCf96YX3K3rzCrJ08woo2Huto4BFTMefEQEkUn1GcT0NCKMhaWAqcbcB/CUVPzK 3TbCQeE//NOQEYtag/pzarDP/i32bvOTU90bijZhZdqSxfXuYynfvu1gee7s4fgi W7kzoBjOclPR1MJI3uChh/6iHo1GwH4aQWjPRuIVEc3mwxTs0L/0MXIHzFg/6H2j D9Ll217kiY4JJPQSabaNYkivdAZ19J7CKTdoiJ6fImtkiCgV6bE= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org