$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa File: 5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa (raw, json) Hash identifier: +XqKmW2M4uKjCgL4RmS0gheIlzJfABQ89EumnQ8Jv54= Subject key identifier: E4:89:65:DC:F1:03:1F:73:58:20:15:D7:14:A1:AE:89:5B:1C:1D:E4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E38 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa Signing time: Fri 01 Sep 2023 10:15:48 +0000 ROA not before: Fri 01 Sep 2023 10:15:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 119.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7736 (0x1e38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E48965DCF1031F73582015D714A1AE895B1C1DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d4:16:d8:df:c9:f1:92:98:15:9d:38:1f:76: a8:12:8c:3f:f6:e2:9d:31:a9:1e:41:e9:3b:3b:66: eb:2d:b7:b7:63:47:cb:2a:76:c2:7f:61:4f:25:8f: 29:9d:71:ef:c4:1f:eb:0b:6f:20:33:fc:c3:07:bb: 2e:d2:e8:f1:15:b0:c0:e9:0f:b9:71:74:96:ff:df: 30:03:56:d0:d5:c0:92:17:08:ea:12:6d:4c:62:a2: 19:6b:28:50:11:33:6c:0d:5a:cd:a2:44:05:ad:8d: 3f:3d:7f:4f:f7:f4:cd:43:07:fc:c3:93:5b:53:59: 31:b2:e5:24:e8:8d:5a:01:93:3b:5d:b2:79:97:d1: 52:c7:e9:fc:8e:67:0b:f7:c5:75:c2:cf:92:4a:4a: 72:61:cd:98:bc:c1:20:d0:02:0f:17:80:56:51:37: 34:80:eb:50:44:b1:c7:2f:c7:32:1a:3c:d7:3d:1f: e0:26:7c:3e:1d:78:86:39:6c:46:16:b1:2f:89:96: 81:11:c3:0b:8e:d3:11:50:a6:ec:b9:8a:06:4c:be: 60:d2:18:c9:be:0c:d9:cd:b8:63:f5:3c:b1:21:3e: 38:79:0f:34:26:c3:e2:4f:45:32:5b:60:88:5a:77: df:90:57:cb:6f:8a:63:0e:3b:f9:c9:22:8b:7a:59: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:89:65:DC:F1:03:1F:73:58:20:15:D7:14:A1:AE:89:5B:1C:1D:E4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 40:1e:fc:66:d6:ef:d5:26:76:ec:de:ec:f5:f4:e7:a8:19:1e: 02:4c:9a:51:58:97:d5:96:a3:2b:02:ac:b7:2b:e3:50:5b:a4: e5:d0:d0:04:90:20:52:2b:94:77:6a:d1:b9:3d:cd:28:52:4b: 8f:04:36:88:14:eb:00:d6:e2:f1:02:6b:b9:f7:fa:6a:dc:67: 20:10:6a:2d:c2:50:26:24:42:bd:3d:f5:e2:9d:06:3c:20:66: 53:2b:f2:7b:8b:d5:b6:19:6d:8f:66:8f:32:64:f5:cd:b5:fd: ee:be:89:0c:90:a0:6d:93:b6:be:71:fd:bf:7c:24:28:9b:bc: 45:65:38:3c:6e:d9:07:7d:10:5e:eb:cb:f8:b0:e2:6e:e8:ef: 2a:57:08:ab:8c:5d:39:ba:8a:a9:6d:2e:bb:5a:fc:89:05:c2: 99:78:7b:38:69:01:fa:bf:40:ac:4a:04:5c:0e:b5:ac:f5:58: 94:82:47:75:4a:87:92:a4:64:aa:1b:99:24:c4:03:47:ab:35: 46:0c:b6:c9:93:54:49:bc:03:18:32:77:11:4c:30:ef:9a:e4: 5a:11:66:9f:6c:9d:06:c1:11:b1:25:bc:e9:8c:c8:bf:75:eb: 5a:b3:0d:18:18:2b:58:88:22:b7:fd:f5:fb:0a:aa:0f:38:97: 0d:7c:56:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU0ODk2NURDRjEwMzFG NzM1ODIwMTVENzE0QTFBRTg5NUIxQzFERTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb1BbY38nxkpgVnTgfdqgSjD/24p0xqR5B6Ts7Zustt7djR8sq dsJ/YU8ljymdce/EH+sLbyAz/MMHuy7S6PEVsMDpD7lxdJb/3zADVtDVwJIXCOoS bUxiohlrKFARM2wNWs2iRAWtjT89f0/39M1DB/zDk1tTWTGy5STojVoBkztdsnmX 0VLH6fyOZwv3xXXCz5JKSnJhzZi8wSDQAg8XgFZRNzSA61BEsccvxzIaPNc9H+Am fD4deIY5bEYWsS+JloERwwuO0xFQpuy5igZMvmDSGMm+DNnNuGP1PLEhPjh5DzQm w+JPRTJbYIhad9+QV8tvimMOO/nJIot6WULVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5Ill3PEDH3NYIBXXFKGuiVscHeQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVJbGwzUEVESDNOWUlCWFhG S0d1aVZzY0hlUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 TYAwDQYJKoZIhvcNAQELBQADggEBAEAe/GbW79Umduze7PX056gZHgJMmlFYl9WW oysCrLcr41BbpOXQ0ASQIFIrlHdq0bk9zShSS48ENogU6wDW4vECa7n3+mrcZyAQ ai3CUCYkQr099eKdBjwgZlMr8nuL1bYZbY9mjzJk9c21/e6+iQyQoG2Ttr5x/b98 JCibvEVlODxu2Qd9EF7ry/iw4m7o7ypXCKuMXTm6iqltLrta/IkFwpl4ezhpAfq/ QKxKBFwOtaz1WJSCR3VKh5KkZKobmSTEA0erNUYMtsmTVEm8AxgydxFMMO+a5FoR Zp9snQbBEbElvOmMyL9161qzDRgYK1iIIrf99fsKqg84lw18Voc= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org