$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa File: 87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa (raw, json) Hash identifier: mam+c3T81C2F/FOMFaE1sxtywxf4uJF6vhNWfgHiwGQ= Subject key identifier: F3:B3:ED:E0:98:D1:05:A0:EA:B7:15:76:2A:03:C4:8D:20:97:0F:46 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2172 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa Signing time: Mon 26 Aug 2024 05:33:01 +0000 ROA not before: Mon 26 Aug 2024 05:33:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 211.76.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8562 (0x2172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F3B3EDE098D105A0EAB715762A03C48D20970F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:66:80:05:c5:0d:04:35:27:15:3f:ed:cd: 2c:7b:c7:8d:53:b6:9b:1a:55:10:01:e0:85:85:53: 44:81:19:2e:a1:61:7f:9a:a9:58:4a:de:cf:ff:81: 3a:b6:ac:cf:1e:e0:b8:31:f6:43:d6:83:50:95:b8: 5f:07:12:62:46:73:57:43:81:dd:b2:9b:5d:94:19: 7a:bd:9d:7e:8b:34:24:b1:df:9b:49:58:b8:f0:25: 36:5e:12:f9:44:29:b8:ba:82:9d:6b:4c:f4:9e:7e: 81:d3:1d:e8:eb:46:00:e7:7f:00:68:c9:ac:43:0d: 3d:c3:a3:60:84:0b:3c:9b:f7:8f:54:47:41:c7:1e: 1f:99:04:63:63:7f:c5:b4:0e:83:6f:5f:e8:bd:10: ad:dd:90:a8:0e:a9:60:4e:8b:96:0e:53:3c:1a:53: bf:1c:67:9e:2c:24:9d:80:25:ca:8d:bc:2f:84:7b: 31:fe:2a:8a:bb:d9:7a:d8:44:55:9e:27:33:8f:de: 89:29:63:fa:eb:c7:26:c8:a8:d0:38:da:9c:5b:ea: 73:35:d5:c7:4f:8e:99:15:93:52:b1:5f:cc:ed:0f: 1f:37:21:c8:73:a7:1f:ea:6a:9f:29:33:d5:07:8d: fc:a6:81:32:ac:d6:6e:ca:cc:e3:7b:ac:b9:d6:77: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B3:ED:E0:98:D1:05:A0:EA:B7:15:76:2A:03:C4:8D:20:97:0F:46 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.52.0/23 Signature Algorithm: sha256WithRSAEncryption 03:3f:d5:ef:77:cb:46:08:14:3d:ec:89:10:50:a5:c5:44:32: 08:be:b7:ab:a2:c7:1e:1c:66:b7:f8:11:2c:48:1e:7d:79:4c: e0:e0:cc:31:49:ff:4b:40:11:79:ba:ba:5d:fe:0b:4b:64:c4: f2:89:20:3a:fa:09:05:8f:84:1a:e3:35:c9:d0:fc:b1:b6:a8: 24:f4:df:2f:f9:8b:b2:cd:d4:d6:7b:e3:53:3a:f3:ba:fe:f2: 03:47:0d:03:b3:bd:c4:4a:c7:fd:50:63:a7:18:e0:31:06:8b: 6f:3f:1a:19:43:aa:47:ad:c2:2b:e5:57:c0:87:dc:c8:b9:25: 3f:db:bc:44:3c:1d:a7:f2:d7:d7:17:36:0c:e0:35:6b:16:07: 04:84:6b:9d:5b:10:8d:3a:40:e5:ec:a4:66:fe:fb:d7:e6:73: 88:10:7d:ec:77:99:dd:27:5d:70:a1:2d:0f:02:33:ee:b8:21: f5:38:e8:01:06:31:ee:a0:cb:02:c9:ac:a0:61:b8:08:fe:c4: 86:3b:e7:1b:69:cf:a1:3e:8c:5d:1b:fc:68:cb:b3:03:d2:eb: d2:5a:6a:88:c7:be:0e:65:32:46:d5:d3:a3:5e:b0:90:49:0c: e0:e7:bb:67:b5:ef:d6:38:eb:53:80:5e:b9:16:8a:26:ff:62: d1:f8:4a:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzQjNFREUwOThEMTA1 QTBFQUI3MTU3NjJBMDNDNDhEMjA5NzBGNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxvWaABcUNBDUnFT/tzSx7x41TtpsaVRAB4IWFU0SBGS6hYX+a qVhK3s//gTq2rM8e4Lgx9kPWg1CVuF8HEmJGc1dDgd2ym12UGXq9nX6LNCSx35tJ WLjwJTZeEvlEKbi6gp1rTPSefoHTHejrRgDnfwBoyaxDDT3Do2CECzyb949UR0HH Hh+ZBGNjf8W0DoNvX+i9EK3dkKgOqWBOi5YOUzwaU78cZ54sJJ2AJcqNvC+EezH+ Koq72XrYRFWeJzOP3okpY/rrxybIqNA42pxb6nM11cdPjpkVk1KxX8ztDx83Ichz px/qap8pM9UHjfymgTKs1m7KzON7rLnWdxJfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU87Pt4JjRBaDqtxV2KgPEjSCXD0YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzg3UHQ0SmpSQmFEcXR4VjJL Z1BFalNDWEQwWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TDQwDQYJKoZIhvcNAQELBQADggEBAAM/1e93y0YIFD3siRBQpcVEMgi+t6uixx4c Zrf4ESxIHn15TODgzDFJ/0tAEXm6ul3+C0tkxPKJIDr6CQWPhBrjNcnQ/LG2qCT0 3y/5i7LN1NZ741M687r+8gNHDQOzvcRKx/1QY6cY4DEGi28/GhlDqketwivlV8CH 3Mi5JT/bvEQ8Hafy19cXNgzgNWsWBwSEa51bEI06QOXspGb++9fmc4gQfex3md0n XXChLQ8CM+64IfU46AEGMe6gywLJrKBhuAj+xIY75xtpz6E+jF0b/GjLswPS69Ja aojHvg5lMkbV06NesJBJDODnu2e179Y461OAXrkWiib/YtH4SgY= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:57 2024 by rpki-client on console-ams.rpki-client.org