$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8xEUeJ29C10wgAylVUiD5rdYXk0.roa File: 8xEUeJ29C10wgAylVUiD5rdYXk0.roa (raw, json) Hash identifier: mQ18gIg4NPFJD+qEkKZz9yWDp/Z2zjF17KXdrPXRENY= Subject key identifier: F3:11:14:78:9D:BD:0B:5D:30:80:0C:A5:55:48:83:E6:B7:58:5E:4D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D81 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8xEUeJ29C10wgAylVUiD5rdYXk0.roa Signing time: Fri 01 Sep 2023 10:14:55 +0000 ROA not before: Fri 01 Sep 2023 10:14:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 2407:4b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7553 (0x1d81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F31114789DBD0B5D30800CA5554883E6B7585E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:8c:db:ad:ff:71:14:4e:5f:36:ae:54:36: 38:2d:fb:f8:55:d7:32:d4:bd:68:f3:9f:f4:77:73: 6a:98:a2:cd:50:e2:15:4e:b2:ba:8f:d6:e2:8f:8b: 36:1e:3f:f5:7e:31:b2:5b:2d:15:6c:15:8c:26:8c: 5f:61:b9:a8:e5:23:16:4c:cd:79:86:bf:64:cf:94: 8e:d7:99:97:f9:89:19:dc:ca:9a:6b:53:20:73:2b: aa:6a:ce:97:88:49:2a:d5:c2:08:5c:96:9a:14:ee: 60:0a:ec:4c:77:1b:73:99:76:8b:6d:f1:50:1d:9a: e4:24:ac:ab:a1:dc:4e:76:fc:36:70:63:ea:07:78: 0e:a7:5f:31:11:ae:ef:13:b2:df:9e:79:4f:ac:71: 1a:98:ec:64:fd:76:ea:94:12:a9:b4:60:61:cf:00: 0b:fb:e9:ac:c7:22:2c:92:14:3e:e9:47:e1:d2:a8: 8e:8e:09:85:69:5d:3f:ba:14:12:ed:4f:f5:2c:1b: df:ea:1e:c7:b3:68:5a:21:18:ed:f0:92:46:3d:ec: f7:88:61:f6:2f:f3:2c:95:0a:0e:2e:4c:ef:2d:93: d4:ed:12:59:27:31:7b:44:eb:40:19:ea:9d:e1:9a: d6:17:ac:43:09:73:42:1d:b8:10:3d:82:49:a6:4c: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:11:14:78:9D:BD:0B:5D:30:80:0C:A5:55:48:83:E6:B7:58:5E:4D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8xEUeJ29C10wgAylVUiD5rdYXk0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 6a:92:ea:5b:7d:96:5e:d0:0a:24:c4:18:4f:91:bf:a9:39:02: 2d:5b:db:33:a7:06:6c:75:28:c1:81:02:98:fd:bc:d3:90:43: 9e:fb:4f:44:7c:83:b9:7f:4e:65:98:db:34:16:b1:46:be:92: 2f:ec:68:1e:66:ad:e8:96:87:f0:e3:86:55:f1:2b:29:64:fc: a3:44:23:a4:c8:46:79:9e:d1:43:31:64:ef:4e:ba:46:36:c0: 7f:8d:16:57:7f:ee:21:14:d3:2c:6d:52:74:04:69:d1:23:1f: 03:d3:ab:ac:96:16:ec:2d:e7:d3:86:39:de:9b:38:9d:0b:05: da:1a:4e:52:68:c9:81:73:70:70:a6:6a:8f:a1:b1:97:43:12: ad:fe:43:88:9b:4a:ed:ab:bd:cc:ac:a9:dd:c9:d7:d3:7d:0e: 25:71:95:3c:ee:71:29:5d:3a:1b:e6:67:59:15:8e:5c:e8:e6: c6:a7:59:1c:00:40:02:6f:41:ae:63:2b:ea:5f:e6:71:61:02: e9:c4:6b:e7:58:08:fd:37:72:a5:8d:03:f8:2e:16:c0:bb:4f: ba:c4:55:d9:20:21:9d:a8:4c:11:8c:ed:4a:78:85:da:fa:f5: 51:60:a9:5d:9d:58:a3:46:46:ce:35:e7:a4:96:05:48:3b:e3: 4e:0c:77:fa -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICHYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYzMTExNDc4OURCRDBC NUQzMDgwMENBNTU1NDg4M0U2Qjc1ODVFNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/Dozbrf9xFE5fNq5UNjgt+/hV1zLUvWjzn/R3c2qYos1Q4hVO srqP1uKPizYeP/V+MbJbLRVsFYwmjF9huajlIxZMzXmGv2TPlI7XmZf5iRncyppr UyBzK6pqzpeISSrVwghclpoU7mAK7Ex3G3OZdott8VAdmuQkrKuh3E52/DZwY+oH eA6nXzERru8Tst+eeU+scRqY7GT9duqUEqm0YGHPAAv76azHIiySFD7pR+HSqI6O CYVpXT+6FBLtT/UsG9/qHsezaFohGO3wkkY97PeIYfYv8yyVCg4uTO8tk9TtElkn MXtE60AZ6p3hmtYXrEMJc0IduBA9gkmmTMkBAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU8xEUeJ29C10wgAylVUiD5rdYXk0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzh4RVVlSjI5QzEwd2dBeWxW VWlENXJkWVhrMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B0sAMA0GCSqGSIb3DQEBCwUAA4IBAQBqkupbfZZe0AokxBhPkb+pOQItW9szpwZs dSjBgQKY/bzTkEOe+09EfIO5f05lmNs0FrFGvpIv7GgeZq3olofw44ZV8SspZPyj RCOkyEZ5ntFDMWTvTrpGNsB/jRZXf+4hFNMsbVJ0BGnRIx8D06uslhbsLefThjne mzidCwXaGk5SaMmBc3BwpmqPobGXQxKt/kOIm0rtq73MrKndydfTfQ4lcZU87nEp XTob5mdZFY5c6ObGp1kcAEACb0GuYyvqX+ZxYQLpxGvnWAj9N3KljQP4LhbAu0+6 xFXZICGdqEwRjO1KeIXa+vVRYKldnVijRkbONeeklgVIO+NODHf6 -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org