$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa File: Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa (raw, json) Hash identifier: 3yGfU0SRf4IdK9P9rm/Zrc+6xXVcUY+yN8gusHmhI2g= Subject key identifier: 16:3E:C1:81:2E:82:17:4C:F4:16:4C:32:D7:84:81:1C:BE:73:9A:78 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1F3F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa Signing time: Tue 30 Jan 2024 08:59:46 +0000 ROA not before: Tue 30 Jan 2024 08:59:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.58.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7999 (0x1f3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Jan 30 08:59:46 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=163EC1812E82174CF4164C32D784811CBE739A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:5b:4d:1e:3c:06:fa:41:bf:9f:00:65:5b: 8f:31:f9:29:7a:de:97:b6:09:7c:0e:0c:b2:e9:ac: 8f:e6:b6:62:35:a7:9f:47:17:56:e8:cc:72:31:5d: 10:16:48:12:f7:4c:51:68:ba:7b:17:48:a4:f5:fa: 8f:85:a7:2f:d9:42:cb:61:62:99:bf:17:ce:b0:ac: 02:f6:69:ea:a5:30:57:f2:d3:35:5b:0f:8d:e4:62: 8b:bb:12:93:3a:c6:91:9e:89:57:50:a1:f4:24:d4: 51:9b:38:c2:d7:05:b8:ec:b9:ac:81:0d:07:1a:f8: be:83:b6:f0:79:e9:93:fd:f6:61:8b:0c:35:ec:b7: af:7c:fd:33:5c:ce:b1:7d:98:a3:d8:bf:18:62:ec: 80:17:4b:1c:5f:80:f7:1c:78:25:74:4a:d1:dd:08: 19:23:d1:31:82:bc:05:a8:98:7f:07:ea:8e:86:db: f0:26:ad:65:51:81:06:89:fd:28:e1:1e:8e:27:26: 91:6e:db:34:19:7a:ed:ab:2a:84:c7:2f:6e:d0:6c: 36:a3:d7:39:31:af:fd:94:d7:07:a6:e2:26:04:5c: 46:4f:d6:77:b5:ad:d8:a5:df:3e:e7:84:44:e7:82: 94:37:94:30:96:e9:42:2c:e6:bc:3b:9b:8f:99:cd: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3E:C1:81:2E:82:17:4C:F4:16:4C:32:D7:84:81:1C:BE:73:9A:78 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.96.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:4e:d4:53:15:fb:ba:7f:f9:4a:3f:e1:5b:7f:c3:da:96:48: 2c:0b:40:3c:ec:a1:46:e7:aa:f8:b1:ea:af:ca:6d:2c:9a:27: dc:82:f8:82:16:63:85:a5:0b:03:d4:cb:4a:d7:56:42:e6:57: 35:10:b1:b0:aa:84:cd:15:54:78:c2:da:2e:0c:3f:ef:b8:32: e0:14:49:4b:0e:09:9d:90:21:4b:95:1e:cb:e7:fa:26:ee:8b: a7:5b:09:59:71:ef:78:b9:39:d5:92:e2:63:05:44:3a:3b:dc: ae:2c:b8:90:2c:64:03:15:09:ce:20:33:68:52:68:31:a3:b9: 24:0c:cb:dc:d5:de:eb:64:fd:fd:ef:05:5f:e6:48:69:20:7b: bf:f0:88:99:6e:0d:2b:b8:10:fc:8f:b4:12:9b:98:b6:6f:c7: 93:ea:df:ba:f7:9d:58:8b:d3:46:85:cc:8f:e9:b1:d1:9f:a0: 56:8b:7f:f8:36:14:06:8d:e3:08:4b:8b:ea:de:32:a6:ce:18: 32:b7:26:ab:34:da:54:ba:f0:ba:17:0b:20:08:0f:ea:3f:78: 1a:f5:15:db:6b:db:54:9f:28:01:25:78:0b:f4:5a:2a:b8:e1: 45:2a:62:81:84:82:35:2b:ef:5c:f8:4d:de:95:b4:8e:e8:78: db:34:c0:17 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDAxMzAw ODU5NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2M0VDMTgxMkU4MjE3 NENGNDE2NEMzMkQ3ODQ4MTFDQkU3MzlBNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWhFtNHjwG+kG/nwBlW48x+Sl63pe2CXwODLLprI/mtmI1p59H F1bozHIxXRAWSBL3TFFounsXSKT1+o+Fpy/ZQsthYpm/F86wrAL2aeqlMFfy0zVb D43kYou7EpM6xpGeiVdQofQk1FGbOMLXBbjsuayBDQca+L6DtvB56ZP99mGLDDXs t698/TNczrF9mKPYvxhi7IAXSxxfgPcceCV0StHdCBkj0TGCvAWomH8H6o6G2/Am rWVRgQaJ/SjhHo4nJpFu2zQZeu2rKoTHL27QbDaj1zkxr/2U1wem4iYEXEZP1ne1 rdil3z7nhETngpQ3lDCW6UIs5rw7m4+ZzVtjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFj7BgS6CF0z0Fkwy14SBHL5zmngwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZqN0JnUzZDRjB6MEZrd3kx NFNCSEw1em1uZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OmAwDQYJKoZIhvcNAQELBQADggEBAF9O1FMV+7p/+Uo/4Vt/w9qWSCwLQDzsoUbn qvix6q/KbSyaJ9yC+IIWY4WlCwPUy0rXVkLmVzUQsbCqhM0VVHjC2i4MP++4MuAU SUsOCZ2QIUuVHsvn+ibui6dbCVlx73i5OdWS4mMFRDo73K4suJAsZAMVCc4gM2hS aDGjuSQMy9zV3utk/f3vBV/mSGkge7/wiJluDSu4EPyPtBKbmLZvx5Pq37r3nViL 00aFzI/psdGfoFaLf/g2FAaN4whLi+reMqbOGDK3Jqs02lS68LoXCyAID+o/eBr1 Fdtr21SfKAEleAv0Wiq44UUqYoGEgjUr71z4Td6VtI7oeNs0wBc= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org