$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LsNBX-BMOqOiRxP3LW7198SOYxc.roa File: LsNBX-BMOqOiRxP3LW7198SOYxc.roa (raw, json) Hash identifier: uPhbJbpB4QXt3P7T3/jRqtGvU44T1aqt0Gg0V37NxoI= Subject key identifier: 2E:C3:41:5F:E0:4C:3A:A3:A2:47:13:F7:2D:6E:F5:F7:C4:8E:63:17 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DD3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LsNBX-BMOqOiRxP3LW7198SOYxc.roa Signing time: Fri 01 Sep 2023 10:15:20 +0000 ROA not before: Fri 01 Sep 2023 10:15:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 119.77.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7635 (0x1dd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2EC3415FE04C3AA3A24713F72D6EF5F7C48E6317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:ab:41:8b:ef:25:c9:75:c1:25:2c:89:45: af:18:aa:ce:65:ba:87:e7:14:c5:a5:29:ca:60:88: 3c:37:b8:28:f8:7b:00:f5:88:0a:8d:dd:8f:eb:f8: 59:7f:47:28:72:fc:ce:31:7c:84:41:18:29:ff:7a: 91:ae:b7:38:ef:06:26:5d:1d:5e:79:69:8f:30:26: f6:96:71:8f:3f:45:55:b4:81:a9:fd:31:14:4d:76: f2:c2:f6:a5:0b:72:e8:f7:e6:3c:48:dc:52:db:dc: fa:49:d6:b0:39:02:28:60:d9:35:a2:d4:e3:88:44: 9b:9f:d2:e0:41:ae:fb:58:de:98:fe:e2:c6:5d:00: 2d:0d:0c:e4:fa:b5:58:e3:f0:d9:d2:0d:cf:99:9a: 90:f1:26:92:1c:d4:f3:9e:80:df:41:79:b6:ae:bf: 8b:b7:8a:88:bd:f7:1f:2d:bb:b2:ff:0e:e8:cb:b3: 80:7e:fb:33:72:79:47:51:a9:23:c6:a1:9b:5c:1d: 7e:80:ff:79:ea:0f:e6:8d:a6:66:d8:09:d7:92:a0: d7:a2:bc:fd:68:21:71:35:48:85:dc:23:14:fc:95: a9:7f:33:18:31:03:80:ee:d4:c5:cc:c5:00:96:0b: 97:c4:8b:68:f1:bc:c8:14:a4:ba:73:76:21:32:df: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C3:41:5F:E0:4C:3A:A3:A2:47:13:F7:2D:6E:F5:F7:C4:8E:63:17 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LsNBX-BMOqOiRxP3LW7198SOYxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.224.0/19 Signature Algorithm: sha256WithRSAEncryption 9e:5c:9a:4e:1b:ea:9f:62:30:74:72:60:3a:51:3c:9a:de:25: 1d:63:c5:12:0a:91:3a:de:1b:da:66:0c:42:bf:8d:a8:0c:9a: 7f:b5:e3:cc:07:06:2b:c2:51:3b:0b:0c:e1:8c:fb:b2:82:63: 7a:fc:73:1a:43:a4:f7:ac:88:3a:9c:fa:f9:93:6e:55:28:d5: ec:e8:ed:84:d6:0c:92:72:39:4b:46:6d:7b:0d:b2:bf:85:7e: 43:48:b3:a0:e4:36:6b:a5:82:5f:a3:e9:8e:e8:3f:f0:7b:1d: 27:56:3a:fa:ca:fd:3a:26:22:55:f2:e2:d8:61:67:ab:f2:fc: 6b:82:b2:bb:76:bb:42:dd:52:86:86:5f:ff:dc:a9:66:bc:bc: eb:bb:f6:2d:d3:f8:19:32:5d:ed:6b:a6:17:9e:b2:3c:04:d7: e4:79:22:fc:8f:60:95:3c:02:55:47:60:5b:40:44:38:5f:ad: 20:2c:8c:04:4e:4a:db:2b:94:1b:9f:71:56:d2:9a:9f:46:60: 6c:f6:fd:b7:eb:ab:ea:38:be:93:64:87:14:f2:d2:04:cd:2a: af:36:23:4f:b9:51:87:d7:df:97:89:3a:fb:32:79:20:d7:ea: 10:24:6e:a2:70:5f:08:23:d1:8f:a4:df:d8:a4:a1:bf:c1:5f: 81:34:1f:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJFQzM0MTVGRTA0QzNB QTNBMjQ3MTNGNzJENkVGNUY3QzQ4RTYzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe3qtBi+8lyXXBJSyJRa8Yqs5luofnFMWlKcpgiDw3uCj4ewD1 iAqN3Y/r+Fl/Ryhy/M4xfIRBGCn/epGutzjvBiZdHV55aY8wJvaWcY8/RVW0gan9 MRRNdvLC9qULcuj35jxI3FLb3PpJ1rA5Aihg2TWi1OOIRJuf0uBBrvtY3pj+4sZd AC0NDOT6tVjj8NnSDc+ZmpDxJpIc1POegN9Bebauv4u3ioi99x8tu7L/DujLs4B+ +zNyeUdRqSPGoZtcHX6A/3nqD+aNpmbYCdeSoNeivP1oIXE1SIXcIxT8lal/Mxgx A4Du1MXMxQCWC5fEi2jxvMgUpLpzdiEy36wnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULsNBX+BMOqOiRxP3LW7198SOYxcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xzTkJYLUJNT3FPaVJ4UDNM VzcxOThTT1l4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3 TeAwDQYJKoZIhvcNAQELBQADggEBAJ5cmk4b6p9iMHRyYDpRPJreJR1jxRIKkTre G9pmDEK/jagMmn+148wHBivCUTsLDOGM+7KCY3r8cxpDpPesiDqc+vmTblUo1ezo 7YTWDJJyOUtGbXsNsr+FfkNIs6DkNmulgl+j6Y7oP/B7HSdWOvrK/TomIlXy4thh Z6vy/GuCsrt2u0LdUoaGX//cqWa8vOu79i3T+BkyXe1rpheesjwE1+R5IvyPYJU8 AlVHYFtARDhfrSAsjAROStsrlBufcVbSmp9GYGz2/bfrq+o4vpNkhxTy0gTNKq82 I0+5UYfX35eJOvsyeSDX6hAkbqJwXwgj0Y+k39ikob/BX4E0H7Q= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org