$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNVn4kIMZNToMFAskiqD2b_FJdw.roa File: SNVn4kIMZNToMFAskiqD2b_FJdw.roa (raw, json) Hash identifier: Fney0qjvNWmo/NO2kvgYK/B9nOM7J3Iiwv5YvJ6TsWY= Subject key identifier: 48:D5:67:E2:42:0C:64:D4:E8:30:50:2C:92:2A:83:D9:BF:C5:25:DC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E47 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNVn4kIMZNToMFAskiqD2b_FJdw.roa Signing time: Fri 01 Sep 2023 10:15:51 +0000 ROA not before: Fri 01 Sep 2023 10:15:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 211.76.32.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7751 (0x1e47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=48D567E2420C64D4E830502C922A83D9BFC525DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:72:2b:25:90:45:6e:a2:25:5e:bc:2e:6c: e5:f8:ec:4d:90:5e:d5:d8:4b:b0:94:fe:65:5f:29: 8d:78:b6:d8:05:ca:90:64:83:cd:b4:7f:58:7a:25: c4:7e:af:ea:5e:82:1b:97:14:5b:79:ba:de:f0:26: 16:52:34:dd:8b:76:da:4d:d8:5b:d3:76:76:de:a7: 84:0f:fb:5b:48:cf:6b:fa:52:f0:5c:8e:e9:aa:2a: a6:d8:f9:6b:fa:85:2c:42:f4:38:f2:a6:8d:ab:a0: f4:9a:c6:cc:b9:e5:94:3a:48:4c:e7:26:25:9e:db: 3a:e3:87:47:7d:17:8c:5a:85:48:c5:48:88:d9:21: 8b:81:e0:a7:f4:4f:fc:4a:a3:28:56:0e:25:ee:15: 1f:6c:dd:d7:ad:8a:64:15:61:f5:bf:6f:ff:2f:93: 96:55:b9:8b:d7:f0:08:ed:c1:b1:48:11:1a:7a:17: 54:35:5e:89:94:1e:e7:4b:d3:a0:19:3f:2a:63:f3: 1b:c5:2f:a3:15:ff:71:40:9f:65:e4:0f:09:ed:cf: 92:4f:ff:1c:6d:04:64:14:2a:af:7c:42:49:2e:eb: 17:82:cb:1c:62:26:98:b4:f4:da:41:97:f1:d0:89: 09:53:05:ce:60:5e:e0:1c:4d:7f:1f:67:06:b1:08: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D5:67:E2:42:0C:64:D4:E8:30:50:2C:92:2A:83:D9:BF:C5:25:DC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNVn4kIMZNToMFAskiqD2b_FJdw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 56:6a:88:b5:36:bd:3f:4b:e8:23:87:67:6c:1d:51:a6:8f:6f: c2:ba:56:57:4d:b3:0c:b8:78:7a:09:bb:8d:c5:0f:3c:e0:a4: de:46:b4:ab:4d:05:da:d2:7f:65:57:7a:7a:ca:fd:71:c3:d1: d2:64:78:8e:b2:dd:4f:e7:d5:f6:c3:c7:00:ca:86:cc:27:6d: 5c:48:4a:29:2c:eb:c1:b0:49:35:4c:05:f0:c4:86:6b:55:44: 4e:7a:a2:18:17:6b:d0:d3:f0:b1:ab:2c:07:47:fb:df:d9:d3: d0:11:a9:86:b5:fe:a4:77:02:5d:c3:28:7c:3b:25:59:56:ed: a1:dd:96:ac:1a:3e:c3:16:0b:44:8c:b5:f0:3a:ec:f6:14:80: a6:b8:dd:83:5d:66:4c:79:ef:f4:ab:5b:d8:3b:2c:18:86:21: 1c:4d:92:bf:fe:92:a7:7b:af:e9:f4:2e:9c:65:d1:23:eb:00: 13:a6:c0:cb:68:90:73:73:36:3a:69:88:4d:2d:4e:db:b6:b5: a8:d9:f9:f8:e7:5a:f8:80:59:16:08:4a:20:90:a3:cb:ad:5f: 9e:f7:c7:b5:f1:5c:7b:44:96:ea:ba:d2:e4:5d:fb:04:91:81: c6:c0:ed:50:db:55:63:f1:52:58:ac:c8:97:6c:9a:b4:9e:93: 97:5d:4a:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ4RDU2N0UyNDIwQzY0 RDRFODMwNTAyQzkyMkE4M0Q5QkZDNTI1REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB1HIrJZBFbqIlXrwubOX47E2QXtXYS7CU/mVfKY14ttgFypBk g820f1h6JcR+r+peghuXFFt5ut7wJhZSNN2LdtpN2FvTdnbep4QP+1tIz2v6UvBc jumqKqbY+Wv6hSxC9Djypo2roPSaxsy55ZQ6SEznJiWe2zrjh0d9F4xahUjFSIjZ IYuB4Kf0T/xKoyhWDiXuFR9s3detimQVYfW/b/8vk5ZVuYvX8AjtwbFIERp6F1Q1 XomUHudL06AZPypj8xvFL6MV/3FAn2XkDwntz5JP/xxtBGQUKq98Qkku6xeCyxxi Jpi09NpBl/HQiQlTBc5gXuAcTX8fZwaxCAQZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSNVn4kIMZNToMFAskiqD2b/FJdwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NOVm40a0lNWk5Ub01GQXNr aXFEMmJfRkpkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXT TCAwDQYJKoZIhvcNAQELBQADggEBAFZqiLU2vT9L6COHZ2wdUaaPb8K6VldNswy4 eHoJu43FDzzgpN5GtKtNBdrSf2VXenrK/XHD0dJkeI6y3U/n1fbDxwDKhswnbVxI Siks68GwSTVMBfDEhmtVRE56ohgXa9DT8LGrLAdH+9/Z09ARqYa1/qR3Al3DKHw7 JVlW7aHdlqwaPsMWC0SMtfA67PYUgKa43YNdZkx57/SrW9g7LBiGIRxNkr/+kqd7 r+n0Lpxl0SPrABOmwMtokHNzNjppiE0tTtu2tajZ+fjnWviAWRYISiCQo8utX573 x7XxXHtEluq60uRd+wSRgcbA7VDbVWPxUlisyJdsmrSek5ddSok= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org