$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aZW3lpMmJvo4SnKLyAVAA18za7g.roa File: aZW3lpMmJvo4SnKLyAVAA18za7g.roa (raw, json) Hash identifier: xZDhT6oIhcFqJKFsZHMyRXUn6FPb17f/NswITvRRgVc= Subject key identifier: 69:95:B7:96:93:26:26:FA:38:4A:72:8B:C8:05:40:03:5F:33:6B:B8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D9B Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aZW3lpMmJvo4SnKLyAVAA18za7g.roa Signing time: Fri 01 Sep 2023 10:15:04 +0000 ROA not before: Fri 01 Sep 2023 10:15:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 122.254.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7579 (0x1d9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6995B796932626FA384A728BC80540035F336BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:a4:c6:15:39:55:63:3c:d1:82:d7:10:e3: a4:bd:20:4f:64:dd:29:b9:55:8e:7f:e8:b7:82:1f: bc:ed:f8:93:02:ed:82:05:24:76:66:fa:51:25:d9: ca:b0:1e:32:b9:a0:7b:51:1b:9e:f5:31:e0:a8:1b: 59:aa:ef:fa:d8:84:ca:39:07:b7:4e:e2:8c:b3:e8: 38:6e:52:3f:55:be:94:c7:4c:a0:b3:9b:8c:72:15: 03:d5:63:a0:d1:6f:3c:d4:dd:ff:5c:20:54:4e:bb: 75:54:6d:73:76:04:a7:0d:0e:8f:bd:c9:c6:2e:4c: 12:5b:bf:0e:fd:94:72:d1:a9:e2:1a:5a:12:ff:93: 8a:15:86:59:75:c9:24:a9:af:52:fd:ca:c0:c4:1f: c6:51:4c:a8:fd:42:15:85:16:b9:fc:2b:e7:7e:78: 1c:30:5e:36:aa:1d:03:c6:57:f2:97:c6:0a:9e:4a: 5d:4e:d6:88:90:60:ae:f5:70:8a:11:27:12:46:eb: 67:8b:19:7c:fa:85:53:79:b6:05:3d:ed:3f:a6:ab: 6a:20:9e:ab:86:12:de:06:a4:26:e1:e6:b4:1b:0e: d4:dd:0e:9f:f8:63:33:4c:dc:75:5f:3d:d9:30:d8: cd:8b:90:79:79:83:4c:63:b4:f4:49:4a:5f:0d:a5: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:95:B7:96:93:26:26:FA:38:4A:72:8B:C8:05:40:03:5F:33:6B:B8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aZW3lpMmJvo4SnKLyAVAA18za7g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.48.0/21 Signature Algorithm: sha256WithRSAEncryption 10:b8:24:c9:e2:34:f1:78:08:f4:ba:29:5e:10:cd:4c:db:31: 7b:2f:af:8d:6f:e8:02:d9:74:eb:1c:07:a1:cf:0a:2e:4a:ff: bd:5f:93:1c:d1:58:d4:4e:bd:5d:6d:30:76:15:ed:65:f3:53: fb:cd:76:97:77:0e:b4:31:7c:ab:8d:d8:37:ce:73:0d:12:01: 43:23:25:25:df:26:ce:4c:b2:a6:45:49:3a:81:46:e4:e6:e0: 22:b5:f7:6b:96:f1:d6:5e:ee:6f:a8:a8:fe:ef:ed:cd:97:17: 53:a8:e8:99:33:a8:3f:b1:f8:a7:5f:f0:44:ff:a8:1c:2b:e3: e3:e3:38:76:ff:ab:aa:64:d7:00:49:af:76:6d:ee:85:c0:48: 39:f5:0e:03:d7:cc:12:fe:c3:d0:88:de:7b:5d:68:0d:b1:9c: 77:ba:c9:5d:8b:86:24:9b:dc:13:fd:12:1b:fe:4f:54:f7:b5: 05:db:c5:c5:b2:9e:87:b5:9d:91:a1:3e:08:dc:5b:0a:8c:4b: 71:67:ab:85:32:b5:d6:36:c5:e5:84:0f:19:0c:7c:91:67:10: 8c:86:54:05:94:09:a3:11:18:27:aa:fa:06:a6:3f:7d:15:c0: 6f:81:d1:99:bf:c6:e9:46:0f:a4:5c:90:03:9d:27:ef:45:95: 32:0a:b6:40 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5OTVCNzk2OTMyNjI2 RkEzODRBNzI4QkM4MDU0MDAzNUYzMzZCQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvPaTGFTlVYzzRgtcQ46S9IE9k3Sm5VY5/6LeCH7zt+JMC7YIF JHZm+lEl2cqwHjK5oHtRG571MeCoG1mq7/rYhMo5B7dO4oyz6DhuUj9VvpTHTKCz m4xyFQPVY6DRbzzU3f9cIFROu3VUbXN2BKcNDo+9ycYuTBJbvw79lHLRqeIaWhL/ k4oVhll1ySSpr1L9ysDEH8ZRTKj9QhWFFrn8K+d+eBwwXjaqHQPGV/KXxgqeSl1O 1oiQYK71cIoRJxJG62eLGXz6hVN5tgU97T+mq2ognquGEt4GpCbh5rQbDtTdDp/4 YzNM3HVfPdkw2M2LkHl5g0xjtPRJSl8NpffJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaZW3lpMmJvo4SnKLyAVAA18za7gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2FaVzNscE1tSnZvNFNuS0x5 QVZBQTE4emE3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /jAwDQYJKoZIhvcNAQELBQADggEBABC4JMniNPF4CPS6KV4QzUzbMXsvr41v6ALZ dOscB6HPCi5K/71fkxzRWNROvV1tMHYV7WXzU/vNdpd3DrQxfKuN2DfOcw0SAUMj JSXfJs5MsqZFSTqBRuTm4CK192uW8dZe7m+oqP7v7c2XF1Oo6JkzqD+x+Kdf8ET/ qBwr4+PjOHb/q6pk1wBJr3Zt7oXASDn1DgPXzBL+w9CI3ntdaA2xnHe6yV2LhiSb 3BP9Ehv+T1T3tQXbxcWynoe1nZGhPgjcWwqMS3Fnq4UytdY2xeWEDxkMfJFnEIyG VAWUCaMRGCeq+gamP30VwG+B0Zm/xulGD6RckAOdJ+9FlTIKtkA= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org