$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cl1-cu2APPIHmrwCvz3wpM3U3TA.roa File: cl1-cu2APPIHmrwCvz3wpM3U3TA.roa (raw, json) Hash identifier: D6pRuNEtO4p4BpYWtGfiR5wl913v0LogZW+a/CpB42I= Subject key identifier: 72:5D:7E:72:ED:80:3C:F2:07:9A:BC:02:BF:3D:F0:A4:CD:D4:DD:30 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E11 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cl1-cu2APPIHmrwCvz3wpM3U3TA.roa Signing time: Fri 01 Sep 2023 10:15:38 +0000 ROA not before: Fri 01 Sep 2023 10:15:38 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 123.0.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7697 (0x1e11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:38 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=725D7E72ED803CF2079ABC02BF3DF0A4CDD4DD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:98:62:f6:f0:7c:7f:01:dc:5b:94:69:fe: 4c:e5:14:34:e8:f2:19:7d:e5:55:27:6b:d2:82:2c: b3:ff:f9:5e:07:ad:df:cb:aa:96:23:ce:e5:a7:85: 92:1f:64:8e:e2:c1:e5:93:0d:11:38:0d:2a:47:ec: b1:73:40:c2:8c:0e:b1:58:32:84:53:ec:c3:1d:66: a1:0d:2a:8d:7a:9c:d9:83:5f:f7:58:fc:d9:01:43: 68:08:59:d1:2c:2b:ee:89:83:8e:0f:6c:52:8a:dc: d6:6f:be:5f:4f:fa:6d:77:c0:63:4c:40:1e:3e:30: 2e:60:d4:39:8a:0a:be:64:11:da:2d:8c:24:f8:1e: 06:20:2c:ec:71:c0:19:b4:63:b7:bf:ac:18:48:bd: 5d:71:63:16:28:ec:1f:cf:ad:9b:c6:e3:ce:7b:b1: 55:5e:34:f2:32:b8:b6:54:a8:a1:0c:1c:3c:a1:3d: 71:b1:7b:99:ff:7f:9e:4e:c4:23:2d:47:85:f9:37: c9:e1:3b:db:51:ed:7b:e6:22:c8:1f:c4:08:7f:bb: 1e:88:ee:cf:e5:fe:4d:83:28:a0:1f:0c:0c:3e:3a: f5:1e:38:8d:4e:c4:15:5d:b4:c3:bb:29:ed:83:7d: 78:e3:41:bf:86:0c:32:7f:f0:9c:a6:e7:ac:8d:a4: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5D:7E:72:ED:80:3C:F2:07:9A:BC:02:BF:3D:F0:A4:CD:D4:DD:30 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cl1-cu2APPIHmrwCvz3wpM3U3TA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.32.0/21 Signature Algorithm: sha256WithRSAEncryption 68:2c:d2:16:0e:86:fe:15:6e:58:07:c5:5a:43:79:f4:cb:42: ed:6c:e3:56:53:26:b6:67:38:94:b5:bf:e2:48:61:bf:31:b0: 67:7d:17:31:c2:81:bb:cf:e5:40:4e:29:4d:4f:53:ed:a8:3d: 32:7e:3b:46:bc:cb:c5:a2:56:26:00:b1:59:eb:5a:d9:27:af: 4c:10:80:f5:3e:39:c2:93:7a:60:c7:1d:cb:0f:92:bc:59:94: 63:49:db:71:35:14:a2:df:7f:3e:f1:cf:4a:68:54:23:a6:b9: 99:74:26:ba:75:e3:77:03:03:05:d3:9c:35:19:04:c4:1e:8b: d7:2e:2d:75:e3:45:ee:c2:e0:75:a7:47:e1:92:8e:0b:37:a0: 78:32:b7:e7:94:72:77:bc:5e:b7:e0:96:a4:4c:8e:2a:d5:0c: 2f:b7:78:6f:99:3f:40:bf:8a:ef:6b:84:29:7b:fa:2d:41:5c: 93:2b:af:67:b0:a1:10:b7:f7:44:35:82:67:47:0f:8f:74:0a: d5:80:2a:2f:95:94:d0:e1:a2:09:82:ae:95:08:75:18:41:c8: 38:94:dc:9d:97:d7:d5:a8:9d:e3:8a:68:20:5f:78:24:39:cb: 0f:9c:5d:09:fc:c8:33:c3:a1:23:94:cc:9c:43:d1:e1:40:70: ea:2e:8e:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcyNUQ3RTcyRUQ4MDND RjIwNzlBQkMwMkJGM0RGMEE0Q0RENEREMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDStJhi9vB8fwHcW5Rp/kzlFDTo8hl95VUna9KCLLP/+V4Hrd/L qpYjzuWnhZIfZI7iweWTDRE4DSpH7LFzQMKMDrFYMoRT7MMdZqENKo16nNmDX/dY /NkBQ2gIWdEsK+6Jg44PbFKK3NZvvl9P+m13wGNMQB4+MC5g1DmKCr5kEdotjCT4 HgYgLOxxwBm0Y7e/rBhIvV1xYxYo7B/PrZvG4857sVVeNPIyuLZUqKEMHDyhPXGx e5n/f55OxCMtR4X5N8nhO9tR7XvmIsgfxAh/ux6I7s/l/k2DKKAfDAw+OvUeOI1O xBVdtMO7Ke2DfXjjQb+GDDJ/8Jym56yNpNz/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcl1+cu2APPIHmrwCvz3wpM3U3TAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NsMS1jdTJBUFBJSG1yd0N2 ejN3cE0zVTNUQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 ACAwDQYJKoZIhvcNAQELBQADggEBAGgs0hYOhv4VblgHxVpDefTLQu1s41ZTJrZn OJS1v+JIYb8xsGd9FzHCgbvP5UBOKU1PU+2oPTJ+O0a8y8WiViYAsVnrWtknr0wQ gPU+OcKTemDHHcsPkrxZlGNJ23E1FKLffz7xz0poVCOmuZl0Jrp143cDAwXTnDUZ BMQei9cuLXXjRe7C4HWnR+GSjgs3oHgyt+eUcne8XrfglqRMjirVDC+3eG+ZP0C/ iu9rhCl7+i1BXJMrr2ewoRC390Q1gmdHD490CtWAKi+VlNDhogmCrpUIdRhByDiU 3J2X19WoneOKaCBfeCQ5yw+cXQn8yDPDoSOUzJxD0eFAcOoujvk= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org