$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fKEyYdbyQ4V7-YcKQliqftbr0rk.roa File: fKEyYdbyQ4V7-YcKQliqftbr0rk.roa (raw, json) Hash identifier: PGRG3qR8tsU2prmf0L0+eZYUtEPDo2u/AO/rVLAknfE= Subject key identifier: 7C:A1:32:61:D6:F2:43:85:7B:F9:87:0A:42:58:AA:7E:D6:EB:D2:B9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E55 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fKEyYdbyQ4V7-YcKQliqftbr0rk.roa Signing time: Fri 01 Sep 2023 10:15:54 +0000 ROA not before: Fri 01 Sep 2023 10:15:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 2407:4b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7765 (0x1e55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7CA13261D6F243857BF9870A4258AA7ED6EBD2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:88:fa:66:d0:d2:f0:4d:ba:4b:f6:bb:d3: 2f:59:44:52:37:54:c5:08:ac:ca:19:a6:f1:8c:02: e5:f9:6a:c5:db:e0:4e:f1:77:e5:4f:48:53:a3:f5: db:8e:40:6d:5f:79:40:9d:65:23:a2:37:82:94:0f: 69:0b:74:96:31:b7:c3:c7:57:28:52:cf:08:42:a7: fc:d4:5c:31:9e:e7:e4:c7:6d:02:09:f7:4a:50:d5: 1e:c1:95:04:5c:63:2d:b4:30:15:6f:3e:57:b2:7b: f0:ba:52:f3:c9:2f:c7:d1:8c:da:70:fe:af:a2:a9: 2c:7a:e9:e0:2e:78:97:9d:87:91:1e:e3:49:e4:bf: 89:60:37:68:d5:8f:76:40:1d:a4:5c:ca:2e:28:b6: cc:bf:c5:b3:17:3f:f9:ec:b5:0a:01:04:04:b2:4a: ea:a5:c9:a8:cf:f3:0d:71:ce:11:8f:24:36:73:de: b2:5f:5a:95:5c:c1:c3:ee:ae:53:18:ee:f1:ab:8f: ac:20:84:ca:88:19:f4:a2:34:64:0f:e6:fb:43:70: 69:2d:7b:ad:6e:7f:31:89:9e:6e:f6:c3:67:9e:9e: 8b:59:c8:f7:e9:56:75:8f:32:60:48:bc:ac:d6:75: 01:a3:e0:67:c1:d5:89:6c:4b:5f:ce:a5:1f:f4:eb: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A1:32:61:D6:F2:43:85:7B:F9:87:0A:42:58:AA:7E:D6:EB:D2:B9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fKEyYdbyQ4V7-YcKQliqftbr0rk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 76:2d:d1:f6:75:42:a3:d2:08:68:90:3b:3a:2d:c5:f4:a9:a1: 55:d1:e0:bc:c7:e9:f6:8d:0d:cb:b9:16:87:39:58:7e:a7:65: 80:09:4c:ee:aa:9e:77:e0:6d:74:99:d9:e4:5c:d1:ec:ea:da: b2:1f:61:42:7e:ad:12:93:47:f0:5d:64:f7:25:70:5f:c8:56: 14:76:ad:fc:8e:01:a0:0f:c9:17:2b:b4:92:c5:f3:ac:8f:d7: b5:ed:82:fc:66:4a:a5:54:63:44:c0:55:e6:4c:f2:e2:42:b9: 8e:91:84:af:84:b4:24:98:52:99:01:8b:e7:83:a0:cd:f4:40: 9d:23:78:7b:50:81:3e:a3:72:37:82:60:6a:dd:bb:ca:cd:c1: 2c:cd:5b:cd:a5:f7:8a:69:83:af:95:fa:26:1d:d3:56:4a:64: 93:b3:f3:8c:30:76:5b:8f:65:4c:c6:3b:3b:a8:f5:d9:35:bf: 99:92:03:27:f1:c6:84:f5:36:80:5b:65:63:6c:93:60:c6:84: 65:86:f4:f5:d6:a6:d4:db:65:de:6f:56:96:1b:27:a2:76:25: a6:58:c7:b8:48:03:9b:47:bf:58:60:25:d6:ce:56:a0:27:57: 54:e6:99:3f:b5:cb:52:2c:5b:6e:cd:b6:2b:b3:3c:c9:3f:6d: 38:36:6d:88 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICHlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdDQTEzMjYxRDZGMjQz ODU3QkY5ODcwQTQyNThBQTdFRDZFQkQyQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEc4j6ZtDS8E26S/a70y9ZRFI3VMUIrMoZpvGMAuX5asXb4E7x d+VPSFOj9duOQG1feUCdZSOiN4KUD2kLdJYxt8PHVyhSzwhCp/zUXDGe5+THbQIJ 90pQ1R7BlQRcYy20MBVvPleye/C6UvPJL8fRjNpw/q+iqSx66eAueJedh5Ee40nk v4lgN2jVj3ZAHaRcyi4otsy/xbMXP/nstQoBBASySuqlyajP8w1xzhGPJDZz3rJf WpVcwcPurlMY7vGrj6wghMqIGfSiNGQP5vtDcGkte61ufzGJnm72w2eenotZyPfp VnWPMmBIvKzWdQGj4GfB1YlsS1/OpR/06+6ZAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUfKEyYdbyQ4V7+YcKQliqftbr0rkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZLRXlZZGJ5UTRWNy1ZY0tR bGlxZnRicjByay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B0sAMA0GCSqGSIb3DQEBCwUAA4IBAQB2LdH2dUKj0ghokDs6LcX0qaFV0eC8x+n2 jQ3LuRaHOVh+p2WACUzuqp534G10mdnkXNHs6tqyH2FCfq0Sk0fwXWT3JXBfyFYU dq38jgGgD8kXK7SSxfOsj9e17YL8ZkqlVGNEwFXmTPLiQrmOkYSvhLQkmFKZAYvn g6DN9ECdI3h7UIE+o3I3gmBq3bvKzcEszVvNpfeKaYOvlfomHdNWSmSTs/OMMHZb j2VMxjs7qPXZNb+ZkgMn8caE9TaAW2VjbJNgxoRlhvT11qbU22Xeb1aWGyeidiWm WMe4SAObR79YYCXWzlagJ1dU5pk/tctSLFtuzbYrszzJP204Nm2I -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org