$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa File: iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa (raw, json) Hash identifier: fOgzI9HQEf2a10U0XJyDxnpb8DA5TBHC39aU+c2rlQ0= Subject key identifier: 88:56:FD:50:F7:67:6F:53:A1:9A:3B:22:17:1D:DA:64:83:EB:5C:CC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E89 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa Signing time: Fri 01 Sep 2023 10:16:11 +0000 ROA not before: Fri 01 Sep 2023 10:16:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 45.64.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7817 (0x1e89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8856FD50F7676F53A19A3B22171DDA6483EB5CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:e7:0f:2e:ce:da:22:d5:57:7c:56:49:41: 57:fe:44:18:9d:67:30:32:78:31:62:1b:44:2c:e3: d1:b2:de:7d:ab:90:01:59:73:04:05:33:2d:58:9e: 64:7a:8d:eb:96:01:ef:af:df:5f:a7:fb:10:2c:b0: 7b:89:af:83:d7:f6:58:2b:65:0d:d3:22:3a:e5:f1: 14:dd:b6:b6:ff:9d:e2:b7:bb:82:56:8f:81:25:0f: d5:13:44:1d:3b:b8:c1:80:17:14:bf:80:f4:6f:dc: b7:07:0c:ea:1b:3c:cf:ac:f8:b3:9e:66:ec:9d:9b: bd:01:92:a6:b3:47:40:4f:4e:8e:c6:d0:3e:a9:fe: 85:87:5e:09:97:a1:d3:3e:8f:39:49:df:27:b0:cd: 75:50:aa:42:0b:b2:de:11:7b:63:95:f0:84:10:64: 66:d2:33:bd:32:52:5f:47:24:a4:f5:32:ae:89:84: 24:b7:4e:ff:fe:0e:f9:42:ae:d8:80:49:1f:2d:2f: 6e:5b:c4:42:ce:50:9f:9f:bb:21:a3:2b:5a:a7:9a: a4:3c:89:b7:eb:00:81:3a:07:df:c6:db:bf:cf:81: 13:a3:a6:87:6c:46:eb:cc:d2:7c:b3:00:d6:da:68: ac:e3:0d:0e:3b:ad:75:92:d4:75:a8:de:c6:73:07: e4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:FD:50:F7:67:6F:53:A1:9A:3B:22:17:1D:DA:64:83:EB:5C:CC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.34.0/24 Signature Algorithm: sha256WithRSAEncryption 81:63:13:c9:57:34:b8:30:2c:fe:b8:c1:e1:73:74:fd:78:73: be:62:9e:5c:88:fb:42:c0:d2:25:d2:88:cf:00:ff:3a:b1:da: 81:42:74:6c:3d:f4:36:38:7e:63:9b:bf:d9:9f:43:2e:ac:2e: 15:21:e6:21:f5:0e:eb:ee:e1:dd:dd:a7:37:53:cb:de:c6:b0: 30:e2:49:45:5f:1d:f1:84:ca:96:9f:5a:55:29:68:41:29:81: 5a:fd:2f:f9:ad:f4:53:fe:de:b6:d9:3d:5a:29:a3:a4:b7:d0: 99:a1:1d:f1:fd:b2:15:ab:3b:74:17:74:98:91:a6:c0:2b:b5: 0d:33:61:56:84:82:4e:c5:5c:53:23:a4:3a:b9:b6:f3:58:9e: 97:e0:2b:d5:89:61:47:dc:91:26:35:65:e8:6f:94:ec:76:fe: 9c:aa:f8:17:6a:d6:23:42:96:99:53:54:2d:14:76:75:f7:31: 37:d8:e4:14:cb:6f:8a:59:3d:ac:a9:a2:82:b3:be:52:70:e8: 3c:b2:35:0e:3d:13:db:80:1e:3d:7d:5c:78:3f:57:48:33:8e: 85:16:9a:dc:cf:a4:96:91:9e:3d:d2:9d:6d:e7:99:16:f6:3d: 0a:f0:92:21:fa:24:44:c6:a0:11:f0:06:0f:d6:16:e0:12:a9: 7a:ca:44:f7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg4NTZGRDUwRjc2NzZG NTNBMTlBM0IyMjE3MUREQTY0ODNFQjVDQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJLOcPLs7aItVXfFZJQVf+RBidZzAyeDFiG0Qs49Gy3n2rkAFZ cwQFMy1YnmR6jeuWAe+v31+n+xAssHuJr4PX9lgrZQ3TIjrl8RTdtrb/neK3u4JW j4ElD9UTRB07uMGAFxS/gPRv3LcHDOobPM+s+LOeZuydm70BkqazR0BPTo7G0D6p /oWHXgmXodM+jzlJ3yewzXVQqkILst4Re2OV8IQQZGbSM70yUl9HJKT1Mq6JhCS3 Tv/+DvlCrtiASR8tL25bxELOUJ+fuyGjK1qnmqQ8ibfrAIE6B9/G27/PgROjpods RuvM0nyzANbaaKzjDQ47rXWS1HWo3sZzB+TRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiFb9UPdnb1OhmjsiFx3aZIPrXMwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2lGYjlVUGRuYjFPaG1qc2lG eDNhWklQclhNdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QCIwDQYJKoZIhvcNAQELBQADggEBAIFjE8lXNLgwLP64weFzdP14c75inlyI+0LA 0iXSiM8A/zqx2oFCdGw99DY4fmObv9mfQy6sLhUh5iH1Duvu4d3dpzdTy97GsDDi SUVfHfGEypafWlUpaEEpgVr9L/mt9FP+3rbZPVopo6S30JmhHfH9shWrO3QXdJiR psArtQ0zYVaEgk7FXFMjpDq5tvNYnpfgK9WJYUfckSY1ZehvlOx2/pyq+Bdq1iNC lplTVC0UdnX3MTfY5BTLb4pZPaypooKzvlJw6DyyNQ49E9uAHj19XHg/V0gzjoUW mtzPpJaRnj3SnW3nmRb2PQrwkiH6JETGoBHwBg/WFuASqXrKRPc= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:13 2024 by rpki-client on console-ams.rpki-client.org