$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnQQNlufKOj5R-m71bHXwc8s2qo.roa File: jnQQNlufKOj5R-m71bHXwc8s2qo.roa (raw, json) Hash identifier: AgFc6QSqk3QKKuIdLSL6xq72RITwWdU1gBwjNufp7LE= Subject key identifier: 8E:74:10:36:5B:9F:28:E8:F9:47:E9:BB:D5:B1:D7:C1:CF:2C:DA:AA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D79 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnQQNlufKOj5R-m71bHXwc8s2qo.roa Signing time: Fri 01 Sep 2023 10:14:52 +0000 ROA not before: Fri 01 Sep 2023 10:14:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 61.61.209.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7545 (0x1d79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8E7410365B9F28E8F947E9BBD5B1D7C1CF2CDAAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:8f:ed:91:ec:72:a3:ee:c1:5a:59:d4:43: 97:f0:a7:55:00:43:06:06:5d:42:32:48:ce:d9:cb: f3:61:a5:22:c4:93:6f:2c:a0:4d:46:ab:de:bf:92: 79:46:d8:cb:e6:54:77:d7:77:b1:af:c9:af:b5:0f: 68:8e:91:31:26:a2:53:27:ea:00:c9:82:91:28:68: c4:c2:fb:72:47:bf:cd:18:37:c5:5c:27:2f:e0:6f: d4:93:04:66:c4:fc:f4:56:f0:72:81:e2:f5:b4:30: 70:10:84:a8:67:13:5a:76:93:62:33:fa:34:f0:85: 82:a7:b0:79:29:28:9a:13:75:aa:99:04:92:ef:bc: 9f:11:4f:c5:68:63:5a:54:ce:4b:0e:09:88:66:3d: f9:b7:f6:72:87:b2:87:c0:05:0e:fb:4c:ad:78:33: 39:fc:9a:f3:7c:84:57:27:19:88:00:c7:87:00:c4: 0b:fa:32:c6:af:2e:aa:13:c8:b1:5c:be:72:9f:86: 4d:0c:98:d7:1b:0f:56:4b:e8:68:51:74:f7:bb:0d: e5:d2:79:a4:99:77:e4:ed:79:30:f8:34:52:27:2d: de:f8:e4:b9:cb:d8:1f:98:26:ea:c1:b1:8b:ea:3e: bb:82:f0:e2:21:4d:21:5e:84:b5:43:47:04:3c:8d: 2d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:74:10:36:5B:9F:28:E8:F9:47:E9:BB:D5:B1:D7:C1:CF:2C:DA:AA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnQQNlufKOj5R-m71bHXwc8s2qo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.209.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:41:27:d4:4d:53:5d:c0:e5:d0:42:65:f7:9b:2a:c3:68:ea: df:08:04:54:e3:eb:ba:7f:c6:09:34:11:4d:65:e9:e4:1c:66: 55:86:3b:24:21:ec:24:56:a2:17:bb:5f:c9:0f:6a:1f:3d:7b: 45:a7:e8:30:3a:63:e6:57:ac:f7:03:0f:20:c7:d9:c7:87:5b: d3:e0:2b:a4:ab:b4:51:4a:0c:62:78:eb:3c:18:a3:bf:25:11: 52:50:2c:39:0e:a7:51:2c:3a:e7:6b:41:16:8e:63:20:58:1c: 06:75:7b:72:e2:dc:42:97:2d:2f:bc:5e:04:41:66:b6:e8:92: 9c:79:ae:14:f2:ca:59:78:49:0f:42:75:d0:ee:1f:ff:b0:ad: cc:76:ab:e9:e8:7e:20:68:04:ed:0d:99:2b:0f:8f:44:40:ab: f7:50:74:34:5a:ad:52:fa:4f:4d:9a:1f:7a:4b:8a:c3:4a:9d: 67:e5:86:c5:01:4c:9d:6b:4f:08:ad:0d:4f:e2:69:0a:1c:ac: 8d:76:ea:3a:30:e9:a6:b8:6e:b3:b5:2f:3e:0f:7e:4d:07:be: 3f:df:f4:b5:6f:78:6a:b1:39:0f:35:73:f1:af:c4:6e:67:3d: 5c:89:bf:be:a3:78:64:dc:69:34:98:f0:9d:88:a7:65:d5:74: 02:bd:74:46 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhFNzQxMDM2NUI5RjI4 RThGOTQ3RTlCQkQ1QjFEN0MxQ0YyQ0RBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRXY/tkexyo+7BWlnUQ5fwp1UAQwYGXUIySM7Zy/NhpSLEk28s oE1Gq96/knlG2MvmVHfXd7Gvya+1D2iOkTEmolMn6gDJgpEoaMTC+3JHv80YN8Vc Jy/gb9STBGbE/PRW8HKB4vW0MHAQhKhnE1p2k2Iz+jTwhYKnsHkpKJoTdaqZBJLv vJ8RT8VoY1pUzksOCYhmPfm39nKHsofABQ77TK14Mzn8mvN8hFcnGYgAx4cAxAv6 MsavLqoTyLFcvnKfhk0MmNcbD1ZL6GhRdPe7DeXSeaSZd+TteTD4NFInLd745LnL 2B+YJurBsYvqPruC8OIhTSFehLVDRwQ8jS01AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjnQQNlufKOj5R+m71bHXwc8s2qowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2puUVFObHVmS09qNVItbTcx YkhYd2M4czJxby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 PdEwDQYJKoZIhvcNAQELBQADggEBAJtBJ9RNU13A5dBCZfebKsNo6t8IBFTj67p/ xgk0EU1l6eQcZlWGOyQh7CRWohe7X8kPah89e0Wn6DA6Y+ZXrPcDDyDH2ceHW9Pg K6SrtFFKDGJ46zwYo78lEVJQLDkOp1EsOudrQRaOYyBYHAZ1e3Li3EKXLS+8XgRB Zrbokpx5rhTyyll4SQ9CddDuH/+wrcx2q+nofiBoBO0NmSsPj0RAq/dQdDRarVL6 T02aH3pLisNKnWflhsUBTJ1rTwitDU/iaQocrI126jow6aa4brO1Lz4Pfk0Hvj/f 9LVveGqxOQ81c/GvxG5nPVyJv76jeGTcaTSY8J2Ip2XVdAK9dEY= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:13 2024 by rpki-client on console-ams.rpki-client.org