$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k_K7xVzvhpsCCjDh9FrAj5i1VDk.roa File: k_K7xVzvhpsCCjDh9FrAj5i1VDk.roa (raw, json) Hash identifier: rVaOWCs01EsCwLsQoXKmMlc+ZCmrnGt5c9k9Rf+jooo= Subject key identifier: 93:F2:BB:C5:5C:EF:86:9B:02:0A:30:E1:F4:5A:C0:8F:98:B5:54:39 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D80 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k_K7xVzvhpsCCjDh9FrAj5i1VDk.roa Signing time: Fri 01 Sep 2023 10:14:54 +0000 ROA not before: Fri 01 Sep 2023 10:14:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 119.77.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7552 (0x1d80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=93F2BBC55CEF869B020A30E1F45AC08F98B55439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:50:59:85:cb:86:cd:f5:f5:d3:c3:d6:0b: dc:41:fc:2b:6f:8f:7b:b0:53:34:40:55:cd:de:f5: c2:7f:4e:59:7b:e8:2f:48:a7:3f:3c:0a:c8:6f:50: 63:ef:35:47:03:b4:90:07:ba:e7:16:23:b2:86:9a: 2c:05:ba:02:10:34:c0:e1:c5:3c:e4:3c:aa:af:cd: cf:57:4c:a7:b1:68:28:a5:dd:1b:d4:56:cc:5a:44: ce:a9:70:70:f8:4f:d6:0e:aa:8c:10:2c:78:2c:d6: df:08:5f:f8:94:42:a8:79:34:31:f0:e6:c4:cf:f2: e6:dc:f9:2b:62:6f:d7:b0:33:53:1e:80:6c:a1:60: 06:14:31:57:8a:69:60:43:2e:74:60:58:61:3e:1e: 11:ca:ef:38:75:0d:e0:06:93:47:01:dd:6f:19:8f: 1a:5f:7c:63:70:36:c5:47:e3:1a:e3:88:b5:a6:2a: 91:62:8d:dc:26:f2:ca:11:2e:71:bd:07:dc:73:28: 8f:30:5a:7d:02:e8:8d:8e:60:a0:df:a4:3b:b0:84: e8:f0:ee:27:4c:12:3c:3b:24:3d:84:98:fa:ce:de: 0e:86:fe:a0:69:24:df:5b:bf:43:82:d5:f6:dd:fc: 5d:03:03:04:39:3f:df:5b:ca:fb:52:92:e5:c9:27: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F2:BB:C5:5C:EF:86:9B:02:0A:30:E1:F4:5A:C0:8F:98:B5:54:39 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k_K7xVzvhpsCCjDh9FrAj5i1VDk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.132.0/22 Signature Algorithm: sha256WithRSAEncryption 50:06:d7:db:06:fd:29:b3:50:cb:7a:cc:f4:51:c9:d6:de:c7: 05:5b:f1:8c:d8:96:97:be:dd:51:8b:56:8f:41:ae:e6:aa:34: 9c:2a:dd:7c:5c:a7:07:d3:69:34:0b:32:01:bd:5f:4d:7a:f6: b1:3d:b2:c4:ec:c3:5c:2f:de:39:22:12:b6:e9:9a:31:2e:d0: 00:cf:10:1b:f6:1c:76:ef:b2:05:d4:6b:31:8f:7b:23:9c:45: ee:6b:2e:b0:a5:c8:3f:f2:7a:7b:76:fb:d3:ea:94:9e:41:07: dc:f4:61:79:49:3e:ad:31:a2:f9:67:9a:e8:f9:99:da:f3:8c: d4:b0:da:3a:10:80:29:47:97:88:fb:50:8a:b1:a5:b5:2e:8d: d4:e5:ed:85:9b:de:e4:75:74:1d:19:09:b6:66:92:75:54:92: 86:e0:27:06:40:d0:0c:9f:62:17:a1:ed:2b:d3:f2:e5:d4:34: d6:08:83:08:ae:25:42:6b:fd:71:5c:24:11:f2:f9:2b:ad:02: a0:87:34:43:9a:4f:45:ad:b9:7d:ec:29:0e:0a:d8:0c:3f:c3: b4:e7:ef:da:db:67:e2:74:e0:18:07:72:ef:c2:9f:18:8a:3e: a5:17:f9:e3:95:08:8d:9c:f8:3f:a6:ba:5e:74:5f:6f:59:cb: 0c:e1:5a:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkzRjJCQkM1NUNFRjg2 OUIwMjBBMzBFMUY0NUFDMDhGOThCNTU0MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuv1BZhcuGzfX108PWC9xB/Ctvj3uwUzRAVc3e9cJ/Tll76C9I pz88CshvUGPvNUcDtJAHuucWI7KGmiwFugIQNMDhxTzkPKqvzc9XTKexaCil3RvU VsxaRM6pcHD4T9YOqowQLHgs1t8IX/iUQqh5NDHw5sTP8ubc+Stib9ewM1MegGyh YAYUMVeKaWBDLnRgWGE+HhHK7zh1DeAGk0cB3W8ZjxpffGNwNsVH4xrjiLWmKpFi jdwm8soRLnG9B9xzKI8wWn0C6I2OYKDfpDuwhOjw7idMEjw7JD2EmPrO3g6G/qBp JN9bv0OC1fbd/F0DAwQ5P99byvtSkuXJJ5TJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUk/K7xVzvhpsCCjDh9FrAj5i1VDkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tfSzd4Vnp2aHBzQ0NqRGg5 RnJBajVpMVZEay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3 TYQwDQYJKoZIhvcNAQELBQADggEBAFAG19sG/SmzUMt6zPRRydbexwVb8YzYlpe+ 3VGLVo9BruaqNJwq3XxcpwfTaTQLMgG9X0169rE9ssTsw1wv3jkiErbpmjEu0ADP EBv2HHbvsgXUazGPeyOcRe5rLrClyD/yent2+9PqlJ5BB9z0YXlJPq0xovlnmuj5 mdrzjNSw2joQgClHl4j7UIqxpbUujdTl7YWb3uR1dB0ZCbZmknVUkobgJwZA0Ayf Yheh7SvT8uXUNNYIgwiuJUJr/XFcJBHy+SutAqCHNEOaT0WtuX3sKQ4K2Aw/w7Tn 79rbZ+J04BgHcu/CnxiKPqUX+eOVCI2c+D+mul50X29ZywzhWlA= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org