$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mAltbp90XKlFXIfndDJjRpXDfP4.roa File: mAltbp90XKlFXIfndDJjRpXDfP4.roa (raw, json) Hash identifier: d9BdtC+VwDzlnGXO/a2urgLu7B98hUAvyeUK46DHJ7s= Subject key identifier: 98:09:6D:6E:9F:74:5C:A9:45:5C:87:E7:74:32:63:46:95:C3:7C:FE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DF0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mAltbp90XKlFXIfndDJjRpXDfP4.roa Signing time: Fri 01 Sep 2023 10:15:28 +0000 ROA not before: Fri 01 Sep 2023 10:15:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 211.76.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7664 (0x1df0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=98096D6E9F745CA9455C87E77432634695C37CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:52:5b:df:7b:d5:e5:91:32:71:40:0b:bf: ce:e5:d4:3b:29:14:76:23:7e:09:1b:0c:06:3e:30: 0c:8c:66:e2:6b:33:d5:c0:0b:2e:de:e4:e9:c6:f9: 90:cb:3f:37:71:35:81:5c:e3:57:59:de:f7:68:e1: 2c:a4:cb:2b:d2:34:90:a3:e7:fb:45:84:b5:58:76: 14:2e:a4:ff:b0:a9:12:6b:3a:ec:19:5d:17:ac:55: 4d:36:66:52:d1:db:48:90:97:e5:65:1a:d4:9b:ae: 72:c3:d2:d7:e5:66:08:78:57:36:89:c5:af:8e:ff: 42:ea:e8:7b:62:fc:2d:3c:e3:f6:3c:d1:01:98:be: dd:7d:b7:7b:5e:ee:88:dc:f1:49:44:13:d2:f3:c1: 16:02:44:c4:b4:39:2b:52:04:48:01:1f:64:4a:12: 43:85:e8:ac:8b:9a:8e:59:68:a1:c6:b9:9b:6d:1e: e0:1c:c1:11:c2:25:d4:b4:b5:9e:43:81:7e:4f:61: 1c:f4:e0:d2:9e:ff:c4:62:f9:3f:31:14:16:01:f7: c9:88:03:d2:91:7a:8b:c0:f6:5b:19:3c:c6:9d:09: 23:db:14:dc:4c:96:36:3f:e5:70:6e:14:11:96:89: 38:1b:cb:b7:87:b4:20:d3:b9:1d:17:85:26:f5:f3: d6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:09:6D:6E:9F:74:5C:A9:45:5C:87:E7:74:32:63:46:95:C3:7C:FE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mAltbp90XKlFXIfndDJjRpXDfP4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.40.0/22 Signature Algorithm: sha256WithRSAEncryption 15:28:eb:f0:0c:98:50:26:ea:ed:8f:35:8a:7c:47:61:34:92: fa:56:2e:8e:b9:18:fb:f3:8b:d9:0c:2c:ad:ad:13:01:73:77: 75:e2:23:b4:8f:b4:26:fc:30:4d:52:b8:f0:10:94:ae:62:12: 19:37:a7:a4:46:9c:bc:a1:8a:5f:f3:b5:f2:b8:9f:22:32:5d: d0:db:6d:2e:47:6b:04:64:a1:62:89:bb:3b:fc:e8:c8:d4:8a: e3:fc:19:99:3d:1c:54:44:61:05:a0:bf:2b:b1:bb:1a:24:5d: 86:4e:d2:07:cd:e8:d9:13:b7:d0:93:78:84:4a:9a:42:7b:2e: dd:11:eb:e3:7d:96:81:69:7b:43:e6:c6:3b:46:7e:45:e2:23: ca:67:e3:33:fd:41:a6:83:a0:69:44:d2:93:be:db:f3:c0:91: da:8a:46:4e:e3:58:68:32:13:64:99:f8:d1:8d:28:67:bf:2f: fb:45:8a:0e:5b:eb:f3:2b:3a:89:ee:ee:a3:dc:dd:0a:fb:61: 50:42:74:5c:5d:92:78:0e:2d:b1:26:5d:60:b2:6d:29:3d:72: 70:ef:92:5f:b4:7a:72:36:3b:e4:3e:f5:21:1f:a2:04:65:ea: bc:26:d4:a7:8c:cc:cf:57:51:ad:f9:c2:9a:6a:02:17:67:49: 0c:34:da:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk4MDk2RDZFOUY3NDVD QTk0NTVDODdFNzc0MzI2MzQ2OTVDMzdDRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUGVJb33vV5ZEycUALv87l1DspFHYjfgkbDAY+MAyMZuJrM9XA Cy7e5OnG+ZDLPzdxNYFc41dZ3vdo4SykyyvSNJCj5/tFhLVYdhQupP+wqRJrOuwZ XResVU02ZlLR20iQl+VlGtSbrnLD0tflZgh4VzaJxa+O/0Lq6Hti/C084/Y80QGY vt19t3te7ojc8UlEE9LzwRYCRMS0OStSBEgBH2RKEkOF6KyLmo5ZaKHGuZttHuAc wRHCJdS0tZ5DgX5PYRz04NKe/8Ri+T8xFBYB98mIA9KReovA9lsZPMadCSPbFNxM ljY/5XBuFBGWiTgby7eHtCDTuR0XhSb189bxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmAltbp90XKlFXIfndDJjRpXDfP4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21BbHRicDkwWEtsRlhJZm5k REpqUnBYRGZQNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT TCgwDQYJKoZIhvcNAQELBQADggEBABUo6/AMmFAm6u2PNYp8R2E0kvpWLo65GPvz i9kMLK2tEwFzd3XiI7SPtCb8ME1SuPAQlK5iEhk3p6RGnLyhil/ztfK4nyIyXdDb bS5HawRkoWKJuzv86MjUiuP8GZk9HFREYQWgvyuxuxokXYZO0gfN6NkTt9CTeIRK mkJ7Lt0R6+N9loFpe0PmxjtGfkXiI8pn4zP9QaaDoGlE0pO+2/PAkdqKRk7jWGgy E2SZ+NGNKGe/L/tFig5b6/MrOonu7qPc3Qr7YVBCdFxdkngOLbEmXWCybSk9cnDv kl+0enI2O+Q+9SEfogRl6rwm1KeMzM9XUa35wppqAhdnSQw02oM= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:13 2024 by rpki-client on console-ams.rpki-client.org