$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mZsWXc4sgRJpr0FTkAe6abtF5fk.roa File: mZsWXc4sgRJpr0FTkAe6abtF5fk.roa (raw, json) Hash identifier: nZGcEFfMic4PTpHjZEbBGvvseg6FkCmCrSmLwRW8db8= Subject key identifier: 99:9B:16:5D:CE:2C:81:12:69:AF:41:53:90:07:BA:69:BB:45:E5:F9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DA9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mZsWXc4sgRJpr0FTkAe6abtF5fk.roa Signing time: Fri 01 Sep 2023 10:15:07 +0000 ROA not before: Fri 01 Sep 2023 10:15:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 211.76.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7593 (0x1da9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=999B165DCE2C811269AF41539007BA69BB45E5F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:21:76:cc:9e:42:e4:0f:2a:4b:a5:bc:68: 9a:e2:f0:3e:b9:bf:b7:b0:c7:05:da:81:ae:bf:72: 5c:f1:b5:77:be:05:e7:91:07:c7:df:57:26:11:24: a3:e8:93:ef:47:72:94:75:c0:7e:4c:e5:54:c7:68: 43:85:bc:c4:a9:e2:93:6d:c7:11:e8:9d:da:0e:eb: 93:4a:25:12:3b:c8:12:60:93:e2:b1:8e:9f:83:c0: 53:8c:23:2d:17:8f:95:3d:63:f2:38:74:6e:24:58: 96:65:ee:4c:9e:52:f9:06:08:17:54:ca:9d:bb:ae: da:f9:48:23:72:91:57:b2:1e:d8:66:8f:bb:e1:9c: 08:68:61:99:7c:89:50:d2:9d:a5:ab:19:3f:5e:ec: b3:fb:69:83:8a:67:7b:d1:cf:91:68:6b:d4:20:1e: b9:e5:85:d8:7d:da:c0:97:45:c3:3e:a3:6d:b6:ec: 6a:73:da:81:db:14:bc:b3:36:1d:c7:aa:0d:67:04: d5:7d:57:51:99:fa:61:35:45:af:e5:39:54:f1:28: 2a:93:91:1a:02:b7:b5:24:4f:c4:88:0e:98:b4:99: 50:9f:68:8d:74:dc:3d:eb:fd:eb:8b:fa:6a:35:bb: 55:c4:18:bf:28:c4:e1:1b:36:bd:9d:ba:11:f0:74: 45:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9B:16:5D:CE:2C:81:12:69:AF:41:53:90:07:BA:69:BB:45:E5:F9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mZsWXc4sgRJpr0FTkAe6abtF5fk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.44.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:c9:75:8b:27:b5:9b:f4:18:37:7b:67:d2:02:3c:ed:70:0b: 8b:5d:d8:10:74:29:cb:fe:2d:d3:50:c4:e9:08:ea:2a:b8:e6: 60:78:cc:0c:9c:40:de:c6:51:fe:24:36:d6:5a:a2:d1:c2:f3: 98:52:77:d7:b0:62:fe:62:f7:e3:00:8a:df:20:2b:fb:0b:05: f8:02:4c:31:3d:6f:34:25:8b:0c:26:a6:81:18:35:d3:bf:be: cf:d7:59:e7:98:0b:a7:5c:25:95:2f:a7:7f:9b:b0:26:1a:62: cd:95:62:95:0b:86:3e:e0:96:ac:5b:64:0a:0b:ce:a3:b5:1d: 2b:56:79:29:68:ad:0d:1c:43:2f:24:3f:9b:82:a9:b1:ac:39: 74:20:35:5b:a7:b5:26:e4:ee:97:93:1e:d0:74:1d:1d:9b:b9: 80:70:76:4e:66:4c:09:fa:ab:2c:af:0b:3d:de:48:2f:4c:04: 74:a8:ce:28:fd:7f:15:bf:3c:13:30:e1:d5:f5:76:a6:ef:4a: 04:05:de:d9:8b:08:bf:77:34:f5:47:ac:af:df:ce:20:fb:1c: ce:99:d8:34:ff:5a:d5:57:87:37:c2:6d:f7:7c:cf:28:63:8d: 29:2b:75:4d:bc:6a:6b:98:64:b3:91:10:be:4f:4e:cf:5b:9b: 4d:06:38:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk5OUIxNjVEQ0UyQzgx MTI2OUFGNDE1MzkwMDdCQTY5QkI0NUU1RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCogSF2zJ5C5A8qS6W8aJri8D65v7ewxwXaga6/clzxtXe+BeeR B8ffVyYRJKPok+9HcpR1wH5M5VTHaEOFvMSp4pNtxxHondoO65NKJRI7yBJgk+Kx jp+DwFOMIy0Xj5U9Y/I4dG4kWJZl7kyeUvkGCBdUyp27rtr5SCNykVeyHthmj7vh nAhoYZl8iVDSnaWrGT9e7LP7aYOKZ3vRz5Foa9QgHrnlhdh92sCXRcM+o2227Gpz 2oHbFLyzNh3Hqg1nBNV9V1GZ+mE1Ra/lOVTxKCqTkRoCt7UkT8SIDpi0mVCfaI10 3D3r/euL+mo1u1XEGL8oxOEbNr2duhHwdEX9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmZsWXc4sgRJpr0FTkAe6abtF5fkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21ac1dYYzRzZ1JKcHIwRlRr QWU2YWJ0RjVmay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TCwwDQYJKoZIhvcNAQELBQADggEBAFrJdYsntZv0GDd7Z9ICPO1wC4td2BB0Kcv+ LdNQxOkI6iq45mB4zAycQN7GUf4kNtZaotHC85hSd9ewYv5i9+MAit8gK/sLBfgC TDE9bzQliwwmpoEYNdO/vs/XWeeYC6dcJZUvp3+bsCYaYs2VYpULhj7glqxbZAoL zqO1HStWeSlorQ0cQy8kP5uCqbGsOXQgNVuntSbk7peTHtB0HR2buYBwdk5mTAn6 qyyvCz3eSC9MBHSozij9fxW/PBMw4dX1dqbvSgQF3tmLCL93NPVHrK/fziD7HM6Z 2DT/WtVXhzfCbfd8zyhjjSkrdU28amuYZLOREL5PTs9bm00GOJA= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:13 2024 by rpki-client on console-ams.rpki-client.org