$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1p-FFfPP9-QBgVe244VQ33oGphY.roa File: 1p-FFfPP9-QBgVe244VQ33oGphY.roa (raw, json) Hash identifier: j4Jwty8/l1l2rqGcXATrbYG9l+olZK4cDAuspQxIgnc= Subject key identifier: D6:9F:85:15:F3:CF:F7:E4:01:81:57:B6:E3:85:50:DF:7A:06:A6:16 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D73 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1p-FFfPP9-QBgVe244VQ33oGphY.roa Signing time: Fri 01 Sep 2023 10:14:49 +0000 ROA not before: Fri 01 Sep 2023 10:14:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 211.76.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7539 (0x1d73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D69F8515F3CFF7E4018157B6E38550DF7A06A616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2a:d8:94:35:bf:c8:11:c7:f0:60:c7:b4:67: ed:ad:b1:87:97:e2:5b:0a:c5:c2:9e:e9:a8:c7:4c: b3:e1:be:6e:90:51:02:19:82:8f:b3:27:65:c3:c3: c4:4d:33:a9:a2:aa:36:d2:39:0d:73:20:79:ad:dd: be:ee:c0:06:13:77:dc:cb:2e:66:01:48:c6:04:bf: f8:07:6f:9b:01:39:a0:06:6f:1a:c2:af:ae:c0:f6: 2c:77:7c:40:a5:c5:54:fb:35:58:89:50:b8:2b:c5: e7:43:fd:2d:31:fd:e7:7a:06:a0:89:56:68:ab:30: 4f:66:d6:f2:b1:bd:79:72:f6:98:02:39:22:e2:0f: f5:1d:86:fb:db:50:98:a9:21:f3:21:35:3e:f0:9b: ac:a9:08:bf:b6:a0:88:6c:b0:a0:d0:f5:f9:ec:79: 90:e6:31:b3:e4:04:d6:53:5c:e7:e3:ea:4e:81:04: d5:59:5e:bf:5c:ee:ff:17:a0:cf:b9:64:d7:4e:d1: b4:46:eb:1d:c6:c5:16:70:cf:c1:43:8d:51:40:4f: 8d:cc:be:98:5d:6f:c6:c8:22:f2:75:3d:54:32:92: c0:42:43:fe:0b:73:85:f9:67:c4:4e:d0:91:f2:cd: 4e:51:f1:9e:3c:38:ae:5a:88:34:fc:d3:fb:46:2e: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9F:85:15:F3:CF:F7:E4:01:81:57:B6:E3:85:50:DF:7A:06:A6:16 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1p-FFfPP9-QBgVe244VQ33oGphY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.55.0/24 Signature Algorithm: sha256WithRSAEncryption 84:c4:ec:97:86:38:70:61:6b:fd:90:cb:18:c2:c4:3a:22:fe: 22:5c:e5:fd:d6:50:2e:74:5f:8b:62:e6:d9:ad:ee:f1:62:c9: 4a:a8:0c:0f:d7:98:ef:d1:0c:1e:6c:15:1f:f6:37:89:da:41: 25:3b:4d:d2:ed:66:43:d6:22:e0:94:ea:32:f7:23:ad:ef:2e: 8d:6b:dc:94:f8:40:ef:41:62:a0:26:b9:ed:ed:23:61:f2:6f: 8d:6a:cf:12:1b:b3:4b:bd:5f:2c:b7:18:d6:e7:b2:84:a9:84: 30:2b:18:f1:26:04:3a:4b:74:86:e6:57:d8:b8:d0:c5:10:f9: 5a:c9:cc:2e:22:ee:0e:0b:4e:72:ab:79:ba:5e:28:1c:b7:ae: 9b:ea:30:e0:73:06:a0:a3:b9:e9:e5:d9:55:47:d5:f2:f8:d6: 3c:97:f4:50:9f:c7:5c:5e:ef:9d:ae:a4:75:e7:54:72:f6:a2: b8:60:c3:11:40:9f:c1:c7:46:2a:53:c5:b3:c8:a0:21:3a:72: 64:bb:36:cb:26:3b:fd:89:70:97:9e:fa:a4:e4:1b:68:05:ba: 71:73:0b:ec:de:3a:57:d3:d3:31:cc:8c:07:3e:a8:6b:c4:d1: ab:01:bb:ce:93:73:7c:a8:6c:fa:73:2c:a0:b9:71:7f:4e:29: 1e:65:84:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ2OUY4NTE1RjNDRkY3 RTQwMTgxNTdCNkUzODU1MERGN0EwNkE2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzKtiUNb/IEcfwYMe0Z+2tsYeX4lsKxcKe6ajHTLPhvm6QUQIZ go+zJ2XDw8RNM6miqjbSOQ1zIHmt3b7uwAYTd9zLLmYBSMYEv/gHb5sBOaAGbxrC r67A9ix3fEClxVT7NViJULgrxedD/S0x/ed6BqCJVmirME9m1vKxvXly9pgCOSLi D/UdhvvbUJipIfMhNT7wm6ypCL+2oIhssKDQ9fnseZDmMbPkBNZTXOfj6k6BBNVZ Xr9c7v8XoM+5ZNdO0bRG6x3GxRZwz8FDjVFAT43Mvphdb8bIIvJ1PVQyksBCQ/4L c4X5Z8RO0JHyzU5R8Z48OK5aiDT80/tGLtznAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1p+FFfPP9+QBgVe244VQ33oGphYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFwLUZGZlBQOS1RQmdWZTI0 NFZRMzNvR3BoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TDcwDQYJKoZIhvcNAQELBQADggEBAITE7JeGOHBha/2QyxjCxDoi/iJc5f3WUC50 X4ti5tmt7vFiyUqoDA/XmO/RDB5sFR/2N4naQSU7TdLtZkPWIuCU6jL3I63vLo1r 3JT4QO9BYqAmue3tI2Hyb41qzxIbs0u9Xyy3GNbnsoSphDArGPEmBDpLdIbmV9i4 0MUQ+VrJzC4i7g4LTnKrebpeKBy3rpvqMOBzBqCjuenl2VVH1fL41jyX9FCfx1xe 752upHXnVHL2orhgwxFAn8HHRipTxbPIoCE6cmS7NssmO/2JcJee+qTkG2gFunFz C+zeOlfT0zHMjAc+qGvE0asBu86Tc3yobPpzLKC5cX9OKR5lhIA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org