$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/21NEP8JOQMkwREihh3uKHmtsnws.roa File: 21NEP8JOQMkwREihh3uKHmtsnws.roa (raw, json) Hash identifier: 0f5uUdVTosDWhi5hi5oGvHIx1w2yLG403irC8UlAtxI= Subject key identifier: DB:53:44:3F:C2:4E:40:C9:30:44:48:A1:87:7B:8A:1E:6B:6C:9F:0B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D7E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/21NEP8JOQMkwREihh3uKHmtsnws.roa Signing time: Fri 01 Sep 2023 10:14:53 +0000 ROA not before: Fri 01 Sep 2023 10:14:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 61.61.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7550 (0x1d7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DB53443FC24E40C9304448A1877B8A1E6B6C9F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:94:c6:36:be:28:76:a8:cf:fd:9b:65:7a: 5a:0b:64:13:a9:57:bd:44:ab:45:62:09:61:4c:60: a2:f1:bc:d8:5d:25:46:dc:27:05:2b:c5:a7:65:13: f1:60:68:c3:01:be:d7:07:48:00:e0:13:f5:bd:74: c0:ca:bd:56:42:46:a9:58:78:cd:9e:c8:6d:c9:0e: 62:38:b0:d1:b0:9c:13:3e:e1:d8:46:b3:a0:82:d6: b5:61:a4:58:af:73:3f:72:22:ce:16:49:39:d6:6a: fa:d9:9b:8e:10:25:d8:bf:3b:76:a6:d9:b3:c3:06: 2b:11:24:9d:20:ff:73:3c:95:03:34:c7:a6:52:37: a8:48:a9:b9:b8:c6:86:72:b2:9a:86:96:dc:4a:ac: df:8a:0a:f4:73:de:a1:8f:1e:ad:fe:d6:f4:4a:0d: 63:c7:5d:51:f2:56:1b:96:c0:82:b0:78:8b:05:ab: 77:ce:1d:ec:26:c8:1a:c7:d8:c2:ee:08:48:1e:ee: 1f:8d:de:84:f1:a9:bf:92:1e:f3:6c:b6:d1:54:ae: e0:db:07:0f:9d:58:a9:bb:c7:07:45:05:da:a8:2f: 35:27:d7:2d:24:0c:b9:50:80:52:68:3b:e3:06:2b: 2a:53:e3:f7:eb:dd:c1:8d:1f:cd:df:e7:b2:30:6d: 62:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:44:3F:C2:4E:40:C9:30:44:48:A1:87:7B:8A:1E:6B:6C:9F:0B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/21NEP8JOQMkwREihh3uKHmtsnws.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.220.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:74:6a:e7:16:86:c5:c5:ef:0b:93:80:f8:34:1a:d6:12:24: 68:eb:e4:1e:69:d7:3b:9f:a8:53:40:70:26:83:32:52:bd:d0: d0:ed:4e:e5:77:c0:f3:b0:fc:21:f4:ff:ad:14:97:0d:c6:cc: 88:5f:eb:9c:c5:44:d9:4a:f0:55:70:21:50:dc:86:b7:42:5a: 97:08:e9:fb:92:24:0b:bb:d1:60:41:c5:20:0b:c2:87:e0:1c: ff:8f:c9:04:4c:76:be:0e:a3:98:fc:e6:58:76:0d:b2:99:bb: 6d:2f:4b:61:bc:da:26:f0:63:ef:93:86:ba:c1:9b:46:17:63: 66:2c:af:9f:6d:43:5f:27:a3:14:18:cd:8b:db:4a:4d:10:59: 63:d5:22:ef:0e:a6:3a:ff:68:11:ac:ca:5f:0f:f5:42:22:cb: 10:63:fd:18:42:3c:f4:58:3d:3e:f2:b6:79:6b:af:ee:f0:10: db:46:e0:04:25:86:19:87:97:13:58:cf:4d:3b:51:3e:de:f4: fb:b9:f5:41:86:d6:b8:ab:f1:63:9c:eb:2a:43:30:6e:0d:bc: 57:45:c6:bd:58:de:cd:e6:8e:d9:aa:06:2e:f9:b3:1e:ca:86: 2b:05:9b:20:f7:86:37:8d:f7:7e:ba:3a:f6:7a:c6:97:38:ec: 97:f5:ff:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERCNTM0NDNGQzI0RTQw QzkzMDQ0NDhBMTg3N0I4QTFFNkI2QzlGMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5pZTGNr4odqjP/ZtleloLZBOpV71Eq0ViCWFMYKLxvNhdJUbc JwUrxadlE/FgaMMBvtcHSADgE/W9dMDKvVZCRqlYeM2eyG3JDmI4sNGwnBM+4dhG s6CC1rVhpFivcz9yIs4WSTnWavrZm44QJdi/O3am2bPDBisRJJ0g/3M8lQM0x6ZS N6hIqbm4xoZyspqGltxKrN+KCvRz3qGPHq3+1vRKDWPHXVHyVhuWwIKweIsFq3fO HewmyBrH2MLuCEge7h+N3oTxqb+SHvNsttFUruDbBw+dWKm7xwdFBdqoLzUn1y0k DLlQgFJoO+MGKypT4/fr3cGNH83f57IwbWL9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU21NEP8JOQMkwREihh3uKHmtsnwswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzIxTkVQOEpPUU1rd1JFaWho M3VLSG10c253cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PdwwDQYJKoZIhvcNAQELBQADggEBACx0aucWhsXF7wuTgPg0GtYSJGjr5B5p1zuf qFNAcCaDMlK90NDtTuV3wPOw/CH0/60Ulw3GzIhf65zFRNlK8FVwIVDchrdCWpcI 6fuSJAu70WBBxSALwofgHP+PyQRMdr4Oo5j85lh2DbKZu20vS2G82ibwY++ThrrB m0YXY2Ysr59tQ18noxQYzYvbSk0QWWPVIu8Opjr/aBGsyl8P9UIiyxBj/RhCPPRY PT7ytnlrr+7wENtG4AQlhhmHlxNYz007UT7e9Pu59UGG1rir8WOc6ypDMG4NvFdF xr1Y3s3mjtmqBi75sx7KhisFmyD3hjeN9366OvZ6xpc47Jf1/z4= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org