$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AbyZbTHGg4vDd7VSYNE8y4fskr4.roa File: AbyZbTHGg4vDd7VSYNE8y4fskr4.roa (raw, json) Hash identifier: VRVk3LhMHJwtdVNNSPtg7rY7Qg6inbthwlKAS3eaWso= Subject key identifier: 01:BC:99:6D:31:C6:83:8B:C3:77:B5:52:60:D1:3C:CB:87:EC:92:BE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E1C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AbyZbTHGg4vDd7VSYNE8y4fskr4.roa Signing time: Fri 01 Sep 2023 10:15:41 +0000 ROA not before: Fri 01 Sep 2023 10:15:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 211.76.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7708 (0x1e1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=01BC996D31C6838BC377B55260D13CCB87EC92BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:e8:9b:14:4a:0a:1d:51:c8:49:9a:7a:99: e2:0f:79:05:46:b5:3b:57:04:f0:5d:24:1d:6b:a5: 14:07:ad:8f:08:28:97:1f:b2:94:d1:c5:9d:86:8f: f5:dc:98:55:0e:94:05:c4:45:83:0c:f4:c0:38:f2: 71:41:be:2e:76:49:20:57:cc:81:5b:07:d4:21:b0: 62:c7:ec:8b:b3:09:28:41:d8:1f:76:d8:0f:19:f9: 1d:16:91:06:9e:41:7d:7b:e7:8c:99:4e:04:af:f8: bb:07:44:6e:4d:95:31:16:fe:0e:a1:7b:6c:d0:4b: 43:67:97:13:7f:40:5d:bf:dc:28:43:fd:a5:83:37: 1a:d5:fc:37:2f:6c:2a:2c:96:7d:10:6f:5b:b7:4c: 88:73:f0:f6:85:1b:b9:0c:f6:d7:29:86:ee:0f:05: 1f:98:29:7d:d6:92:76:68:e0:3d:a8:35:af:1a:b8: 11:69:44:8e:f8:50:95:48:38:03:87:7c:5a:aa:18: ee:76:37:48:57:51:76:fb:61:03:33:8d:57:5a:36: 43:42:bc:c9:6b:dd:59:2b:9e:46:24:d2:85:84:44: 80:99:66:e8:50:ee:b1:08:fd:e4:f5:59:a0:f8:10: 7e:76:ff:67:31:68:21:c2:06:f5:e4:f7:c4:ac:80: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BC:99:6D:31:C6:83:8B:C3:77:B5:52:60:D1:3C:CB:87:EC:92:BE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AbyZbTHGg4vDd7VSYNE8y4fskr4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.46.0/23 Signature Algorithm: sha256WithRSAEncryption 96:2b:f0:5b:f7:03:7a:80:27:e3:c1:6a:89:5d:2b:c6:f5:85: e2:e9:b0:4a:5b:7b:e0:25:90:59:90:af:4b:5e:f3:a4:ff:29: 3c:c4:00:4f:08:5b:11:a1:84:8c:a2:25:52:32:50:11:4b:28: 40:5c:d3:eb:5e:57:c7:bb:9a:07:67:9a:69:76:da:33:e8:a1: 2f:97:1c:34:51:de:47:b6:b0:22:53:a8:f9:50:76:28:d3:e2: 3f:5a:7c:c6:6a:bb:2e:22:c1:b8:c0:13:86:70:3f:d8:a6:93: 98:73:22:0d:5a:8f:bd:81:de:2b:54:d1:72:d5:3d:a1:8e:93: ea:54:fe:00:55:dc:f2:69:6f:d6:58:58:49:26:e1:2e:ea:68: 5d:55:50:3a:da:d8:1b:b8:33:a9:a8:41:66:0b:64:69:49:74: a3:67:cd:a8:ce:68:e7:83:ad:42:39:16:30:67:45:c9:74:23: 9b:96:35:2a:46:67:61:b2:63:b3:36:09:7c:0a:6e:87:40:cb: a4:d8:01:82:ab:df:3c:19:7e:a6:f9:7f:d5:05:83:d2:21:ba: ee:92:28:2c:08:68:ea:68:b3:b5:c2:bc:9a:3a:80:cd:d3:fb: 01:65:83:1c:e8:71:c6:7b:6a:57:cf:ef:c5:1d:70:3d:3f:18: ce:5a:22:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxQkM5OTZEMzFDNjgz OEJDMzc3QjU1MjYwRDEzQ0NCODdFQzkyQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSteibFEoKHVHISZp6meIPeQVGtTtXBPBdJB1rpRQHrY8IKJcf spTRxZ2Gj/XcmFUOlAXERYMM9MA48nFBvi52SSBXzIFbB9QhsGLH7IuzCShB2B92 2A8Z+R0WkQaeQX1754yZTgSv+LsHRG5NlTEW/g6he2zQS0NnlxN/QF2/3ChD/aWD NxrV/DcvbCosln0Qb1u3TIhz8PaFG7kM9tcphu4PBR+YKX3WknZo4D2oNa8auBFp RI74UJVIOAOHfFqqGO52N0hXUXb7YQMzjVdaNkNCvMlr3VkrnkYk0oWERICZZuhQ 7rEI/eT1WaD4EH52/2cxaCHCBvXk98SsgLvtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAbyZbTHGg4vDd7VSYNE8y4fskr4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FieVpiVEhHZzR2RGQ3VlNZ TkU4eTRmc2tyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TC4wDQYJKoZIhvcNAQELBQADggEBAJYr8Fv3A3qAJ+PBaoldK8b1heLpsEpbe+Al kFmQr0te86T/KTzEAE8IWxGhhIyiJVIyUBFLKEBc0+teV8e7mgdnmml22jPooS+X HDRR3ke2sCJTqPlQdijT4j9afMZquy4iwbjAE4ZwP9imk5hzIg1aj72B3itU0XLV PaGOk+pU/gBV3PJpb9ZYWEkm4S7qaF1VUDra2Bu4M6moQWYLZGlJdKNnzajOaOeD rUI5FjBnRcl0I5uWNSpGZ2GyY7M2CXwKbodAy6TYAYKr3zwZfqb5f9UFg9Ihuu6S KCwIaOpos7XCvJo6gM3T+wFlgxzoccZ7alfP78UdcD0/GM5aIqg= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org