$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_n73epEJE73qhDdD2h6e8I97so.roa File: F_n73epEJE73qhDdD2h6e8I97so.roa (raw, json) Hash identifier: 90cApcZd3AOfbXhpO+YOr+UhN/rT2tw//OdrOZG7k2E= Subject key identifier: 17:F9:FB:DD:EA:44:24:4E:F7:AA:10:DD:0F:68:7A:7B:C2:3D:EE:CA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DBB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_n73epEJE73qhDdD2h6e8I97so.roa Signing time: Fri 01 Sep 2023 10:15:13 +0000 ROA not before: Fri 01 Sep 2023 10:15:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.61.224.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7611 (0x1dbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=17F9FBDDEA44244EF7AA10DD0F687A7BC23DEECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:31:e7:34:22:f0:27:0a:49:1d:ae:9a:19: 4e:66:7d:4b:3d:50:de:6e:42:bb:93:a6:35:03:43: 17:69:34:ca:c0:a8:1c:90:2f:7b:ce:79:01:30:4c: cc:65:7b:39:62:d9:ac:7f:cb:ec:82:8f:52:7b:d0: 79:84:c2:91:72:57:42:f5:32:92:32:33:9d:5a:61: 6a:e1:48:92:28:d1:bd:24:1d:c6:c9:3b:1c:c9:89: fe:15:73:b5:5e:0f:f9:45:9f:65:db:96:09:dc:86: 52:fe:04:b6:01:14:0f:6e:45:45:e9:37:e5:12:27: 9d:f3:f2:8d:ee:36:c1:e4:26:02:f4:a7:40:fa:98: a7:f0:ec:cd:db:1d:d2:24:db:fc:44:0f:63:ae:04: 96:ce:13:43:69:6e:02:d2:bd:4e:de:66:9d:bc:ad: 49:26:94:87:c4:c7:66:17:b8:4a:d7:38:6a:f5:5f: 60:24:7d:46:ee:99:67:51:c5:e6:74:f0:68:e6:7f: 75:2c:3e:3e:60:73:43:61:9d:ee:c2:4a:ab:3d:e0: 94:da:4c:5c:21:b8:42:b4:e5:88:7d:82:44:fd:c5: 3a:bb:a7:4e:98:17:8a:05:2e:f9:df:11:fd:d1:87: 34:e6:37:3a:01:30:ed:e8:a4:5b:3a:a4:66:56:f1: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F9:FB:DD:EA:44:24:4E:F7:AA:10:DD:0F:68:7A:7B:C2:3D:EE:CA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_n73epEJE73qhDdD2h6e8I97so.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.224.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:7a:60:62:df:b2:8a:50:cb:a5:9f:60:ba:f4:3e:12:2b:5a: 83:ee:fc:07:ab:59:a4:53:d1:fe:27:20:19:23:ca:80:f3:8d: 80:b0:b8:b0:7d:ae:83:ba:b4:24:d2:d7:70:a1:7d:ff:fc:71: 86:4c:9c:34:a3:ba:e2:b2:1e:e0:1e:d6:bd:bf:29:37:0f:8f: b6:b5:fb:95:6c:40:58:73:00:41:e4:09:f9:cf:75:b6:56:63: 9e:db:fe:b9:67:2c:f2:e6:0d:62:9a:77:14:04:c9:74:6c:37: cd:6c:80:60:8a:6e:aa:27:58:df:41:33:d0:6e:0b:a8:99:0a: 6c:6d:0d:df:50:87:21:33:c3:2d:3b:02:1c:f1:65:06:9e:24: f2:e8:27:33:8d:19:52:15:4f:9e:a6:7f:62:67:05:f0:4b:5a: cf:9f:64:9b:18:c9:fe:6b:0d:49:1e:1f:e9:e1:8e:5f:c5:da: b3:70:e5:9c:f8:41:78:0c:fd:82:9f:4e:f0:bb:c6:87:a7:e5: 4a:a7:26:95:73:4a:8b:43:b4:e7:05:9d:47:30:37:97:4d:28: 6f:03:64:cc:4b:5f:01:c8:84:27:9e:7e:12:90:9e:57:1a:34: d8:71:53:ba:c9:4a:2f:8a:45:ec:eb:36:93:3f:15:2f:b3:85: 36:b5:a0:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE3RjlGQkRERUE0NDI0 NEVGN0FBMTBERDBGNjg3QTdCQzIzREVFQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUKjHnNCLwJwpJHa6aGU5mfUs9UN5uQruTpjUDQxdpNMrAqByQ L3vOeQEwTMxlezli2ax/y+yCj1J70HmEwpFyV0L1MpIyM51aYWrhSJIo0b0kHcbJ OxzJif4Vc7VeD/lFn2XblgnchlL+BLYBFA9uRUXpN+USJ53z8o3uNsHkJgL0p0D6 mKfw7M3bHdIk2/xED2OuBJbOE0NpbgLSvU7eZp28rUkmlIfEx2YXuErXOGr1X2Ak fUbumWdRxeZ08Gjmf3UsPj5gc0Nhne7CSqs94JTaTFwhuEK05Yh9gkT9xTq7p06Y F4oFLvnfEf3RhzTmNzoBMO3opFs6pGZW8dpHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUF/n73epEJE73qhDdD2h6e8I97sowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZfbjczZXBFSkU3M3FoRGRE Mmg2ZThJOTdzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PeAwDQYJKoZIhvcNAQELBQADggEBACp6YGLfsopQy6WfYLr0PhIrWoPu/AerWaRT 0f4nIBkjyoDzjYCwuLB9roO6tCTS13Chff/8cYZMnDSjuuKyHuAe1r2/KTcPj7a1 +5VsQFhzAEHkCfnPdbZWY57b/rlnLPLmDWKadxQEyXRsN81sgGCKbqonWN9BM9Bu C6iZCmxtDd9QhyEzwy07AhzxZQaeJPLoJzONGVIVT56mf2JnBfBLWs+fZJsYyf5r DUkeH+nhjl/F2rNw5Zz4QXgM/YKfTvC7xoen5UqnJpVzSotDtOcFnUcwN5dNKG8D ZMxLXwHIhCeefhKQnlcaNNhxU7rJSi+KRezrNpM/FS+zhTa1oLI= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org