$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa File: FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa (raw, json) Hash identifier: 4wyEp4VBBL9zRR19z5XAmSgKib3Cp3dg4067GJHwT5c= Subject key identifier: 16:12:A5:85:CF:B9:65:99:78:80:95:DA:D3:DA:3A:BD:52:43:E8:50 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D66 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa Signing time: Fri 01 Sep 2023 10:14:46 +0000 ROA not before: Fri 01 Sep 2023 10:14:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.64.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7526 (0x1d66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1612A585CFB96599788095DAD3DA3ABD5243E850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:f8:5f:07:82:05:82:25:87:27:51:b9:da: 9f:24:87:90:cb:bd:78:a6:c2:41:29:dd:27:1d:b4: b3:a0:7f:b9:2e:68:39:30:9a:f0:ea:03:fa:47:90: 57:54:8a:9f:f2:7a:ba:1e:46:34:5d:1a:d3:ce:1d: 3e:8c:79:12:a0:2b:29:f0:30:98:01:f6:99:40:7a: 1d:b4:7d:4a:f8:94:b1:25:c4:54:1d:b4:18:b8:b0: c1:aa:2b:e1:6e:7b:d9:62:28:62:7f:a0:32:ce:8a: 9c:ab:bb:29:91:e5:99:86:98:a4:fd:49:31:fe:31: 95:99:2c:f0:0e:d1:ac:34:ff:6e:78:bb:2d:70:76: 55:a1:dc:d5:69:f3:a1:e4:07:90:0f:b7:4a:70:ac: 0a:77:92:b7:36:ac:92:f5:49:37:04:7d:17:56:dc: a1:8f:96:30:35:ed:bb:f9:9c:11:92:9a:12:aa:ad: 79:37:6a:f1:8d:3b:43:64:52:e1:b5:02:4b:42:59: 2c:78:dd:21:8d:89:73:f5:71:f5:2c:1c:1c:5c:7f: 7a:95:20:ea:d0:ca:11:eb:4f:b6:c1:15:7b:26:a2: 97:80:fa:f6:b2:14:bf:83:34:f4:65:ce:3a:d8:99: e7:e3:8e:a5:f3:80:16:04:15:b7:61:b3:79:d0:fe: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:12:A5:85:CF:B9:65:99:78:80:95:DA:D3:DA:3A:BD:52:43:E8:50 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.0.0/22 Signature Algorithm: sha256WithRSAEncryption 02:b2:36:73:8d:99:ea:32:3e:be:32:15:c8:11:68:67:da:47: c9:b9:f7:55:2b:32:b7:65:11:3b:6d:dd:01:c6:ad:8a:5a:2a: 0b:ac:04:4e:48:1d:16:26:39:88:8c:fb:f9:16:2d:d9:f6:bf: fe:0f:fc:f7:0c:7e:70:22:a4:16:9d:1c:77:08:cc:f9:21:ce: e6:f9:c3:7a:44:5f:9e:d8:44:bb:6c:66:77:11:39:a3:1a:2b: 56:b5:1f:cd:3d:91:9a:83:f4:1c:7b:09:d0:60:d0:a5:d5:0a: 1b:b7:69:66:e9:1e:6f:74:80:d1:87:9f:a5:ce:ff:9d:db:a4: 29:90:02:05:80:7f:46:48:ad:7b:97:43:4b:0e:a3:d5:ec:05: 27:20:98:27:2e:49:93:36:f8:9b:25:0e:ff:79:a3:ee:f9:1b: 17:73:c8:79:d9:83:25:6a:20:c1:d3:6e:69:b2:7e:99:83:53: 51:dc:a4:ea:83:14:a4:d2:2a:94:db:78:90:eb:50:73:41:59: 32:7e:7c:9a:2a:5f:5f:e1:0e:01:fa:f1:aa:c2:0a:65:8a:26: 4d:b8:49:47:52:89:be:00:a3:c2:98:aa:63:4a:fc:91:a5:78: c4:5c:e9:50:45:31:31:9c:5f:f8:63:8a:02:92:54:5c:f2:15: a3:24:5b:0f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2MTJBNTg1Q0ZCOTY1 OTk3ODgwOTVEQUQzREEzQUJENTI0M0U4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsQfhfB4IFgiWHJ1G52p8kh5DLvXimwkEp3ScdtLOgf7kuaDkw mvDqA/pHkFdUip/yeroeRjRdGtPOHT6MeRKgKynwMJgB9plAeh20fUr4lLElxFQd tBi4sMGqK+Fue9liKGJ/oDLOipyruymR5ZmGmKT9STH+MZWZLPAO0aw0/254uy1w dlWh3NVp86HkB5APt0pwrAp3krc2rJL1STcEfRdW3KGPljA17bv5nBGSmhKqrXk3 avGNO0NkUuG1AktCWSx43SGNiXP1cfUsHBxcf3qVIOrQyhHrT7bBFXsmopeA+vay FL+DNPRlzjrYmefjjqXzgBYEFbdhs3nQ/uBlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFhKlhc+5ZZl4gJXa09o6vVJD6FAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZoS2xoYy01WlpsNGdKWGEw OW82dlZKRDZGQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QAAwDQYJKoZIhvcNAQELBQADggEBAAKyNnONmeoyPr4yFcgRaGfaR8m591UrMrdl ETtt3QHGrYpaKgusBE5IHRYmOYiM+/kWLdn2v/4P/PcMfnAipBadHHcIzPkhzub5 w3pEX57YRLtsZncROaMaK1a1H809kZqD9Bx7CdBg0KXVChu3aWbpHm90gNGHn6XO /53bpCmQAgWAf0ZIrXuXQ0sOo9XsBScgmCcuSZM2+JslDv95o+75GxdzyHnZgyVq IMHTbmmyfpmDU1HcpOqDFKTSKpTbeJDrUHNBWTJ+fJoqX1/hDgH68arCCmWKJk24 SUdSib4Ao8KYqmNK/JGleMRc6VBFMTGcX/hjigKSVFzyFaMkWw8= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org