$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa File: Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa (raw, json) Hash identifier: QypmnrpZEC1vOS4hqGj90gwM8k8zi5BjIh7tEiHkwYY= Subject key identifier: 16:2D:E7:1B:9D:15:01:48:C5:1C:3B:06:8C:E2:1F:67:13:3C:06:61 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EBA Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa Signing time: Fri 01 Sep 2023 10:16:23 +0000 ROA not before: Fri 01 Sep 2023 10:16:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 61.58.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7866 (0x1eba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=162DE71B9D150148C51C3B068CE21F67133C0661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:f8:8f:9d:9b:56:5c:ec:4d:3b:d5:e1:3c: 8b:6e:ec:6a:27:a7:56:06:fb:2a:de:39:5f:57:bf: 70:c2:42:92:ca:dc:55:98:49:45:d6:2c:46:6c:2f: 7d:92:24:26:58:73:8f:b2:a5:a3:e8:a7:71:b4:d9: b0:4f:05:f5:c5:04:ac:40:ac:bb:4b:5c:11:2a:a7: 9b:9d:e8:46:30:3a:55:07:0f:5c:49:56:a3:2a:75: 9c:6f:44:f8:be:a3:a9:3a:51:71:01:7d:f9:7e:bb: 30:85:cb:2e:c6:06:c4:73:74:4e:7c:a6:a7:d1:27: 88:03:91:e7:b8:de:47:91:da:50:28:69:ba:ce:bd: 8c:e9:e4:28:13:a8:26:03:19:b4:66:9d:29:74:70: a2:4b:3a:c9:a0:bc:a4:7e:dd:10:40:90:9f:6d:f1: cd:cc:c1:ec:2f:cb:68:82:11:96:57:29:4c:63:11: 01:bc:73:f2:92:c6:9a:03:23:86:59:80:98:a4:38: ad:1e:41:7a:76:00:54:e3:c9:bd:53:56:8c:6e:5e: 3c:3b:9e:92:2f:f7:dd:1d:b4:a6:da:78:52:9f:d1: cb:dd:79:36:95:f7:e1:f6:fc:c2:65:e4:06:5d:da: d3:93:ec:77:2b:83:06:b4:fe:5a:98:f1:7f:ef:7c: d5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2D:E7:1B:9D:15:01:48:C5:1C:3B:06:8C:E2:1F:67:13:3C:06:61 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.112.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:7f:88:40:b5:8e:70:fa:54:4f:0f:09:ae:32:1b:ad:9f:d8: 67:9c:0b:f5:9c:ca:7d:e9:6e:3f:cb:ee:c1:05:c3:1e:b6:53: 80:f6:b9:50:87:1b:12:c5:18:0d:33:09:2e:40:d0:c8:84:f1: 98:53:b6:8e:94:5c:07:66:52:1c:97:02:5e:1e:8b:a7:54:af: 2a:75:b0:0a:a3:33:d5:4f:bf:38:d3:b6:91:08:ec:a2:0a:59: 35:99:63:cc:4b:c3:a6:60:18:eb:5a:0d:8b:16:cd:44:d0:77: b3:d6:b1:2f:c6:f5:b8:41:85:88:df:04:63:3b:cd:8a:30:a8: 93:77:50:97:3c:3a:8b:55:40:8a:cc:57:36:a3:72:30:c7:c6: 6e:e0:aa:e5:cf:e9:6a:f1:c7:bc:57:8a:7e:a4:2d:ed:dc:b9: 7b:7c:7f:5d:1a:40:d1:23:92:72:56:27:4e:7a:ee:2a:18:d0: 96:fd:e4:1d:3e:36:57:13:9f:c4:fd:91:d5:3d:ea:2f:49:3b: aa:d7:27:42:6f:2e:ec:54:14:d2:dd:8b:99:61:c9:c2:f9:bb: 83:da:9e:3e:3f:36:d0:0d:67:1d:36:d0:11:be:57:1b:5f:ca: 6f:f6:a5:81:a7:98:11:93:82:65:96:39:de:d0:04:cb:7b:e5: 1d:33:5b:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2MkRFNzFCOUQxNTAx NDhDNTFDM0IwNjhDRTIxRjY3MTMzQzA2NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz4fiPnZtWXOxNO9XhPItu7Gonp1YG+yreOV9Xv3DCQpLK3FWY SUXWLEZsL32SJCZYc4+ypaPop3G02bBPBfXFBKxArLtLXBEqp5ud6EYwOlUHD1xJ VqMqdZxvRPi+o6k6UXEBffl+uzCFyy7GBsRzdE58pqfRJ4gDkee43keR2lAoabrO vYzp5CgTqCYDGbRmnSl0cKJLOsmgvKR+3RBAkJ9t8c3Mwewvy2iCEZZXKUxjEQG8 c/KSxpoDI4ZZgJikOK0eQXp2AFTjyb1TVoxuXjw7npIv990dtKbaeFKf0cvdeTaV 9+H2/MJl5AZd2tOT7Hcrgwa0/lqY8X/vfNVTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFi3nG50VAUjFHDsGjOIfZxM8BmEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZpM25HNTBWQVVqRkhEc0dq T0lmWnhNOEJtRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 OnAwDQYJKoZIhvcNAQELBQADggEBAGt/iEC1jnD6VE8PCa4yG62f2GecC/Wcyn3p bj/L7sEFwx62U4D2uVCHGxLFGA0zCS5A0MiE8ZhTto6UXAdmUhyXAl4ei6dUryp1 sAqjM9VPvzjTtpEI7KIKWTWZY8xLw6ZgGOtaDYsWzUTQd7PWsS/G9bhBhYjfBGM7 zYowqJN3UJc8OotVQIrMVzajcjDHxm7gquXP6Wrxx7xXin6kLe3cuXt8f10aQNEj knJWJ0567ioY0Jb95B0+NlcTn8T9kdU96i9JO6rXJ0JvLuxUFNLdi5lhycL5u4Pa nj4/NtANZx020BG+Vxtfym/2pYGnmBGTgmWWOd7QBMt75R0zW5Y= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org