$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I9oTwTQ0Zzk7o1NzVO8WGf1nA1k.roa File: I9oTwTQ0Zzk7o1NzVO8WGf1nA1k.roa (raw, json) Hash identifier: 3KVhZfxQhMYxRdc6hfERbcEH4YJvzgaO6JjW6oH8GNs= Subject key identifier: 23:DA:13:C1:34:34:67:39:3B:A3:53:73:54:EF:16:19:FD:67:03:59 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E5F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I9oTwTQ0Zzk7o1NzVO8WGf1nA1k.roa Signing time: Fri 01 Sep 2023 10:15:58 +0000 ROA not before: Fri 01 Sep 2023 10:15:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 211.76.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7775 (0x1e5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=23DA13C1343467393BA3537354EF1619FD670359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:03:df:2d:ca:ad:44:78:e4:c1:ba:be:54: 32:7b:e2:b6:d8:8d:7b:04:14:94:e5:7a:a8:44:65: f1:ed:59:74:80:8a:93:63:a9:b5:92:e5:4a:c3:b9: ff:63:c7:33:ed:1f:01:e1:bb:ea:0b:55:cf:45:5c: 7f:52:3d:5f:72:24:2a:40:cf:11:3e:fe:c8:d8:cb: 21:f2:84:fc:0d:70:2c:88:ef:f2:25:82:c1:7a:f4: 0d:80:ce:d7:04:82:2a:d2:4e:1c:6e:aa:c5:04:40: 09:1d:cc:60:62:7d:51:db:44:de:81:d9:7c:7a:3a: 4f:9a:aa:c4:cf:c7:2a:9d:db:d6:90:f9:3d:05:11: cb:3b:00:aa:64:eb:81:fe:4a:bf:79:61:90:aa:c3: 09:01:6e:82:4d:ed:f7:ca:9c:2f:32:59:1d:9d:df: f2:fc:80:96:5e:52:0e:ca:9f:45:8e:11:8a:03:e8: c2:5a:20:94:95:00:04:26:40:40:1a:cd:be:43:ce: bf:14:f4:92:1d:df:29:42:09:11:e7:fe:ee:63:27: 23:f5:1a:e9:9b:9f:1b:f1:9a:5e:dc:b7:dd:fb:cc: 7c:c3:26:7e:07:0d:e8:6c:2b:63:db:51:11:6d:75: 72:68:c9:b8:3b:a3:eb:aa:5b:00:29:57:ad:8a:5d: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:13:C1:34:34:67:39:3B:A3:53:73:54:EF:16:19:FD:67:03:59 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I9oTwTQ0Zzk7o1NzVO8WGf1nA1k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.46.0/23 Signature Algorithm: sha256WithRSAEncryption 69:c7:56:96:5e:b9:b7:77:33:03:24:61:e3:e9:c9:d7:be:71: ce:8b:14:11:69:b2:b2:93:6d:18:89:73:16:af:b0:a5:0d:f3: ba:f1:88:63:8d:38:ac:11:fe:80:5a:69:47:10:f6:9b:f4:64: 8a:3f:1a:7a:df:3a:58:c2:45:a3:51:f8:45:46:13:d9:9a:83: 15:9c:31:1f:ba:f0:e3:62:e9:aa:aa:a7:40:59:14:52:ca:3c: 6e:be:d6:61:4f:a4:d9:8f:a7:e6:e1:4a:54:73:f3:59:65:3d: 50:54:ae:38:fe:f9:a4:6a:e9:5e:f6:19:83:27:9c:0f:ba:08: e5:29:f8:1e:35:e2:62:79:63:35:1f:41:74:43:0b:ed:4c:04: 44:d0:a0:7d:7e:f1:01:56:4d:4f:dd:6f:3f:0f:80:17:43:f9: 94:f3:9d:c6:96:6d:53:a7:cd:aa:98:6e:17:f5:94:c6:69:02: 43:f5:bb:4b:73:2d:4d:bb:d0:f9:c0:79:a0:ab:bb:7a:74:db: 7e:0c:14:b3:f0:f9:02:42:0b:0a:e9:b5:d0:40:42:43:52:3d: 66:26:be:d7:e4:9e:c1:76:b9:f0:90:3d:b5:4a:d8:9f:48:fe: bb:4e:a1:07:0f:c6:6e:b7:40:71:2d:9d:6d:24:92:6b:4e:71: 62:6c:fd:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIzREExM0MxMzQzNDY3 MzkzQkEzNTM3MzU0RUYxNjE5RkQ2NzAzNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFmgPfLcqtRHjkwbq+VDJ74rbYjXsEFJTleqhEZfHtWXSAipNj qbWS5UrDuf9jxzPtHwHhu+oLVc9FXH9SPV9yJCpAzxE+/sjYyyHyhPwNcCyI7/Il gsF69A2AztcEgirSThxuqsUEQAkdzGBifVHbRN6B2Xx6Ok+aqsTPxyqd29aQ+T0F Ecs7AKpk64H+Sr95YZCqwwkBboJN7ffKnC8yWR2d3/L8gJZeUg7Kn0WOEYoD6MJa IJSVAAQmQEAazb5Dzr8U9JId3ylCCRHn/u5jJyP1Gumbnxvxml7ct937zHzDJn4H DehsK2PbURFtdXJoybg7o+uqWwApV62KXY/BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUI9oTwTQ0Zzk7o1NzVO8WGf1nA1kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0k5b1R3VFEwWnprN28xTnpW TzhXR2YxbkExay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TC4wDQYJKoZIhvcNAQELBQADggEBAGnHVpZeubd3MwMkYePpyde+cc6LFBFpsrKT bRiJcxavsKUN87rxiGONOKwR/oBaaUcQ9pv0ZIo/GnrfOljCRaNR+EVGE9magxWc MR+68ONi6aqqp0BZFFLKPG6+1mFPpNmPp+bhSlRz81llPVBUrjj++aRq6V72GYMn nA+6COUp+B414mJ5YzUfQXRDC+1MBETQoH1+8QFWTU/dbz8PgBdD+ZTzncaWbVOn zaqYbhf1lMZpAkP1u0tzLU270PnAeaCru3p0234MFLPw+QJCCwrptdBAQkNSPWYm vtfknsF2ufCQPbVK2J9I/rtOoQcPxm63QHEtnW0kkmtOcWJs/ZA= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org