$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9hXBKWJFzWmnadlZ7MC32hmjD8.roa File: J9hXBKWJFzWmnadlZ7MC32hmjD8.roa (raw, json) Hash identifier: kGIFQtvZwJRgHqth9FxQ5wRzvEYY62cCM/UOSFxT6XA= Subject key identifier: 27:D8:57:04:A5:89:17:35:A6:9D:A7:65:67:B3:02:DF:68:66:8C:3F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D90 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9hXBKWJFzWmnadlZ7MC32hmjD8.roa Signing time: Fri 01 Sep 2023 10:15:00 +0000 ROA not before: Fri 01 Sep 2023 10:15:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 211.76.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7568 (0x1d90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=27D85704A5891735A69DA76567B302DF68668C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:7a:c6:1d:2a:0b:b3:f4:3d:b3:5b:8b:b4: c3:7c:11:1a:48:89:aa:8f:9c:07:78:c0:89:ba:f5: b8:2b:e7:e3:37:81:9e:bf:aa:5d:40:86:42:c6:40: 4c:ee:66:63:81:a3:50:e2:92:8d:7a:d7:be:84:db: 64:22:74:2f:e0:86:ba:f1:55:69:55:e1:88:80:f2: 45:70:aa:83:90:0f:aa:6c:3b:5c:15:81:21:25:76: 3c:a8:90:44:1c:7b:7f:67:6c:e5:92:30:7c:f1:30: 29:f6:40:af:64:64:b6:e8:84:b3:86:ca:36:b3:8a: a5:58:dd:29:08:8f:19:c3:95:62:98:d7:78:b6:4e: f8:1d:17:f5:0f:0c:23:f3:2b:a3:f3:0c:48:5f:e1: f7:07:69:c4:ab:8e:37:e7:2c:b8:a5:1f:90:e2:3c: 72:c9:45:65:e7:e0:70:ec:af:d3:35:22:14:51:0f: ea:d3:1c:13:27:30:9c:5e:7c:f2:aa:3e:14:60:9c: c6:14:8b:95:b1:62:88:db:3b:e0:9e:31:43:b0:c7: b1:5b:c3:7f:d5:df:72:c2:03:24:2f:66:b4:0d:cf: 10:37:d5:f1:23:e4:e9:64:68:d5:93:c6:5e:41:23: 0d:8e:87:9c:2e:3d:26:1e:51:9b:07:b7:49:cf:69: 78:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:57:04:A5:89:17:35:A6:9D:A7:65:67:B3:02:DF:68:66:8C:3F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9hXBKWJFzWmnadlZ7MC32hmjD8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.63.0/24 Signature Algorithm: sha256WithRSAEncryption 09:22:45:ec:81:bc:79:e8:16:c8:15:71:86:c9:fd:90:b2:df: e3:07:c6:fb:20:ae:f3:b6:5b:4d:ea:6e:e6:04:16:bb:3c:f5: 82:84:c9:22:00:48:0b:21:27:82:8f:4b:e9:fb:79:af:8e:ea: be:58:a7:6e:94:1d:26:80:8e:3a:74:59:2b:d7:4e:0c:ef:8e: 4b:54:b1:84:bd:47:56:8e:45:13:ce:30:9c:89:55:f3:a4:50: be:fb:2d:00:de:3f:2e:fe:b2:77:c4:d7:88:82:b1:9e:b9:6b: 59:1b:56:ac:b9:e1:e9:3d:73:d9:1f:38:da:ef:03:aa:a4:a2: 93:63:69:41:c8:5f:29:15:84:ec:90:53:2d:d1:ea:c7:43:e4: 2c:bc:79:74:e9:4e:37:0a:df:d5:f1:e4:ee:eb:b6:ad:29:79: e8:e3:11:6f:d8:95:52:53:68:ed:0e:d8:5b:34:19:81:c9:fb: f4:28:7d:3e:a7:60:31:ed:e5:f2:47:e0:00:b2:7d:ce:e7:e4: 79:61:d3:0f:d3:0c:09:73:93:8e:d5:c3:9c:e0:28:95:17:db: fd:0c:27:0f:03:fb:43:be:b3:e9:d7:73:c0:28:39:4d:34:f7: 9d:34:5d:5f:62:4d:aa:21:7a:20:22:b7:2a:96:6b:04:8b:9d: 7c:24:5f:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI3RDg1NzA0QTU4OTE3 MzVBNjlEQTc2NTY3QjMwMkRGNjg2NjhDM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi3XrGHSoLs/Q9s1uLtMN8ERpIiaqPnAd4wIm69bgr5+M3gZ6/ ql1AhkLGQEzuZmOBo1Diko16176E22QidC/ghrrxVWlV4YiA8kVwqoOQD6psO1wV gSEldjyokEQce39nbOWSMHzxMCn2QK9kZLbohLOGyjaziqVY3SkIjxnDlWKY13i2 TvgdF/UPDCPzK6PzDEhf4fcHacSrjjfnLLilH5DiPHLJRWXn4HDsr9M1IhRRD+rT HBMnMJxefPKqPhRgnMYUi5WxYojbO+CeMUOwx7Fbw3/V33LCAyQvZrQNzxA31fEj 5OlkaNWTxl5BIw2Oh5wuPSYeUZsHt0nPaXh5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJ9hXBKWJFzWmnadlZ7MC32hmjD8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0o5aFhCS1dKRnpXbW5hZGxa N01DMzJobWpEOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TD8wDQYJKoZIhvcNAQELBQADggEBAAkiReyBvHnoFsgVcYbJ/ZCy3+MHxvsgrvO2 W03qbuYEFrs89YKEySIASAshJ4KPS+n7ea+O6r5Yp26UHSaAjjp0WSvXTgzvjktU sYS9R1aORRPOMJyJVfOkUL77LQDePy7+snfE14iCsZ65a1kbVqy54ek9c9kfONrv A6qkopNjaUHIXykVhOyQUy3R6sdD5Cy8eXTpTjcK39Xx5O7rtq0peejjEW/YlVJT aO0O2Fs0GYHJ+/QofT6nYDHt5fJH4ACyfc7n5Hlh0w/TDAlzk47Vw5zgKJUX2/0M Jw8D+0O+s+nXc8AoOU009500XV9iTaoheiAityqWawSLnXwkX7w= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org