$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa File: N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa (raw, json) Hash identifier: BatJKvq6cJ/c8HWUVNx8JRbUW1NDlVLokEJX4+GUZBo= Subject key identifier: 37:D0:FF:E4:92:A6:BB:91:E5:E7:2C:A3:ED:17:2B:46:98:D8:7F:3C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E86 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa Signing time: Fri 01 Sep 2023 10:16:10 +0000 ROA not before: Fri 01 Sep 2023 10:16:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 119.77.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7814 (0x1e86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=37D0FFE492A6BB91E5E72CA3ED172B4698D87F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:ce:19:4e:ce:00:70:86:45:26:3d:e1:9b: c8:fb:67:59:4c:4e:8a:7f:a3:08:64:ed:31:b9:d2: 66:b9:bd:2e:1b:29:3b:b8:93:b8:8e:e0:11:f7:e5: d2:fa:57:0d:0a:76:ce:f1:55:01:01:3d:f6:86:1e: 6c:55:2b:b7:41:98:5c:5c:68:5b:09:07:f4:47:97: a4:92:3d:4b:33:db:b8:7e:9f:f0:b5:ee:15:73:db: e9:16:9e:c8:32:f6:54:75:eb:07:0b:6a:ed:e5:dc: 72:b1:49:58:e1:e0:fa:fe:d6:06:58:0e:25:3b:42: 3d:b0:68:9a:73:ad:90:86:a5:96:0e:c9:ac:c2:c6: 21:cb:16:90:d0:2a:b3:78:07:84:d3:bd:57:e3:63: 40:ee:33:6e:cf:03:5d:2e:6f:73:21:db:39:b4:c2: 5f:11:bc:41:0e:cc:aa:a5:98:a2:f1:60:7b:0f:8a: b1:3d:08:6d:ce:a4:ae:dc:76:f9:cd:82:ca:06:6f: 59:27:20:de:56:ab:ce:5c:87:9b:49:a4:96:2b:67: b8:f1:ca:05:46:90:37:a6:4c:eb:ab:e5:02:1e:e7: 3f:d1:2d:66:5c:07:f0:4b:36:95:aa:15:18:35:47: 4f:b3:8d:ba:93:db:6c:73:9e:34:79:c2:62:a6:85: e8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:FF:E4:92:A6:BB:91:E5:E7:2C:A3:ED:17:2B:46:98:D8:7F:3C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.128.0/22 Signature Algorithm: sha256WithRSAEncryption 09:28:52:17:2a:98:e2:36:57:74:c3:48:34:b2:aa:72:8f:8e: a4:af:c9:30:d7:14:73:09:5b:97:ad:4d:ea:fa:bf:18:b7:17: 91:29:b6:61:f4:10:6c:ff:ba:1e:61:e6:72:98:3d:ac:75:df: 12:96:39:ad:c4:b7:dd:b6:25:4c:8f:77:05:8a:d4:37:6d:ea: d3:79:ad:88:85:82:80:94:c2:be:dd:26:d7:71:ba:db:d6:ba: c6:52:8b:2a:d6:fc:6b:df:e9:fd:b4:83:dc:96:27:8e:be:b9: 26:ef:75:ee:70:f7:af:b4:a5:e7:55:cc:86:fb:03:7e:4c:9d: 56:23:9b:96:99:b7:7d:9c:ea:13:80:68:81:08:64:48:5d:36: 70:1a:07:a5:5a:a4:34:c0:fa:4b:d0:22:c8:c3:58:3f:91:95: 85:0c:c8:c9:1e:b9:bf:0a:0c:4b:69:a0:32:ce:9f:9d:83:36: 0e:df:66:58:3d:6b:ef:b6:3e:cb:56:d1:41:f7:64:02:0f:df: 29:bc:60:75:5f:d7:bc:7c:76:1f:d9:d4:09:74:ab:a7:8a:d5: 8d:d1:67:0c:95:a0:a9:ba:20:9f:9d:e7:39:a7:65:b7:bb:59: eb:07:0a:8c:b0:dc:3c:b5:a4:50:d9:c7:5b:b7:0b:5a:1f:8c: d7:d1:d6:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM3RDBGRkU0OTJBNkJC OTFFNUU3MkNBM0VEMTcyQjQ2OThEODdGM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGKM4ZTs4AcIZFJj3hm8j7Z1lMTop/owhk7TG50ma5vS4bKTu4 k7iO4BH35dL6Vw0Kds7xVQEBPfaGHmxVK7dBmFxcaFsJB/RHl6SSPUsz27h+n/C1 7hVz2+kWnsgy9lR16wcLau3l3HKxSVjh4Pr+1gZYDiU7Qj2waJpzrZCGpZYOyazC xiHLFpDQKrN4B4TTvVfjY0DuM27PA10ub3Mh2zm0wl8RvEEOzKqlmKLxYHsPirE9 CG3OpK7cdvnNgsoGb1knIN5Wq85ch5tJpJYrZ7jxygVGkDemTOur5QIe5z/RLWZc B/BLNpWqFRg1R0+zjbqT22xznjR5wmKmhejvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN9D/5JKmu5Hl5yyj7RcrRpjYfzwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL045RF81SkttdTVIbDV5eWo3 UmNyUnBqWWZ6dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3 TYAwDQYJKoZIhvcNAQELBQADggEBAAkoUhcqmOI2V3TDSDSyqnKPjqSvyTDXFHMJ W5etTer6vxi3F5EptmH0EGz/uh5h5nKYPax13xKWOa3Et922JUyPdwWK1Ddt6tN5 rYiFgoCUwr7dJtdxutvWusZSiyrW/Gvf6f20g9yWJ46+uSbvde5w96+0pedVzIb7 A35MnVYjm5aZt32c6hOAaIEIZEhdNnAaB6VapDTA+kvQIsjDWD+RlYUMyMkeub8K DEtpoDLOn52DNg7fZlg9a++2PstW0UH3ZAIP3ym8YHVf17x8dh/Z1Al0q6eK1Y3R ZwyVoKm6IJ+d5zmnZbe7WesHCoyw3Dy1pFDZx1u3C1ofjNfR1iU= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:49 2024 by rpki-client on console-fra.rpki-client.org