$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RT09jxUdHURVSF0cuRf4U4hBlZM.roa File: RT09jxUdHURVSF0cuRf4U4hBlZM.roa (raw, json) Hash identifier: kq4CcRrfWm1nwHcOOy0Urp88fGMKX5hZa7YILLOh7d0= Subject key identifier: 45:3D:3D:8F:15:1D:1D:44:55:48:5D:1C:B9:17:F8:53:88:41:95:93 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DB6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RT09jxUdHURVSF0cuRf4U4hBlZM.roa Signing time: Fri 01 Sep 2023 10:15:11 +0000 ROA not before: Fri 01 Sep 2023 10:15:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.58.112.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7606 (0x1db6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=453D3D8F151D1D4455485D1CB917F85388419593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:da:a9:f3:01:7d:06:9b:11:cc:98:8f:09: 24:e1:c4:cf:c8:26:3b:75:40:39:e8:2d:20:e0:cc: c1:56:c7:7d:89:11:7f:84:ec:5f:39:2d:c9:fa:43: e2:30:6e:d5:4c:56:95:fd:f4:d8:3a:cb:ca:7c:39: 3f:36:4f:80:51:c5:2c:26:6e:b9:e4:59:8a:84:87: 3b:15:59:f3:09:2a:a8:7b:40:67:5e:db:fc:22:3b: 2c:05:df:7f:a5:03:e8:7b:18:33:44:d0:f6:c6:1e: 7d:ad:61:a4:3c:ac:c2:1c:60:5e:11:ef:d2:61:77: d6:ce:2d:3b:f0:28:90:30:14:1c:30:90:94:54:93: 82:f6:f0:c6:a9:e5:71:11:25:e3:f7:1d:28:5a:fe: c9:1f:3c:a0:20:31:f3:4c:a9:51:7b:0f:6c:7a:c5: 56:64:53:5e:49:5f:16:1c:a8:d2:a2:a6:fe:54:de: 3f:4e:5f:77:d3:20:78:6d:b9:96:99:36:61:7c:d8: 49:01:c6:10:9b:c8:91:38:f5:8b:f7:46:a8:e5:4b: 3c:ae:33:b2:35:24:f0:18:37:e6:1c:89:f6:e9:c3: 28:f6:b5:fd:95:26:2c:14:7b:54:82:30:74:c6:7d: 65:60:83:26:6c:d0:df:94:40:fc:44:cd:d8:8d:f5: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3D:3D:8F:15:1D:1D:44:55:48:5D:1C:B9:17:F8:53:88:41:95:93 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RT09jxUdHURVSF0cuRf4U4hBlZM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.112.0/20 Signature Algorithm: sha256WithRSAEncryption a0:41:0b:c4:69:4c:c9:4a:30:c8:34:09:f9:2d:e1:50:16:8e: 71:2d:16:40:98:83:49:a7:fe:86:dd:96:33:cd:cd:e2:4d:b0: 59:66:92:c5:d6:b7:1e:10:67:cd:f6:74:77:69:c8:9c:c7:07: 3f:2e:ee:6b:d8:ba:14:cd:21:c3:75:a4:03:f2:4f:f0:7e:38: 18:94:fb:c2:ed:36:d9:d1:b5:42:97:ee:30:4d:2f:86:da:00: 1f:a0:17:28:86:37:ea:b7:54:18:fa:49:6a:f6:f3:18:6c:5e: e9:51:b4:02:1f:04:af:58:26:b8:a1:fe:e1:27:b5:09:22:8c: d1:c0:46:93:c6:51:86:85:11:c1:10:bd:49:4c:d9:a6:e4:9a: 61:04:03:78:45:6a:ea:51:fe:c7:5b:52:fb:81:30:3e:21:e8: 1e:90:d1:1c:4c:48:79:08:c1:6a:c5:5e:39:b2:a4:ca:51:25: 73:0b:58:44:17:d5:1b:a3:e1:49:bd:a7:62:f4:58:7e:40:f9: 56:94:1d:aa:35:57:db:99:5b:d2:ef:41:e9:ca:68:98:2b:77: 23:fb:ae:6c:8d:72:76:8d:7d:f4:c9:60:1e:44:21:df:f3:a7: b9:ab:d8:83:18:0f:a1:9e:73:90:ca:e9:b5:18:48:4a:b8:bb: e5:dc:55:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ1M0QzRDhGMTUxRDFE NDQ1NTQ4NUQxQ0I5MTdGODUzODg0MTk1OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6NNqp8wF9BpsRzJiPCSThxM/IJjt1QDnoLSDgzMFWx32JEX+E 7F85Lcn6Q+IwbtVMVpX99Ng6y8p8OT82T4BRxSwmbrnkWYqEhzsVWfMJKqh7QGde 2/wiOywF33+lA+h7GDNE0PbGHn2tYaQ8rMIcYF4R79Jhd9bOLTvwKJAwFBwwkJRU k4L28Map5XERJeP3HSha/skfPKAgMfNMqVF7D2x6xVZkU15JXxYcqNKipv5U3j9O X3fTIHhtuZaZNmF82EkBxhCbyJE49Yv3RqjlSzyuM7I1JPAYN+Ycifbpwyj2tf2V JiwUe1SCMHTGfWVggyZs0N+UQPxEzdiN9bKhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURT09jxUdHURVSF0cuRf4U4hBlZMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1JUMDlqeFVkSFVSVlNGMGN1 UmY0VTRoQmxaTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OnAwDQYJKoZIhvcNAQELBQADggEBAKBBC8RpTMlKMMg0Cfkt4VAWjnEtFkCYg0mn /obdljPNzeJNsFlmksXWtx4QZ832dHdpyJzHBz8u7mvYuhTNIcN1pAPyT/B+OBiU +8LtNtnRtUKX7jBNL4baAB+gFyiGN+q3VBj6SWr28xhsXulRtAIfBK9YJrih/uEn tQkijNHARpPGUYaFEcEQvUlM2abkmmEEA3hFaupR/sdbUvuBMD4h6B6Q0RxMSHkI wWrFXjmypMpRJXMLWEQX1Ruj4Um9p2L0WH5A+VaUHao1V9uZW9LvQenKaJgrdyP7 rmyNcnaNffTJYB5EId/zp7mr2IMYD6Gec5DK6bUYSEq4u+XcVYg= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:49 2024 by rpki-client on console-fra.rpki-client.org