$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rzn_BuemBZhckNJNMlOqWwtJtiM.roa File: Rzn_BuemBZhckNJNMlOqWwtJtiM.roa (raw, json) Hash identifier: gHOd/WYfVNS0yZKXdwNk0QvukeUjr6WVUWAEra4Z34c= Subject key identifier: 47:39:FF:06:E7:A6:05:98:5C:90:D2:4D:32:53:AA:5B:0B:49:B6:23 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DCF Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rzn_BuemBZhckNJNMlOqWwtJtiM.roa Signing time: Fri 01 Sep 2023 10:15:19 +0000 ROA not before: Fri 01 Sep 2023 10:15:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 122.100.72.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7631 (0x1dcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4739FF06E7A605985C90D24D3253AA5B0B49B623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:77:97:61:bd:a6:9d:80:ed:cf:7b:ca:fc: 8e:0f:a0:97:8e:91:4c:3f:aa:80:b7:c3:06:6e:b8: d1:ce:83:73:b7:50:a1:3d:42:26:5b:9a:ee:35:43: 9f:68:bf:f9:ff:ed:b2:f5:aa:81:4a:24:3b:8d:79: ae:ac:a9:cf:c4:cf:31:5c:a7:96:08:ad:1d:d9:c6: 47:62:23:82:9c:e6:be:ed:0e:da:de:b3:5b:06:03: 42:ab:53:5d:9c:7a:13:7a:f2:20:88:2c:de:59:af: 39:14:08:46:2e:fd:04:56:2c:f1:22:34:48:8d:15: e3:c1:0e:8d:3e:34:63:d3:40:82:73:43:1c:f3:f6: 67:58:59:f5:d1:11:d0:89:a4:62:ba:b7:c6:b6:71: 3d:82:26:96:90:44:9d:76:5b:8b:0b:1a:fa:04:f8: 49:3b:14:fc:a5:9b:6c:4d:4f:d7:94:fd:6e:5d:f7: 08:a1:14:53:d7:f3:cc:6b:b0:3b:ac:3c:9c:44:36: 04:a2:30:bc:5f:c0:ca:10:86:4a:55:2d:7a:20:5e: 63:75:5c:85:ea:d1:4a:88:90:18:4f:d8:a8:1a:f4: 82:69:94:31:92:b0:04:bc:c6:72:1c:f2:9b:04:36: 3b:fb:d3:e7:01:b9:a2:62:7d:98:cc:ce:8b:ae:ac: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:39:FF:06:E7:A6:05:98:5C:90:D2:4D:32:53:AA:5B:0B:49:B6:23 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rzn_BuemBZhckNJNMlOqWwtJtiM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.72.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:60:1a:27:a7:08:4f:7b:2f:f3:03:42:12:c2:80:31:4f:8c: b4:10:c4:15:33:68:9c:64:de:f5:76:ee:95:74:8f:63:f7:8f: 12:f2:75:d5:db:da:af:09:b2:ca:42:62:ab:0b:74:e4:98:62: 89:a0:ee:d5:ac:52:be:7e:67:f0:0e:b5:d0:05:70:ab:26:b4: 66:a2:6b:51:16:56:98:49:7a:93:74:eb:16:b7:b9:3e:d3:a0: f7:2b:92:3f:50:ef:45:64:3a:4d:0a:cd:dc:b4:ec:25:d6:c0: ef:4f:82:f3:00:b5:2e:bf:0c:a1:e6:05:ec:ba:03:8f:01:3b: dc:f3:36:28:a9:13:31:cc:5d:d9:67:e0:3d:4e:ed:b6:c6:c4: 4e:91:95:0c:5d:1b:4d:bb:74:a7:cb:ad:1f:5a:18:4b:c2:90: 33:c4:6a:4a:02:6f:b8:45:77:7b:0e:27:d2:a8:ac:b2:b1:b8: b3:0a:0c:06:a7:3b:84:af:96:3c:57:92:d9:79:22:58:a0:f0: aa:fd:e6:e4:45:b6:2a:43:a6:aa:71:e9:74:a6:05:19:e4:ab: 30:39:df:bb:bb:4b:ff:2b:17:b8:f2:ff:b0:2e:d6:01:5c:34: 97:4c:a3:e7:49:d3:3e:c4:3a:78:c0:40:8e:e7:db:c5:60:8e: c1:f3:c1:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ3MzlGRjA2RTdBNjA1 OTg1QzkwRDI0RDMyNTNBQTVCMEI0OUI2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCka3eXYb2mnYDtz3vK/I4PoJeOkUw/qoC3wwZuuNHOg3O3UKE9 QiZbmu41Q59ov/n/7bL1qoFKJDuNea6sqc/EzzFcp5YIrR3ZxkdiI4Kc5r7tDtre s1sGA0KrU12cehN68iCILN5ZrzkUCEYu/QRWLPEiNEiNFePBDo0+NGPTQIJzQxzz 9mdYWfXREdCJpGK6t8a2cT2CJpaQRJ12W4sLGvoE+Ek7FPylm2xNT9eU/W5d9wih FFPX88xrsDusPJxENgSiMLxfwMoQhkpVLXogXmN1XIXq0UqIkBhP2Kga9IJplDGS sAS8xnIc8psENjv70+cBuaJifZjMzouurA8BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURzn/BuemBZhckNJNMlOqWwtJtiMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1J6bl9CdWVtQlpoY2tOSk5N bE9xV3d0SnRpTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 ZEgwDQYJKoZIhvcNAQELBQADggEBAA1gGienCE97L/MDQhLCgDFPjLQQxBUzaJxk 3vV27pV0j2P3jxLyddXb2q8JsspCYqsLdOSYYomg7tWsUr5+Z/AOtdAFcKsmtGai a1EWVphJepN06xa3uT7ToPcrkj9Q70VkOk0Kzdy07CXWwO9PgvMAtS6/DKHmBey6 A48BO9zzNiipEzHMXdln4D1O7bbGxE6RlQxdG027dKfLrR9aGEvCkDPEakoCb7hF d3sOJ9KorLKxuLMKDAanO4SvljxXktl5Ilig8Kr95uRFtipDpqpx6XSmBRnkqzA5 37u7S/8rF7jy/7Au1gFcNJdMo+dJ0z7EOnjAQI7n28VgjsHzwTM= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org