$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa File: UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa (raw, json) Hash identifier: P/iXaYRHJK46zKciKzPUguRAYIMO98fW2AUaa4i3r9o= Subject key identifier: 51:D2:20:52:32:68:DD:E9:02:5E:46:27:4B:7B:C9:D4:B0:06:22:3D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E7C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa Signing time: Fri 01 Sep 2023 10:16:07 +0000 ROA not before: Fri 01 Sep 2023 10:16:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 119.77.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7804 (0x1e7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=51D220523268DDE9025E46274B7BC9D4B006223D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:39:d5:24:6a:98:64:06:55:d1:85:56:4c: 3c:08:e4:03:88:09:31:25:f8:55:6b:a2:81:d1:c0: 94:e3:c2:1f:e3:ee:9c:e2:55:32:87:3e:51:66:7b: 5f:6c:67:24:ce:51:7f:4d:dd:7a:a5:14:cf:35:45: 39:e5:68:44:0d:06:5b:c0:56:dd:c9:92:12:4b:c1: e0:18:72:8f:81:63:e3:4e:28:e1:dc:fb:33:44:12: 36:6d:66:b0:11:32:81:cb:52:ec:03:63:2e:26:81: 46:1f:a7:ae:1d:44:94:a8:7b:5e:e3:20:f9:f9:59: ab:fc:27:aa:6e:aa:1c:fa:bf:21:bd:7c:36:0b:7c: 46:ce:f4:aa:b5:68:b4:ad:bb:51:89:45:39:11:ff: bc:e7:cb:a4:df:82:d4:e5:5f:dd:ca:19:28:13:b9: 5d:11:00:1d:0c:90:df:aa:af:1f:b9:8a:67:fe:7e: 34:a4:d7:28:d5:ea:7a:29:0d:3b:3a:2c:c9:8f:f7: 30:87:86:29:02:51:4b:bf:ca:9f:f7:f5:58:4e:a8: 1a:ab:18:89:d2:08:6d:1c:6e:be:09:ad:49:f7:34: 63:a4:80:7d:6b:2d:89:7b:90:88:10:d8:19:65:23: d3:72:66:88:0b:66:19:6e:1f:71:eb:ba:13:b5:8b: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D2:20:52:32:68:DD:E9:02:5E:46:27:4B:7B:C9:D4:B0:06:22:3D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.192.0/19 Signature Algorithm: sha256WithRSAEncryption 89:7c:7b:b3:4f:84:10:a1:2b:1c:c6:ff:41:cb:1b:36:a8:25: 15:72:67:87:0b:96:8f:2f:53:09:07:0f:98:a8:c2:c4:84:ca: 03:58:35:61:94:44:64:b8:ce:8e:12:b8:df:ee:da:41:b5:c8: 63:7e:1d:06:78:0f:65:39:b3:83:f7:dd:d1:fb:95:e6:a1:79: c3:1c:0c:9f:1b:c3:cb:f5:88:58:a0:1f:a9:b5:36:c4:45:20: 30:66:1e:0b:88:17:ce:f5:4d:47:3b:af:ba:55:a1:4e:f5:19: 88:7b:fb:20:3e:38:e6:71:c6:70:b5:e8:82:fc:0f:c4:39:f6: 38:e8:09:05:f3:51:e5:b6:e0:f7:5f:bf:7a:df:27:12:d1:68: 9c:57:e8:a2:47:46:df:4e:d6:8f:6a:cb:9f:53:7f:42:8a:be: b0:ec:64:89:fe:3b:64:a1:75:26:82:e4:75:55:29:08:4d:a1: bc:8c:39:8b:ae:e4:20:1e:da:af:81:fc:82:48:e2:84:a0:68: cf:d5:31:dd:df:2c:90:44:76:c5:fa:42:03:96:2e:e2:02:47: 74:64:94:75:7b:e5:db:c4:ca:01:8a:7f:7f:2b:8f:91:b4:cf: d1:70:d5:8e:73:23:ad:65:68:09:0f:ac:cf:73:5d:ad:02:31: f8:cf:cd:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUxRDIyMDUyMzI2OERE RTkwMjVFNDYyNzRCN0JDOUQ0QjAwNjIyM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ8jnVJGqYZAZV0YVWTDwI5AOICTEl+FVrooHRwJTjwh/j7pzi VTKHPlFme19sZyTOUX9N3XqlFM81RTnlaEQNBlvAVt3JkhJLweAYco+BY+NOKOHc +zNEEjZtZrARMoHLUuwDYy4mgUYfp64dRJSoe17jIPn5Wav8J6puqhz6vyG9fDYL fEbO9Kq1aLStu1GJRTkR/7zny6TfgtTlX93KGSgTuV0RAB0MkN+qrx+5imf+fjSk 1yjV6nopDTs6LMmP9zCHhikCUUu/yp/39VhOqBqrGInSCG0cbr4JrUn3NGOkgH1r LYl7kIgQ2BllI9NyZogLZhluH3HruhO1i8xNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUdIgUjJo3ekCXkYnS3vJ1LAGIj0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1VkSWdVakpvM2VrQ1hrWW5T M3ZKMUxBR0lqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3 TcAwDQYJKoZIhvcNAQELBQADggEBAIl8e7NPhBChKxzG/0HLGzaoJRVyZ4cLlo8v UwkHD5iowsSEygNYNWGURGS4zo4SuN/u2kG1yGN+HQZ4D2U5s4P33dH7leahecMc DJ8bw8v1iFigH6m1NsRFIDBmHguIF871TUc7r7pVoU71GYh7+yA+OOZxxnC16IL8 D8Q59jjoCQXzUeW24Pdfv3rfJxLRaJxX6KJHRt9O1o9qy59Tf0KKvrDsZIn+O2Sh dSaC5HVVKQhNobyMOYuu5CAe2q+B/IJI4oSgaM/VMd3fLJBEdsX6QgOWLuICR3Rk lHV75dvEygGKf38rj5G0z9Fw1Y5zI61laAkPrM9zXa0CMfjPzek= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org