$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa File: YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa (raw, json) Hash identifier: Xqr65KwHu60uDyiBdFBc0tfYvhNnHaz9xovKnAPNHF0= Subject key identifier: 61:69:55:89:99:60:A7:1C:E8:3E:5D:CF:DE:CA:BD:C8:12:75:36:BB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DD9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa Signing time: Fri 01 Sep 2023 10:15:22 +0000 ROA not before: Fri 01 Sep 2023 10:15:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 61.56.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7641 (0x1dd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=616955899960A71CE83E5DCFDECABDC8127536BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0c:1b:5a:60:ad:cb:69:c8:35:9f:dd:eb:5f: a7:cb:71:9a:1c:cd:ef:82:e6:54:6d:f7:09:57:3a: ec:87:f5:d2:a6:92:48:c8:ba:dd:cf:b9:48:59:bb: 1d:56:87:d5:49:ca:54:73:d4:1d:9f:1e:b1:d7:fc: 4f:62:d9:72:9b:c5:86:6f:84:64:8e:c2:2b:6d:e8: 51:bb:d9:96:76:c2:2c:6c:5a:27:26:a4:a4:58:9d: 48:08:35:44:9e:45:77:82:d1:27:f2:72:59:68:3f: 32:99:4b:2a:fb:e1:15:5e:7c:1d:3c:ab:9f:68:9e: d7:b4:a8:19:dd:42:ce:83:35:dd:75:2f:dd:de:d1: 9c:36:8b:67:d8:ec:88:20:dc:44:44:83:4f:97:fd: 8b:c9:eb:c6:0e:d7:ad:a6:8c:73:c3:38:a2:4c:b9: de:87:65:56:5d:f1:b6:17:7a:ae:d6:52:83:0a:8f: 62:5d:5b:89:58:24:54:61:d3:e6:e6:5b:79:90:72: a8:ec:c2:99:d2:82:03:c6:b3:c7:18:d7:4f:b7:f2: fa:02:af:06:fd:42:2f:bd:b6:84:6d:cb:31:cd:3a: 78:a4:9b:c2:9d:59:fd:37:c8:ea:78:76:a2:f5:e7: 9d:1c:51:98:5b:db:e7:45:6f:87:ba:c5:83:bd:2b: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:55:89:99:60:A7:1C:E8:3E:5D:CF:DE:CA:BD:C8:12:75:36:BB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.176.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:cb:66:36:25:25:2d:1b:f9:67:7c:9f:d4:0b:7b:74:e9:bc: 3a:65:ed:fd:7f:36:cd:a4:9c:29:ae:79:ad:a5:00:5c:a2:f0: 9b:2b:fc:cc:ce:b7:74:7b:bb:04:ba:ce:e8:93:4b:94:1d:40: cc:85:1f:72:f5:d7:e1:71:18:44:24:22:be:54:90:62:b0:13: e5:82:67:0c:91:ac:8a:2d:ca:a3:86:51:89:9d:3c:c1:86:1f: cb:fb:23:d6:b2:24:76:9f:18:3a:ba:33:2d:58:d1:f4:51:3d: e5:6d:49:cb:2b:f3:6d:6d:9e:17:0d:f6:71:3b:0d:ba:73:f7: 82:9d:48:7f:9d:b8:88:93:b2:17:93:e3:55:6e:b4:6b:e2:37: 68:95:25:a8:a3:08:c7:c3:e9:35:e7:d7:bc:67:1e:dd:0b:58: b7:b9:54:1a:d5:df:6a:8c:8b:6b:90:d9:4f:66:e9:c1:58:86: 0a:3f:1a:1c:3b:06:1e:d3:6f:3d:52:e3:cc:ba:c1:0d:1d:cf: 44:52:cc:71:ed:c3:41:28:cd:53:f4:1f:a3:67:f2:bc:d3:39: 2b:9d:82:17:c5:0a:e1:6a:6f:d1:35:75:fc:de:04:46:ce:86: dc:b5:9a:d3:57:3d:e4:1a:d2:2f:b8:9f:c5:16:68:b5:a8:18: 56:01:1a:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYxNjk1NTg5OTk2MEE3 MUNFODNFNURDRkRFQ0FCREM4MTI3NTM2QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsDBtaYK3Lacg1n93rX6fLcZocze+C5lRt9wlXOuyH9dKmkkjI ut3PuUhZux1Wh9VJylRz1B2fHrHX/E9i2XKbxYZvhGSOwitt6FG72ZZ2wixsWicm pKRYnUgINUSeRXeC0SfyclloPzKZSyr74RVefB08q59onte0qBndQs6DNd11L93e 0Zw2i2fY7Igg3EREg0+X/YvJ68YO162mjHPDOKJMud6HZVZd8bYXeq7WUoMKj2Jd W4lYJFRh0+bmW3mQcqjswpnSggPGs8cY10+38voCrwb9Qi+9toRtyzHNOnikm8Kd Wf03yOp4dqL1550cUZhb2+dFb4e6xYO9K1CxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYWlViZlgpxzoPl3P3sq9yBJ1NrswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1lXbFZpWmxncHh6b1BsM1Az c3E5eUJKMU5ycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OLAwDQYJKoZIhvcNAQELBQADggEBACzLZjYlJS0b+Wd8n9QLe3TpvDpl7f1/Ns2k nCmuea2lAFyi8Jsr/MzOt3R7uwS6zuiTS5QdQMyFH3L11+FxGEQkIr5UkGKwE+WC ZwyRrIotyqOGUYmdPMGGH8v7I9ayJHafGDq6My1Y0fRRPeVtScsr821tnhcN9nE7 Dbpz94KdSH+duIiTsheT41VutGviN2iVJaijCMfD6TXn17xnHt0LWLe5VBrV32qM i2uQ2U9m6cFYhgo/Ghw7Bh7Tbz1S48y6wQ0dz0RSzHHtw0EozVP0H6Nn8rzTOSud ghfFCuFqb9E1dfzeBEbOhty1mtNXPeQa0i+4n8UWaLWoGFYBGmw= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org