$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_QVzxd8-8kpHjVRr7FvEm0hDOWU.roa File: _QVzxd8-8kpHjVRr7FvEm0hDOWU.roa (raw, json) Hash identifier: d9jfiWdoafR1tKQKZ/P9N4DcyD8nGUHljyoorjA/d1U= Subject key identifier: FD:05:73:C5:DF:3E:F2:4A:47:8D:54:6B:EC:5B:C4:9B:48:43:39:65 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1F43 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_QVzxd8-8kpHjVRr7FvEm0hDOWU.roa Signing time: Tue 30 Jan 2024 09:01:54 +0000 ROA not before: Tue 30 Jan 2024 09:01:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.61.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8003 (0x1f43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Jan 30 09:01:54 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FD0573C5DF3EF24A478D546BEC5BC49B48433965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:bc:6c:a1:83:86:9e:8c:f6:88:38:48:b2: 84:b7:2f:a4:14:05:19:b6:ea:c8:92:40:46:1d:fe: cc:11:f4:e9:64:e2:be:f4:49:f3:23:37:1a:77:91: 1f:b5:00:37:bc:20:d0:f6:17:2b:a6:bf:85:f7:e6: 06:d7:a8:d3:59:a3:6c:7a:70:ee:22:5e:d2:82:85: f7:56:1e:fd:64:1f:45:3f:03:ab:2b:2e:ea:5c:da: de:84:09:98:c8:b7:40:e8:6f:f5:fb:77:0c:33:6b: ae:6d:9c:70:ad:81:28:11:b6:89:01:43:92:5e:7e: a2:71:6b:d9:b4:22:b6:69:3e:01:92:e5:1d:29:b6: 63:22:6d:bf:50:9e:de:bf:5a:eb:90:c5:88:e8:4a: 25:3c:ec:7e:86:af:95:e2:28:bd:34:ad:06:55:a0: 11:63:8d:a2:31:f5:b5:63:64:3e:2e:41:47:f8:7c: d3:56:be:20:95:30:ad:5c:d8:c1:f9:4d:6b:f0:cb: a9:a8:ff:a4:5f:64:ef:45:13:da:11:b3:51:ca:b7: 7e:1e:e5:4b:11:3a:b6:55:d0:47:46:9b:6c:24:67: 36:5e:bd:ca:f2:10:32:1e:48:ca:a4:6d:87:ac:48: a6:35:71:bb:84:57:5e:5d:29:e7:ee:8d:69:07:06: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:05:73:C5:DF:3E:F2:4A:47:8D:54:6B:EC:5B:C4:9B:48:43:39:65 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_QVzxd8-8kpHjVRr7FvEm0hDOWU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/20 Signature Algorithm: sha256WithRSAEncryption 86:5f:36:c9:29:4f:9b:d2:ea:97:9f:f2:db:74:27:0c:c8:88: c3:03:4c:f3:78:11:ca:69:ae:96:db:31:f6:d0:91:0b:29:ab: 15:9a:cf:c3:d2:06:7f:28:9d:2e:72:98:5e:2e:a9:64:f9:41: b0:79:f6:a6:af:f5:68:6d:dd:e8:a9:3a:8c:d6:0d:86:38:f8: 44:33:3c:2c:2f:63:84:fb:1c:42:5e:2c:d4:89:93:5d:7f:c2: a6:77:fc:42:2e:f0:62:f0:69:18:d2:d9:91:5f:78:3c:c1:4e: 1a:84:a3:fb:1f:1f:85:37:5e:57:bf:dd:0b:d8:68:92:5c:33: 2e:96:62:a4:9b:07:80:c8:55:ec:9a:23:5c:4e:8b:78:56:04: 21:a0:bb:95:9e:f6:77:98:df:7b:54:d1:80:9c:d3:d5:11:d4: d7:84:aa:d9:01:be:26:52:ea:3a:66:f8:18:9f:2f:ec:cf:be: 75:b1:48:12:f9:d5:b5:ec:2b:a2:8d:9b:d7:34:85:ff:dc:d4: 97:3e:47:a8:b4:43:12:d9:ca:53:50:c8:dc:de:9c:b0:20:ce: 6b:b9:37:ac:e1:6a:a0:27:dd:a9:8a:d6:de:7f:1b:6a:71:bb: 4f:0f:19:e0:19:89:9c:f4:a1:5d:2a:1c:f4:06:47:2b:9d:0e: b3:76:ee:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICH0MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDAxMzAw OTAxNTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZEMDU3M0M1REYzRUYy NEE0NzhENTQ2QkVDNUJDNDlCNDg0MzM5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyvbxsoYOGnoz2iDhIsoS3L6QUBRm26siSQEYd/swR9Olk4r70 SfMjNxp3kR+1ADe8IND2Fyumv4X35gbXqNNZo2x6cO4iXtKChfdWHv1kH0U/A6sr Lupc2t6ECZjIt0Dob/X7dwwza65tnHCtgSgRtokBQ5JefqJxa9m0IrZpPgGS5R0p tmMibb9Qnt6/WuuQxYjoSiU87H6Gr5XiKL00rQZVoBFjjaIx9bVjZD4uQUf4fNNW viCVMK1c2MH5TWvwy6mo/6RfZO9FE9oRs1HKt34e5UsROrZV0EdGm2wkZzZevcry EDIeSMqkbYesSKY1cbuEV15dKefujWkHBmpNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/QVzxd8+8kpHjVRr7FvEm0hDOWUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL19RVnp4ZDgtOGtwSGpWUnI3 RnZFbTBoRE9XVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PdAwDQYJKoZIhvcNAQELBQADggEBAIZfNskpT5vS6pef8tt0JwzIiMMDTPN4Ecpp rpbbMfbQkQspqxWaz8PSBn8onS5ymF4uqWT5QbB59qav9Wht3eipOozWDYY4+EQz PCwvY4T7HEJeLNSJk11/wqZ3/EIu8GLwaRjS2ZFfeDzBThqEo/sfH4U3Xle/3QvY aJJcMy6WYqSbB4DIVeyaI1xOi3hWBCGgu5We9neY33tU0YCc09UR1NeEqtkBviZS 6jpm+BifL+zPvnWxSBL51bXsK6KNm9c0hf/c1Jc+R6i0QxLZylNQyNzenLAgzmu5 N6zhaqAn3amK1t5/G2pxu08PGeAZiZz0oV0qHPQGRyudDrN27us= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org