$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/apKwMBEcchID5abtlVUTtirsR5Q.roa File: apKwMBEcchID5abtlVUTtirsR5Q.roa (raw, json) Hash identifier: yBN5Se9Mz6/oiKe5A0tOw9t1FCYviQFiB/kvCS5RBRA= Subject key identifier: 6A:92:B0:30:11:1C:72:12:03:E5:A6:ED:95:55:13:B6:2A:EC:47:94 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EC2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/apKwMBEcchID5abtlVUTtirsR5Q.roa Signing time: Fri 01 Sep 2023 10:16:25 +0000 ROA not before: Fri 01 Sep 2023 10:16:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 122.254.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7874 (0x1ec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:25 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6A92B030111C721203E5A6ED955513B62AEC4794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:03:96:5b:57:21:5e:e3:0f:22:6a:4a:e5: f2:8a:23:8f:56:72:89:87:b2:50:49:c6:b0:cf:1e: be:1d:40:b4:41:d3:6a:94:b4:ce:b5:25:f4:52:4f: 4b:37:ae:8e:cc:e6:c5:67:a2:ae:50:a5:95:75:29: 8e:23:68:47:2e:a4:53:17:30:89:f5:6f:5f:5f:39: 6b:96:47:ce:aa:aa:a9:8a:a6:dc:48:50:71:0e:d8: 2a:08:d2:98:7e:20:b0:98:77:9a:0d:ea:fe:9e:a8: c5:cc:60:de:3f:c1:af:16:35:0d:0e:32:c2:67:ee: 66:11:4e:fc:32:40:57:cd:a4:fb:b9:74:79:00:67: cf:96:a5:e2:fc:99:5a:f1:10:c1:a1:57:28:14:8f: ea:69:0e:43:40:e2:25:db:aa:00:7e:8b:e4:67:a2: ce:de:2b:79:fc:a4:df:a4:0e:e6:31:8f:e2:ae:01: da:ae:02:5b:8c:52:8a:93:bf:ab:c0:6c:17:26:77: ef:27:22:79:d8:c9:61:76:f1:b1:d2:b3:8b:53:a2: af:80:73:c8:99:ed:e7:87:79:29:53:a3:41:58:43: e3:60:a3:12:3d:ec:ad:f4:68:4c:b3:0f:7f:13:a7: 42:7a:dc:a3:93:ad:09:c4:a3:5b:13:79:f9:ef:3e: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:92:B0:30:11:1C:72:12:03:E5:A6:ED:95:55:13:B6:2A:EC:47:94 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/apKwMBEcchID5abtlVUTtirsR5Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.32.0/21 Signature Algorithm: sha256WithRSAEncryption 65:30:d5:15:d9:0b:88:98:80:16:1e:99:dc:9e:ee:50:2d:b6: 88:b7:0f:9b:63:e6:df:34:7f:eb:fb:01:de:35:fb:d5:11:5b: b6:56:52:01:a6:07:67:70:2d:ac:4e:9c:60:b2:64:b5:36:fe: 8a:08:8e:5a:bb:ec:0c:c0:f6:e6:31:9e:30:a7:ce:95:72:18: 6f:8b:fe:2f:e5:9a:a0:ba:78:64:1e:8e:3f:2e:38:5b:6b:1b: b0:f0:34:d5:f4:9b:3e:df:8d:6e:bd:2f:ee:5b:c6:39:c3:77: 6b:19:cb:b8:1a:ba:3f:fe:ef:ab:b0:c0:4f:8f:b8:79:d9:06: 0c:34:81:23:37:8e:48:3f:c8:63:23:c2:e2:15:9a:73:a8:05: d4:d4:4d:f0:ed:e3:52:b5:a8:1c:55:1a:15:f3:63:69:69:ed: 90:6e:df:86:56:aa:80:d2:46:b8:0c:b1:ff:aa:8c:f3:df:0f: d8:ee:2e:1c:8d:3a:f3:bd:2b:7e:8b:81:20:e7:1d:b9:8c:73: 68:6c:2b:ad:ff:3c:ab:1a:2b:84:93:69:1d:d1:ff:55:d8:cf: 61:6c:5d:55:6c:28:92:2a:83:95:4d:d7:12:b8:ed:60:34:06: 3f:d9:84:0d:34:32:83:c9:c5:ce:1a:af:9d:69:92:dc:7c:c1: 67:1a:49:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHsIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZBOTJCMDMwMTExQzcy MTIwM0U1QTZFRDk1NTUxM0I2MkFFQzQ3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRMwOWW1chXuMPImpK5fKKI49WcomHslBJxrDPHr4dQLRB02qU tM61JfRST0s3ro7M5sVnoq5QpZV1KY4jaEcupFMXMIn1b19fOWuWR86qqqmKptxI UHEO2CoI0ph+ILCYd5oN6v6eqMXMYN4/wa8WNQ0OMsJn7mYRTvwyQFfNpPu5dHkA Z8+WpeL8mVrxEMGhVygUj+ppDkNA4iXbqgB+i+Rnos7eK3n8pN+kDuYxj+KuAdqu AluMUoqTv6vAbBcmd+8nInnYyWF28bHSs4tToq+Ac8iZ7eeHeSlTo0FYQ+NgoxI9 7K30aEyzD38Tp0J63KOTrQnEo1sTefnvPkzNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUapKwMBEcchID5abtlVUTtirsR5QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2FwS3dNQkVjY2hJRDVhYnRs VlVUdGlyc1I1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /iAwDQYJKoZIhvcNAQELBQADggEBAGUw1RXZC4iYgBYemdye7lAttoi3D5tj5t80 f+v7Ad41+9URW7ZWUgGmB2dwLaxOnGCyZLU2/ooIjlq77AzA9uYxnjCnzpVyGG+L /i/lmqC6eGQejj8uOFtrG7DwNNX0mz7fjW69L+5bxjnDd2sZy7gauj/+76uwwE+P uHnZBgw0gSM3jkg/yGMjwuIVmnOoBdTUTfDt41K1qBxVGhXzY2lp7ZBu34ZWqoDS RrgMsf+qjPPfD9juLhyNOvO9K36LgSDnHbmMc2hsK63/PKsaK4STaR3R/1XYz2Fs XVVsKJIqg5VN1xK47WA0Bj/ZhA00MoPJxc4ar51pktx8wWcaSbQ= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org