$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa File: bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa (raw, json) Hash identifier: nmCAGjqd/BXa93rxX42rnSNJdBHAbjZnattmC009oXo= Subject key identifier: 6D:31:DC:90:45:40:14:05:A5:5B:78:3F:06:38:3A:D5:3B:E1:67:A3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D76 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa Signing time: Fri 01 Sep 2023 10:14:51 +0000 ROA not before: Fri 01 Sep 2023 10:14:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 114.198.160.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7542 (0x1d76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6D31DC9045401405A55B783F06383AD53BE167A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:b0:21:b4:a3:e1:62:d8:3d:c5:7b:00:84: 6d:9f:d1:16:99:89:84:96:6e:32:9d:15:fe:f7:cd: 47:c7:1c:a5:57:e2:3f:bf:89:11:88:89:2e:0c:96: 60:b4:51:6e:c6:c4:55:3e:63:88:80:a7:5c:ec:dd: 86:6c:65:f4:08:3c:f8:d8:f1:f2:cc:79:3e:94:b4: 6d:34:aa:a0:e9:ba:03:0a:09:d0:b6:b6:eb:c1:59: e7:42:9a:83:93:7b:d9:a3:f7:ef:7b:84:7a:c5:81: c1:17:70:7c:9a:52:c4:c5:ba:75:60:15:57:c2:e3: 55:db:99:d8:ac:4f:4b:fa:9c:f3:42:c3:b2:83:c1: ca:26:2b:ed:2e:a2:75:8c:18:74:a1:64:a8:e8:8e: 70:66:ee:b1:ee:e5:96:9f:a1:23:e3:ef:4c:59:21: 7b:82:35:39:93:50:4d:d5:a3:ef:ca:1d:de:61:c7: 93:ef:28:a6:ec:e5:b6:e7:c0:a8:1a:26:1f:97:dc: ea:22:bc:6c:0b:b4:aa:6a:7f:db:05:e1:a9:06:20: 5b:54:4b:a8:a2:d4:16:f1:81:bd:ee:70:e9:45:35: fb:d6:7c:88:d5:35:21:7b:4e:2d:3c:d2:75:7b:49: 2c:20:00:ba:f2:0f:2e:2e:5b:80:af:e5:fe:2e:90: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:31:DC:90:45:40:14:05:A5:5B:78:3F:06:38:3A:D5:3B:E1:67:A3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.160.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:c1:ab:18:66:13:15:50:91:83:7b:3b:c2:7f:3e:3c:81:e1: 69:35:fd:95:8e:17:f3:7d:d7:26:0d:a3:48:d5:70:7c:26:bb: e0:72:81:29:d6:8a:ee:3c:f9:40:a1:97:db:dc:d6:8a:fa:69: cf:c3:b0:c0:f3:d0:6d:c6:d9:cd:f8:e1:99:a2:d1:10:4e:8b: 0c:48:c7:a6:5f:01:0f:88:f9:cd:0e:62:a7:fe:d9:85:d9:51: 46:86:df:10:ed:ec:fc:cf:c0:c6:37:93:59:4b:bb:8c:e8:28: ea:eb:3a:7f:a4:7e:cc:a6:f3:78:1f:4b:1e:ff:e5:c9:76:dc: 9d:45:bd:ca:66:9e:91:3d:7b:c0:71:cd:12:d2:25:b0:3a:26: 08:ae:fb:54:41:ec:7d:3e:81:6c:a3:27:bf:d5:a0:64:c4:68: e5:4e:b0:29:7f:f2:fa:5b:ae:a4:f8:f8:59:9f:8d:1d:56:fd: d9:98:bf:fb:99:65:33:3c:99:51:d1:c8:7a:70:a2:60:b9:2b: 5b:fe:06:8a:06:92:c0:ec:f8:4b:52:3e:77:91:c4:1f:55:fe: 55:18:0c:d5:9b:5d:ff:72:3a:83:a2:23:fb:57:6f:0a:22:2f: 18:54:f7:8d:e8:ae:47:84:ea:49:2d:c3:7e:5d:95:19:41:54: fd:3c:f9:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZEMzFEQzkwNDU0MDE0 MDVBNTVCNzgzRjA2MzgzQUQ1M0JFMTY3QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrirAhtKPhYtg9xXsAhG2f0RaZiYSWbjKdFf73zUfHHKVX4j+/ iRGIiS4MlmC0UW7GxFU+Y4iAp1zs3YZsZfQIPPjY8fLMeT6UtG00qqDpugMKCdC2 tuvBWedCmoOTe9mj9+97hHrFgcEXcHyaUsTFunVgFVfC41XbmdisT0v6nPNCw7KD wcomK+0uonWMGHShZKjojnBm7rHu5ZafoSPj70xZIXuCNTmTUE3Vo+/KHd5hx5Pv KKbs5bbnwKgaJh+X3OoivGwLtKpqf9sF4akGIFtUS6ii1Bbxgb3ucOlFNfvWfIjV NSF7Ti080nV7SSwgALryDy4uW4Cv5f4ukJS9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbTHckEVAFAWlW3g/Bjg61TvhZ6MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2JUSGNrRVZBRkFXbFczZ19C amc2MVR2aFo2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xqAwDQYJKoZIhvcNAQELBQADggEBABzBqxhmExVQkYN7O8J/PjyB4Wk1/ZWOF/N9 1yYNo0jVcHwmu+BygSnWiu48+UChl9vc1or6ac/DsMDz0G3G2c344Zmi0RBOiwxI x6ZfAQ+I+c0OYqf+2YXZUUaG3xDt7PzPwMY3k1lLu4zoKOrrOn+kfsym83gfSx7/ 5cl23J1FvcpmnpE9e8BxzRLSJbA6Jgiu+1RB7H0+gWyjJ7/VoGTEaOVOsCl/8vpb rqT4+FmfjR1W/dmYv/uZZTM8mVHRyHpwomC5K1v+BooGksDs+EtSPneRxB9V/lUY DNWbXf9yOoOiI/tXbwoiLxhU943orkeE6kktw35dlRlBVP08+dc= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:49 2024 by rpki-client on console-fra.rpki-client.org