$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eKFdijJ5SwxtbAVlXNhWJixht_0.roa File: eKFdijJ5SwxtbAVlXNhWJixht_0.roa (raw, json) Hash identifier: Ql0KXn3vHG44/v+01ILV3I9s3/67VWX/wibkH/i+RhQ= Subject key identifier: 78:A1:5D:8A:32:79:4B:0C:6D:6C:05:65:5C:D8:56:26:2C:61:B7:FD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E95 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eKFdijJ5SwxtbAVlXNhWJixht_0.roa Signing time: Fri 01 Sep 2023 10:16:14 +0000 ROA not before: Fri 01 Sep 2023 10:16:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 114.198.176.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7829 (0x1e95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=78A15D8A32794B0C6D6C05655CD856262C61B7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:64:e2:19:64:37:10:46:9e:75:99:25:9a: 35:53:84:64:42:3a:74:69:d2:9b:56:28:cd:ee:4f: 28:a7:ce:df:d1:e0:09:d3:23:1e:de:3c:29:57:67: 6b:fb:a8:78:a7:ec:83:8c:fd:b9:d1:f8:90:f7:73: 0c:f4:e4:de:5a:5c:0d:d4:7b:e0:a2:9d:7c:13:a5: 72:c4:8f:a8:b6:e1:80:6f:02:16:ab:8d:99:c7:11: d9:55:77:23:ba:20:1b:72:05:07:ef:f3:d6:f7:c0: e1:d1:b2:b9:6d:c4:c2:f4:ef:33:0d:60:60:dc:6d: 84:4c:de:6b:8d:fc:0c:b7:ec:34:32:46:02:2b:33: 22:22:4f:f8:80:1a:84:85:3b:8c:30:dd:0e:95:b4: 57:a9:e9:c0:4e:aa:2a:10:c7:fd:a0:f3:2f:8a:dc: 7c:3a:84:21:8e:7e:83:f0:93:eb:11:d5:65:63:c9: ea:e8:ee:55:e2:5f:10:2e:39:b5:fb:13:d4:20:5d: 81:29:d0:fb:d7:a3:6d:f0:be:9f:4a:66:3d:06:ed: 9f:c6:19:a7:4c:dd:59:7a:b1:c4:23:ac:e5:52:de: 7a:5f:b4:6a:36:35:31:6c:84:ad:9f:f6:b4:c2:10: b7:97:28:9f:02:97:22:29:7e:37:e0:a4:90:44:ea: 9a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A1:5D:8A:32:79:4B:0C:6D:6C:05:65:5C:D8:56:26:2C:61:B7:FD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eKFdijJ5SwxtbAVlXNhWJixht_0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.176.0/20 Signature Algorithm: sha256WithRSAEncryption 31:58:eb:0d:fe:2c:30:68:88:e9:bb:cf:c2:0f:6c:c0:45:3a: 39:72:36:80:59:f1:22:f1:93:8c:26:19:d2:ed:44:a5:d6:92: 60:4f:0d:2a:2d:f7:53:70:41:e5:b0:a2:8b:23:9b:9a:a1:df: 2f:95:96:f6:f3:7f:e1:db:26:d0:ef:98:35:5c:67:5e:17:50: ff:9e:37:4d:42:4d:01:5c:9f:08:58:31:8c:24:1f:c8:23:f4: 59:0a:6b:ad:62:b4:47:05:22:22:a0:90:db:51:ab:8b:5c:83: fd:01:ef:53:d8:8f:43:82:16:71:f5:5c:c2:d8:72:69:74:0f: f2:4a:72:37:05:94:59:2a:8a:37:40:c4:82:20:43:e2:e0:c0: a7:be:7e:65:1c:18:6e:ce:5e:1a:07:5c:a5:e8:e9:bd:54:7d: 0c:5d:87:18:de:c3:ae:e4:23:01:98:45:0a:43:cf:46:38:9a: d5:c4:3b:cc:d4:5a:c2:ed:65:f6:44:d5:43:40:1b:7a:27:e2: 97:f2:69:17:09:9c:29:a2:e9:21:29:67:38:6c:73:a9:5f:3e: b9:3c:ba:c9:fb:61:e2:9d:e1:e6:c6:a5:98:db:f9:5a:01:f4: 06:21:c9:38:e2:79:ef:a1:bd:1d:5e:ca:81:49:ac:a2:6f:55: 22:be:6a:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHpUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc4QTE1RDhBMzI3OTRC MEM2RDZDMDU2NTVDRDg1NjI2MkM2MUI3RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOt2TiGWQ3EEaedZklmjVThGRCOnRp0ptWKM3uTyinzt/R4AnT Ix7ePClXZ2v7qHin7IOM/bnR+JD3cwz05N5aXA3Ue+CinXwTpXLEj6i24YBvAhar jZnHEdlVdyO6IBtyBQfv89b3wOHRsrltxML07zMNYGDcbYRM3muN/Ay37DQyRgIr MyIiT/iAGoSFO4ww3Q6VtFep6cBOqioQx/2g8y+K3Hw6hCGOfoPwk+sR1WVjyero 7lXiXxAuObX7E9QgXYEp0PvXo23wvp9KZj0G7Z/GGadM3Vl6scQjrOVS3npftGo2 NTFshK2f9rTCELeXKJ8ClyIpfjfgpJBE6prLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeKFdijJ5SwxtbAVlXNhWJixht/0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2VLRmRpako1U3d4dGJBVmxY TmhXSml4aHRfMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xrAwDQYJKoZIhvcNAQELBQADggEBADFY6w3+LDBoiOm7z8IPbMBFOjlyNoBZ8SLx k4wmGdLtRKXWkmBPDSot91NwQeWwoosjm5qh3y+Vlvbzf+HbJtDvmDVcZ14XUP+e N01CTQFcnwhYMYwkH8gj9FkKa61itEcFIiKgkNtRq4tcg/0B71PYj0OCFnH1XMLY cml0D/JKcjcFlFkqijdAxIIgQ+LgwKe+fmUcGG7OXhoHXKXo6b1UfQxdhxjew67k IwGYRQpDz0Y4mtXEO8zUWsLtZfZE1UNAG3on4pfyaRcJnCmi6SEpZzhsc6lfPrk8 usn7YeKd4ebGpZjb+VoB9AYhyTjiee+hvR1eyoFJrKJvVSK+ahw= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org