$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa File: fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa (raw, json) Hash identifier: 52SGY+NPXH9RbpQk/P4cFJiyWFSTu2S2akMz0+Fnat0= Subject key identifier: 7E:1B:48:A6:7F:8C:A3:B1:94:55:9C:FF:57:C5:D0:9C:9F:80:8B:0F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E83 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa Signing time: Fri 01 Sep 2023 10:16:09 +0000 ROA not before: Fri 01 Sep 2023 10:16:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4662 IP address blocks: 211.76.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7811 (0x1e83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7E1B48A67F8CA3B194559CFF57C5D09C9F808B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:c2:0f:73:38:4d:8d:3b:3a:ab:de:94:ff: 62:3d:0e:7c:a2:27:f0:d5:16:9d:3f:0b:f4:ea:2f: a2:7e:ea:86:f6:ae:1d:d7:61:ab:48:6e:d6:d5:95: 32:30:c8:21:f7:27:06:5f:24:3f:c0:bb:3e:e1:d8: 89:cd:6d:d9:9d:13:82:20:23:09:07:2b:e2:1d:ca: ed:da:97:56:0b:fc:84:43:76:8f:02:15:ac:34:a8: f9:30:cc:b3:a0:de:f4:1d:4d:27:e5:92:a1:8f:32: 6b:04:68:c7:bd:d8:31:b7:c5:3a:1a:ab:e4:34:5c: 6e:8b:8f:b4:25:b5:0d:80:ea:37:b4:67:d8:8e:52: 5d:c6:1c:4c:dd:55:0c:ab:95:23:91:08:8f:cc:47: d4:c0:92:40:d0:0e:0e:49:d9:75:73:0b:b8:69:36: bf:5c:bd:b6:d3:6c:71:80:d7:f5:ec:43:2e:ec:dc: b2:87:d3:49:90:f4:37:c7:db:a6:89:32:a5:ac:c0: 09:5c:71:7e:a8:20:62:1c:7f:8f:90:fd:d4:e3:bd: 46:d8:9e:65:d0:90:1f:ee:ea:03:06:81:b1:b0:0a: 3c:d6:d0:47:d1:1a:08:7d:8b:5f:24:d8:0b:64:bb: 43:2c:07:d2:1e:7f:29:ff:43:22:1b:7e:8d:63:b0: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:48:A6:7F:8C:A3:B1:94:55:9C:FF:57:C5:D0:9C:9F:80:8B:0F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.64.0/20 Signature Algorithm: sha256WithRSAEncryption 64:75:4f:f0:0d:94:a5:39:23:fa:a0:8f:d8:b0:db:68:55:96: 5f:d9:ce:3d:11:08:5a:a3:cc:ac:66:43:bd:ad:94:64:55:66: 7a:e2:ff:57:47:63:56:d4:92:b3:27:ec:ec:e9:cc:ea:0d:fa: 38:ac:8f:bf:76:c0:cb:15:7f:52:d6:48:3d:cb:1e:29:ec:36: 0e:a9:86:c5:95:ba:c8:f6:97:2a:55:fd:ed:86:00:11:d8:15: 91:8b:58:49:65:de:70:38:41:50:b9:cd:7f:a4:f6:db:7c:da: b0:9a:11:8c:e7:69:97:96:10:6a:82:a3:90:e9:65:16:f2:14: f7:a6:72:96:4e:a6:85:f1:7c:17:82:89:c3:0e:28:ef:06:91: bb:bd:b3:2b:af:43:33:99:d4:99:a4:83:46:44:51:bb:92:f9: c3:35:55:96:ee:52:70:b8:0e:0a:3b:8d:5a:74:89:5b:34:eb: 03:64:c4:85:72:63:a3:cb:42:aa:1f:02:68:17:f7:6a:0a:f6: 5b:02:fe:ee:67:9c:fe:a0:1b:bf:80:d2:9a:46:81:09:43:18: 5c:fc:e4:4b:8a:40:97:7c:f2:6f:7d:c4:ee:67:76:84:ba:f0: b3:30:ca:55:25:c4:10:3d:50:2e:68:0f:63:d6:bf:a8:83:b7: 33:e3:72:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdFMUI0OEE2N0Y4Q0Ez QjE5NDU1OUNGRjU3QzVEMDlDOUY4MDhCMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwhcIPczhNjTs6q96U/2I9DnyiJ/DVFp0/C/TqL6J+6ob2rh3X YatIbtbVlTIwyCH3JwZfJD/Auz7h2InNbdmdE4IgIwkHK+Idyu3al1YL/IRDdo8C Faw0qPkwzLOg3vQdTSflkqGPMmsEaMe92DG3xToaq+Q0XG6Lj7QltQ2A6je0Z9iO Ul3GHEzdVQyrlSORCI/MR9TAkkDQDg5J2XVzC7hpNr9cvbbTbHGA1/XsQy7s3LKH 00mQ9DfH26aJMqWswAlccX6oIGIcf4+Q/dTjvUbYnmXQkB/u6gMGgbGwCjzW0EfR Ggh9i18k2Atku0MsB9Iefyn/QyIbfo1jsCcNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfhtIpn+Mo7GUVZz/V8XQnJ+Aiw8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZodElwbi1NbzdHVVZael9W OFhRbkotQWl3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATT TEAwDQYJKoZIhvcNAQELBQADggEBAGR1T/ANlKU5I/qgj9iw22hVll/Zzj0RCFqj zKxmQ72tlGRVZnri/1dHY1bUkrMn7OzpzOoN+jisj792wMsVf1LWSD3LHinsNg6p hsWVusj2lypV/e2GABHYFZGLWEll3nA4QVC5zX+k9tt82rCaEYznaZeWEGqCo5Dp ZRbyFPemcpZOpoXxfBeCicMOKO8Gkbu9syuvQzOZ1Jmkg0ZEUbuS+cM1VZbuUnC4 Dgo7jVp0iVs06wNkxIVyY6PLQqofAmgX92oK9lsC/u5nnP6gG7+A0ppGgQlDGFz8 5EuKQJd88m99xO5ndoS68LMwylUlxBA9UC5oD2PWv6iDtzPjcvo= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org