$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iaTJbFaDdC2l_fSw0RiRnPLQznI.roa File: iaTJbFaDdC2l_fSw0RiRnPLQznI.roa (raw, json) Hash identifier: 8cdlY0Q3dc5U+AKCLc/eC1fG74FHRFbsdq61bDmqLMc= Subject key identifier: 89:A4:C9:6C:56:83:74:2D:A5:FD:F4:B0:D1:18:91:9C:F2:D0:CE:72 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1F2F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iaTJbFaDdC2l_fSw0RiRnPLQznI.roa Signing time: Tue 30 Jan 2024 08:41:37 +0000 ROA not before: Tue 30 Jan 2024 08:41:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 123.0.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7983 (0x1f2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Jan 30 08:41:37 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=89A4C96C5683742DA5FDF4B0D118919CF2D0CE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:07:1d:9e:6f:06:95:8a:92:55:25:26:4f: 46:a0:f7:1c:65:31:2b:5f:68:e3:b2:35:fd:22:a5: 4d:f7:8d:06:e7:ac:5b:fa:61:bd:1e:77:d4:e3:bb: c6:2b:84:02:03:70:c9:bd:98:f2:c2:38:68:1f:99: fe:41:9d:b2:53:92:5f:0a:aa:83:63:16:6a:46:bf: 28:81:77:c5:6c:fc:ac:9d:93:30:a6:8f:92:20:57: 4b:86:b7:2e:aa:ff:1a:52:71:2e:86:86:19:98:2e: 1e:c9:44:0a:12:6b:6f:4c:d1:19:8f:1f:6b:16:94: 2f:3e:22:d7:45:da:91:9e:22:2d:69:44:6d:99:b0: 44:6f:ec:7e:0d:af:a7:5c:bb:77:3c:34:dd:4f:81: 4b:4e:5d:ae:c2:0b:44:94:df:ce:e8:df:ad:3e:95: ac:b4:e6:e4:25:cf:39:40:ab:58:3a:93:03:da:c7: b7:6a:a7:3b:83:71:ee:38:b7:60:a2:4f:ad:70:cb: 1c:84:6f:dc:6d:0f:94:20:31:63:92:4e:e4:fd:51: 99:d7:94:9c:20:1e:ee:9c:ad:a4:a3:7c:e5:0b:4f: 8c:14:91:65:e3:8d:32:35:05:39:26:51:b1:28:05: e0:54:6a:8d:0c:2a:38:a3:34:af:0f:ad:5a:22:e1: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A4:C9:6C:56:83:74:2D:A5:FD:F4:B0:D1:18:91:9C:F2:D0:CE:72 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iaTJbFaDdC2l_fSw0RiRnPLQznI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:d9:9f:76:0c:a6:51:fb:76:6d:d8:59:28:a1:f0:ea:c7:5b: b3:23:a2:65:8c:85:61:c2:c1:1e:62:75:26:89:5d:2b:43:c4: fd:86:27:53:47:18:53:ad:9a:5b:c4:ba:be:bd:26:42:b3:e1: 3c:ca:0d:e4:dc:ee:cd:8f:94:ac:66:61:7b:61:1e:b7:b8:3a: 07:b2:dc:75:2c:ce:81:31:52:79:c3:b4:32:19:a5:e6:9e:e3: ef:3c:83:95:7c:a3:4a:c6:18:68:68:dd:a6:9e:1b:2e:b5:c4: 2f:52:6a:f6:4e:5c:63:06:95:46:56:69:5e:d7:3b:bf:c3:7b: c6:e2:ba:7f:ab:ef:84:70:18:78:e8:5f:c0:21:9f:f0:43:e5: 14:61:5f:e3:61:45:64:ee:ea:90:9b:b2:2c:5c:42:ad:e6:56: db:ce:63:e4:97:53:4a:4a:75:69:b8:f6:d0:ec:45:a9:fd:7c: fc:8c:a9:5d:9d:56:ee:12:7f:09:b5:1a:a1:d3:18:fc:f1:b1: 65:50:20:c7:95:53:5f:37:16:d6:45:9b:5a:c3:21:3e:7d:ea: 1a:e8:ea:b3:07:48:b9:50:68:7f:ef:37:72:7e:00:a7:b0:c8: 7a:4c:12:28:2d:74:b1:99:45:ce:5b:68:4b:33:ce:f3:cf:79: a8:94:41:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDAxMzAw ODQxMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg5QTRDOTZDNTY4Mzc0 MkRBNUZERjRCMEQxMTg5MTlDRjJEMENFNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkXgcdnm8GlYqSVSUmT0ag9xxlMStfaOOyNf0ipU33jQbnrFv6 Yb0ed9Tju8YrhAIDcMm9mPLCOGgfmf5BnbJTkl8KqoNjFmpGvyiBd8Vs/KydkzCm j5IgV0uGty6q/xpScS6GhhmYLh7JRAoSa29M0RmPH2sWlC8+ItdF2pGeIi1pRG2Z sERv7H4Nr6dcu3c8NN1PgUtOXa7CC0SU387o360+lay05uQlzzlAq1g6kwPax7dq pzuDce44t2CiT61wyxyEb9xtD5QgMWOSTuT9UZnXlJwgHu6craSjfOULT4wUkWXj jTI1BTkmUbEoBeBUao0MKjijNK8PrVoi4QgTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiaTJbFaDdC2l/fSw0RiRnPLQznIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2lhVEpiRmFEZEMybF9mU3cw UmlSblBMUXpuSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 ACAwDQYJKoZIhvcNAQELBQADggEBAC3Zn3YMplH7dm3YWSih8OrHW7MjomWMhWHC wR5idSaJXStDxP2GJ1NHGFOtmlvEur69JkKz4TzKDeTc7s2PlKxmYXthHre4Ogey 3HUszoExUnnDtDIZpeae4+88g5V8o0rGGGho3aaeGy61xC9SavZOXGMGlUZWaV7X O7/De8biun+r74RwGHjoX8Ahn/BD5RRhX+NhRWTu6pCbsixcQq3mVtvOY+SXU0pK dWm49tDsRan9fPyMqV2dVu4Sfwm1GqHTGPzxsWVQIMeVU183FtZFm1rDIT596hro 6rMHSLlQaH/vN3J+AKewyHpMEigtdLGZRc5baEszzvPPeaiUQdE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org