$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLU2p7fr95hn8sMLAeMXbhpBluY.roa File: nLU2p7fr95hn8sMLAeMXbhpBluY.roa (raw, json) Hash identifier: Hgmi3D1gRy2/1Na7+XsJ6POqW4W19G6EafqO46YLIiU= Subject key identifier: 9C:B5:36:A7:B7:EB:F7:98:67:F2:C3:0B:01:E3:17:6E:1A:41:96:E6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1F41 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLU2p7fr95hn8sMLAeMXbhpBluY.roa Signing time: Tue 30 Jan 2024 09:00:34 +0000 ROA not before: Tue 30 Jan 2024 09:00:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.60.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8001 (0x1f41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Jan 30 09:00:34 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9CB536A7B7EBF79867F2C30B01E3176E1A4196E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:be:8b:52:63:c7:47:45:68:77:39:db:ef: 18:bd:c8:8e:cb:4a:c5:99:93:00:ad:79:2b:5b:0c: 36:34:45:ef:42:dc:42:74:a6:84:9d:af:a1:43:c1: 30:3d:d5:fc:f7:24:b5:9c:4f:95:f4:97:f9:f1:59: f4:5e:19:a4:98:e5:4b:0b:22:75:35:39:d9:9f:47: 43:39:ff:28:f0:fe:ab:0f:cf:66:d3:90:b0:c7:8e: c5:72:f7:35:14:d0:c5:0d:c1:b8:97:c2:5d:bb:8f: 92:5f:d1:4d:15:3e:d5:b5:4c:49:13:e9:16:8b:31: f8:66:18:a6:f1:96:f9:f6:ec:20:3b:c5:e9:ea:cc: f9:2a:99:66:53:82:31:5c:69:29:7e:7d:32:d3:a2: ea:95:6f:f5:39:d5:fe:07:27:03:50:60:63:f3:4f: 96:ba:9f:83:16:43:bc:d3:e7:76:17:b7:2c:58:87: bd:72:e6:93:22:2b:72:75:e4:a5:89:68:4b:2a:0e: e8:47:89:f0:7a:1b:17:86:55:dd:82:b0:28:c2:2e: 97:d6:92:ac:eb:5d:d0:ba:2b:98:4c:f3:60:75:75: 36:7a:c0:26:75:7c:fa:85:f2:3b:1e:1a:d9:4a:95: 34:f0:f0:5d:cd:86:63:fb:de:2c:b7:ba:a4:3f:7b: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B5:36:A7:B7:EB:F7:98:67:F2:C3:0B:01:E3:17:6E:1A:41:96:E6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLU2p7fr95hn8sMLAeMXbhpBluY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.208.0/20 Signature Algorithm: sha256WithRSAEncryption 88:4b:f7:d1:55:a9:1b:52:ad:db:6b:c1:ff:dd:69:29:24:59: b6:72:75:d3:2f:59:02:41:b5:67:25:40:86:bd:0b:9e:48:fe: f7:e3:08:38:00:0e:57:7f:ac:77:27:05:15:3f:1b:ab:44:1e: 6d:d8:7b:6c:04:c2:63:13:0a:77:9d:a4:23:bb:23:2d:46:17: dc:f0:d1:a7:07:a5:89:d4:26:35:98:7e:65:28:6f:e4:bd:49: f5:74:8a:d2:b5:95:55:d3:bb:62:7d:ae:65:96:ff:c5:5f:46: ce:6a:20:07:7e:d7:bd:c0:9e:59:db:ab:82:0d:28:b1:c3:40: 51:f6:fa:36:c5:57:d4:e7:cc:ac:46:40:6f:05:6f:78:c3:da: 0f:a7:90:43:c0:09:82:c1:60:65:8c:d0:5e:fc:22:e2:99:20: 6f:fd:75:bd:89:87:14:18:17:61:ed:48:31:89:c4:83:b0:a1: aa:56:af:af:9d:ad:58:05:24:ad:f7:c2:dd:3c:d1:76:2d:d8: d7:38:9e:6e:92:06:b2:93:92:f5:b4:f0:5c:a2:79:4c:f4:19: 53:f4:42:78:d8:e1:a6:52:5c:87:ae:65:4b:45:f8:09:75:e0: 84:4a:60:54:81:c1:33:2e:90:64:30:21:85:f9:ef:fd:60:79: 3a:e1:6a:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICH0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDAxMzAw OTAwMzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlDQjUzNkE3QjdFQkY3 OTg2N0YyQzMwQjAxRTMxNzZFMUE0MTk2RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyT76LUmPHR0Vodznb7xi9yI7LSsWZkwCteStbDDY0Re9C3EJ0 poSdr6FDwTA91fz3JLWcT5X0l/nxWfReGaSY5UsLInU1OdmfR0M5/yjw/qsPz2bT kLDHjsVy9zUU0MUNwbiXwl27j5Jf0U0VPtW1TEkT6RaLMfhmGKbxlvn27CA7xenq zPkqmWZTgjFcaSl+fTLTouqVb/U51f4HJwNQYGPzT5a6n4MWQ7zT53YXtyxYh71y 5pMiK3J15KWJaEsqDuhHifB6GxeGVd2CsCjCLpfWkqzrXdC6K5hM82B1dTZ6wCZ1 fPqF8jseGtlKlTTw8F3NhmP73iy3uqQ/ezbtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnLU2p7fr95hn8sMLAeMXbhpBluYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25MVTJwN2ZyOTVobjhzTUxB ZU1YYmhwQmx1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 PNAwDQYJKoZIhvcNAQELBQADggEBAIhL99FVqRtSrdtrwf/daSkkWbZyddMvWQJB tWclQIa9C55I/vfjCDgADld/rHcnBRU/G6tEHm3Ye2wEwmMTCnedpCO7Iy1GF9zw 0acHpYnUJjWYfmUob+S9SfV0itK1lVXTu2J9rmWW/8VfRs5qIAd+173Anlnbq4IN KLHDQFH2+jbFV9TnzKxGQG8Fb3jD2g+nkEPACYLBYGWM0F78IuKZIG/9db2JhxQY F2HtSDGJxIOwoapWr6+drVgFJK33wt080XYt2Nc4nm6SBrKTkvW08FyieUz0GVP0 QnjY4aZSXIeuZUtF+Al14IRKYFSBwTMukGQwIYX57/1geTrhahA= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org