$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pgWKVAsbRd0XkCCKt6-5TFmtAao.roa File: pgWKVAsbRd0XkCCKt6-5TFmtAao.roa (raw, json) Hash identifier: Hyhml12iSDXAA/8HWTzf4rIo8PsWbeLBx6IeCd9zifY= Subject key identifier: A6:05:8A:54:0B:1B:45:DD:17:90:20:8A:B7:AF:B9:4C:59:AD:01:AA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E03 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pgWKVAsbRd0XkCCKt6-5TFmtAao.roa Signing time: Fri 01 Sep 2023 10:15:34 +0000 ROA not before: Fri 01 Sep 2023 10:15:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.61.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7683 (0x1e03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A6058A540B1B45DD1790208AB7AFB94C59AD01AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:c2:96:af:aa:da:74:2b:65:bc:68:93:14: 9f:0b:bf:4e:92:4a:c0:d5:ad:69:39:f1:e2:15:7f: e6:ed:91:7e:46:f6:67:ec:b0:1c:83:36:e6:dc:69: 5f:57:ad:c5:23:08:04:81:13:4c:b5:31:24:ca:3f: 5f:b7:24:67:d0:a6:44:0c:a6:de:2a:14:3d:07:de: fc:2a:3c:fb:96:de:e9:59:32:b9:2a:1d:05:e5:19: 65:1a:28:47:f2:5b:4e:a2:6c:c6:71:ac:03:ec:cb: a7:bd:70:26:42:36:f2:4d:fd:ba:de:b6:de:bd:56: 0b:7d:da:1e:66:1f:66:33:18:69:16:fe:52:d3:a6: 6c:e6:8a:a9:b2:55:16:30:98:56:7b:6b:ca:ae:5b: d1:5d:9b:97:9c:c3:40:db:e9:0c:91:78:d2:73:67: 56:28:38:b4:6b:91:32:af:05:81:3f:c1:24:b7:3d: 94:10:45:ab:0c:2f:a5:af:9b:7b:12:59:ce:2e:28: 85:1c:98:9d:a5:aa:7a:22:d5:4a:69:cf:83:21:e4: 6c:37:0e:05:d2:47:be:8c:4b:87:77:09:61:2f:da: b6:fb:c3:af:72:77:6e:28:82:3f:66:2d:a3:01:81: c8:f2:e0:e8:64:f9:47:aa:3b:a4:f5:cd:db:92:5c: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:8A:54:0B:1B:45:DD:17:90:20:8A:B7:AF:B9:4C:59:AD:01:AA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pgWKVAsbRd0XkCCKt6-5TFmtAao.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.212.0/22 Signature Algorithm: sha256WithRSAEncryption 04:de:08:96:a4:7b:ee:70:12:77:93:22:e5:f8:08:ba:6c:7d: 4f:98:d2:c9:d4:44:44:bd:7a:eb:a4:74:20:a7:69:55:71:61: b2:d1:a3:3b:af:71:05:72:05:89:71:83:1e:f7:6e:9b:31:1b: dc:0e:ad:1f:c4:98:2a:01:a6:b5:80:54:f3:63:47:6f:f7:4a: 7b:de:07:55:70:2c:5d:a7:c4:5d:b8:1c:55:9c:2e:ed:6e:af: b6:de:10:07:1d:9e:61:e7:ef:1a:c1:cc:6d:6b:22:de:d0:63: 56:88:55:e8:95:ca:ac:e4:5d:cf:70:75:56:87:c0:e1:af:21: 73:9b:09:60:13:c7:7f:57:c1:ba:82:46:9c:0c:ce:61:2e:21: 06:ab:b1:ed:a2:c5:75:db:78:0e:4b:d2:20:68:84:75:10:73: 89:e1:14:b8:0d:d4:da:b7:dc:5b:4d:c9:40:ee:b6:25:ab:2e: d9:03:f8:6b:ca:71:79:b6:e1:ba:55:4e:ec:85:20:fc:73:fb: 25:91:5b:ef:7a:cc:59:22:1c:b6:f3:27:51:88:a2:08:5a:5a: 46:25:09:8b:5e:f8:b6:c8:f0:6f:ba:da:f9:7f:e9:15:90:92: 5b:4e:b3:bc:86:85:74:da:fa:32:ad:7b:86:dc:ae:17:1e:24: 96:3a:9c:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2MDU4QTU0MEIxQjQ1 REQxNzkwMjA4QUI3QUZCOTRDNTlBRDAxQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDABsKWr6radCtlvGiTFJ8Lv06SSsDVrWk58eIVf+btkX5G9mfs sByDNubcaV9XrcUjCASBE0y1MSTKP1+3JGfQpkQMpt4qFD0H3vwqPPuW3ulZMrkq HQXlGWUaKEfyW06ibMZxrAPsy6e9cCZCNvJN/brett69Vgt92h5mH2YzGGkW/lLT pmzmiqmyVRYwmFZ7a8quW9Fdm5ecw0Db6QyReNJzZ1YoOLRrkTKvBYE/wSS3PZQQ RasML6Wvm3sSWc4uKIUcmJ2lqnoi1Uppz4Mh5Gw3DgXSR76MS4d3CWEv2rb7w69y d24ogj9mLaMBgcjy4Ohk+UeqO6T1zduSXHeBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpgWKVAsbRd0XkCCKt6+5TFmtAaowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BnV0tWQXNiUmQwWGtDQ0t0 Ni01VEZtdEFhby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PdQwDQYJKoZIhvcNAQELBQADggEBAATeCJake+5wEneTIuX4CLpsfU+Y0snURES9 euukdCCnaVVxYbLRozuvcQVyBYlxgx73bpsxG9wOrR/EmCoBprWAVPNjR2/3Snve B1VwLF2nxF24HFWcLu1ur7beEAcdnmHn7xrBzG1rIt7QY1aIVeiVyqzkXc9wdVaH wOGvIXObCWATx39XwbqCRpwMzmEuIQarse2ixXXbeA5L0iBohHUQc4nhFLgN1Nq3 3FtNyUDutiWrLtkD+GvKcXm24bpVTuyFIPxz+yWRW+96zFkiHLbzJ1GIoghaWkYl CYte+LbI8G+62vl/6RWQkltOs7yGhXTa+jKte4bcrhceJJY6nII= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org