$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pmJRkZozVHxwYBr5g70ekNfjyc4.roa File: pmJRkZozVHxwYBr5g70ekNfjyc4.roa (raw, json) Hash identifier: BCgieVYvVe8fb3U56GcoBgYMwDFtZGdfFC5Kjv1+IyQ= Subject key identifier: A6:62:51:91:9A:33:54:7C:70:60:1A:F9:83:BD:1E:90:D7:E3:C9:CE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D5F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pmJRkZozVHxwYBr5g70ekNfjyc4.roa Signing time: Fri 01 Sep 2023 10:14:43 +0000 ROA not before: Fri 01 Sep 2023 10:14:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.61.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7519 (0x1d5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A66251919A33547C70601AF983BD1E90D7E3C9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:82:42:93:39:d0:88:c1:6a:00:51:0b:79: ca:c4:df:2c:b7:a5:c3:a7:a3:d3:22:b5:fc:66:cc: 81:4b:b4:5d:4b:7b:5f:45:7c:1e:30:1f:f1:06:b1: 3a:52:70:5d:6c:ce:50:f6:dd:3e:ca:be:77:00:b0: ab:de:2f:3a:26:4e:ed:4f:71:e9:a4:7d:b2:68:47: a7:60:04:a0:d3:64:bc:a5:b6:b7:c0:88:19:9f:bf: 80:9a:ff:8c:e4:6c:86:d2:1e:b9:70:db:60:09:0d: 38:38:82:b1:e2:61:a6:a8:31:79:85:dc:46:c7:5e: 11:1a:e8:4b:24:52:4b:39:3d:49:83:74:0d:83:61: dd:3e:4e:a3:61:b4:0a:76:a5:14:ba:59:db:9a:2b: e9:2a:53:51:f9:58:24:6c:75:43:c0:9c:df:90:67: 63:ef:83:77:e5:82:72:1a:93:e4:10:8c:a9:e5:8c: 5d:3c:db:ba:28:53:5e:1d:05:9f:7d:c5:8e:b7:5e: 42:2c:5d:a7:53:ca:56:d0:16:a1:0a:46:21:4b:72: fe:2d:e0:0d:00:eb:e4:83:f4:2b:85:d4:60:88:98: e6:04:62:4b:a7:f0:a9:d0:3c:f9:c5:e8:18:b6:18: e6:99:56:2c:b7:7a:b7:f0:50:0e:26:e6:37:0b:66: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:62:51:91:9A:33:54:7C:70:60:1A:F9:83:BD:1E:90:D7:E3:C9:CE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pmJRkZozVHxwYBr5g70ekNfjyc4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/22 Signature Algorithm: sha256WithRSAEncryption 57:f9:ed:d0:3f:ed:57:7d:dd:e0:ae:fa:c6:06:a2:68:77:0c: 8a:bf:55:f9:df:25:f3:9a:6f:dc:73:95:51:ea:59:a6:38:71: a6:1d:b1:55:ea:bc:79:02:37:6c:ad:b4:e0:21:cd:81:d7:42: 6d:fe:ba:47:8d:e4:3a:3d:a0:22:63:35:ac:8b:19:4e:c8:61: c8:9c:dc:30:2c:cd:45:27:03:b3:df:12:cf:cf:1f:06:42:92: f0:a4:3c:29:90:2d:32:fc:3b:9b:06:2f:ff:0f:b2:1b:38:78: 61:b0:2b:c7:66:ea:16:d8:14:36:2a:96:07:0c:bc:ec:5b:8b: 79:83:89:22:2e:29:48:ea:2c:87:7b:db:aa:26:27:8e:60:49: 12:cb:91:06:18:e9:5c:2e:f1:9b:bf:11:46:e8:f0:5d:43:4b: 25:9c:9b:38:aa:32:4f:48:1f:72:94:24:cb:a4:2d:fd:55:05: 8b:fe:07:54:97:83:5c:9b:89:70:43:b4:85:09:20:a8:84:73: 21:c7:35:7a:e7:be:53:e4:31:bc:e8:6f:b2:76:b5:38:04:f9: eb:c1:a6:9f:18:19:d2:65:d9:ae:73:cd:24:f9:17:0d:bb:19: 0a:93:ab:43:43:51:96:4e:f5:88:14:f5:76:06:69:c8:94:ee: 39:41:58:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2NjI1MTkxOUEzMzU0 N0M3MDYwMUFGOTgzQkQxRTkwRDdFM0M5Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyfIJCkznQiMFqAFELecrE3yy3pcOno9MitfxmzIFLtF1Le19F fB4wH/EGsTpScF1szlD23T7KvncAsKveLzomTu1PcemkfbJoR6dgBKDTZLyltrfA iBmfv4Ca/4zkbIbSHrlw22AJDTg4grHiYaaoMXmF3EbHXhEa6EskUks5PUmDdA2D Yd0+TqNhtAp2pRS6WduaK+kqU1H5WCRsdUPAnN+QZ2Pvg3flgnIak+QQjKnljF08 27ooU14dBZ99xY63XkIsXadTylbQFqEKRiFLcv4t4A0A6+SD9CuF1GCImOYEYkun 8KnQPPnF6Bi2GOaZViy3erfwUA4m5jcLZgM/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpmJRkZozVHxwYBr5g70ekNfjyc4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BtSlJrWm96Vkh4d1lCcjVn NzBla05manljNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PdAwDQYJKoZIhvcNAQELBQADggEBAFf57dA/7Vd93eCu+sYGomh3DIq/VfnfJfOa b9xzlVHqWaY4caYdsVXqvHkCN2yttOAhzYHXQm3+ukeN5Do9oCJjNayLGU7IYcic 3DAszUUnA7PfEs/PHwZCkvCkPCmQLTL8O5sGL/8Pshs4eGGwK8dm6hbYFDYqlgcM vOxbi3mDiSIuKUjqLId726omJ45gSRLLkQYY6Vwu8Zu/EUbo8F1DSyWcmziqMk9I H3KUJMukLf1VBYv+B1SXg1ybiXBDtIUJIKiEcyHHNXrnvlPkMbzob7J2tTgE+evB pp8YGdJl2a5zzST5Fw27GQqTq0NDUZZO9YgU9XYGaciU7jlBWOw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org