$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa File: s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa (raw, json) Hash identifier: sMcX69igmyzrsK35itRRiBptL+hZftXcfSg/JfMw6yc= Subject key identifier: B3:85:2E:12:7C:13:F5:4A:99:9B:89:CC:76:C8:C3:B8:B8:72:B5:94 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E5D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa Signing time: Fri 01 Sep 2023 10:15:56 +0000 ROA not before: Fri 01 Sep 2023 10:15:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 61.64.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7773 (0x1e5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B3852E127C13F54A999B89CC76C8C3B8B872B594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:be:52:2c:4e:20:4f:9f:b9:3e:88:9d:0b:70: f7:93:8e:74:7b:05:e6:13:9b:4f:96:e1:8f:e6:f4: 7e:49:57:f5:04:e9:95:ea:33:f6:15:40:3a:c5:d7: 5f:21:01:8f:38:74:a3:9b:ad:ee:b0:45:d5:ae:6b: 3e:ed:71:b5:27:bf:15:e1:7b:fb:6c:65:21:17:15: 2d:d6:c4:56:2f:c3:59:29:8e:c3:2e:c0:06:f7:5b: 85:5b:f5:d6:f9:eb:87:eb:8e:53:d3:c4:da:1a:ed: 7e:1b:70:0d:53:7f:8f:94:b6:0a:ba:b4:db:95:ac: f4:a2:8c:04:ca:2f:08:dd:c8:5d:46:d6:26:7d:7c: 7f:a5:07:bb:2e:00:c0:4b:d4:49:0a:28:62:6a:a3: 72:07:7a:86:4c:ac:22:c4:88:09:9e:14:b9:10:ef: ca:21:bf:53:98:91:5f:2c:2b:fb:89:d3:e4:69:24: a8:29:ca:9c:4e:7a:8c:30:92:b1:78:6f:2d:be:d5: 19:e9:9b:6b:24:c2:ef:d0:f5:83:40:d3:94:5d:6f: 55:03:79:f8:f2:85:c3:7e:89:06:6f:02:d0:f4:dd: ea:89:95:3a:20:cb:3d:70:26:e0:c9:f1:22:c5:ca: b8:28:73:86:f2:a9:4a:02:8c:4e:30:29:0b:9e:f4: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:85:2E:12:7C:13:F5:4A:99:9B:89:CC:76:C8:C3:B8:B8:72:B5:94 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.12.0/22 Signature Algorithm: sha256WithRSAEncryption 03:76:d3:1f:e7:fc:8c:34:50:9c:d2:b2:c8:c6:93:31:09:a8: 5c:c7:7d:b7:d0:bd:a0:63:fa:34:8f:e4:26:e6:f7:23:47:f2: 93:64:3d:39:68:72:c8:ee:72:dd:0f:0e:08:01:db:70:0b:0a: 0c:98:d5:29:29:c2:c1:c6:a2:9a:53:95:25:87:f4:35:5b:61: ca:40:55:67:d6:3e:03:a4:1c:98:3e:6b:6a:98:61:b5:b3:ac: 5c:d8:69:4e:21:c3:47:f0:47:fd:f4:f9:f9:aa:51:35:01:23: c4:5d:38:0e:c4:0e:93:ff:46:06:bf:ed:d8:a4:bd:35:37:5e: 2d:ca:c6:2c:c8:56:26:78:06:1f:a6:63:a4:0a:4f:8e:f2:e5: b4:77:71:04:60:1f:ec:dd:b9:8a:b2:bb:79:24:0d:cd:92:ef: 1a:61:08:7f:89:25:09:52:db:45:40:03:13:b1:13:cf:94:e7: ad:eb:8e:11:c9:b0:76:1f:2d:f7:b2:65:36:75:db:12:e6:65: ff:4a:a7:b1:a4:b9:10:78:0d:98:6d:02:1c:cf:8c:06:09:b4: 8f:f0:fb:f3:15:0a:0c:80:7a:2f:02:28:94:71:17:76:0f:0b: 57:92:98:6c:49:c1:5f:93:d7:e9:92:39:20:c3:50:1d:1f:81: bc:74:87:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIzODUyRTEyN0MxM0Y1 NEE5OTlCODlDQzc2QzhDM0I4Qjg3MkI1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9vlIsTiBPn7k+iJ0LcPeTjnR7BeYTm0+W4Y/m9H5JV/UE6ZXq M/YVQDrF118hAY84dKObre6wRdWuaz7tcbUnvxXhe/tsZSEXFS3WxFYvw1kpjsMu wAb3W4Vb9db564frjlPTxNoa7X4bcA1Tf4+Utgq6tNuVrPSijATKLwjdyF1G1iZ9 fH+lB7suAMBL1EkKKGJqo3IHeoZMrCLEiAmeFLkQ78ohv1OYkV8sK/uJ0+RpJKgp ypxOeowwkrF4by2+1Rnpm2skwu/Q9YNA05Rdb1UDefjyhcN+iQZvAtD03eqJlTog yz1wJuDJ8SLFyrgoc4byqUoCjE4wKQue9AqrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUs4UuEnwT9UqZm4nMdsjDuLhytZQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3M0VXVFbndUOVVxWm00bk1k c2pEdUxoeXRaUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QAwwDQYJKoZIhvcNAQELBQADggEBAAN20x/n/Iw0UJzSssjGkzEJqFzHfbfQvaBj +jSP5Cbm9yNH8pNkPTlocsjuct0PDggB23ALCgyY1SkpwsHGoppTlSWH9DVbYcpA VWfWPgOkHJg+a2qYYbWzrFzYaU4hw0fwR/30+fmqUTUBI8RdOA7EDpP/Rga/7dik vTU3Xi3KxizIViZ4Bh+mY6QKT47y5bR3cQRgH+zduYqyu3kkDc2S7xphCH+JJQlS 20VAAxOxE8+U563rjhHJsHYfLfeyZTZ12xLmZf9Kp7GkuRB4DZhtAhzPjAYJtI/w +/MVCgyAei8CKJRxF3YPC1eSmGxJwV+T1+mSOSDDUB0fgbx0h0k= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org