$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTx_H_PYRYb77sxPNZT2ih9Dl04.roa File: tTx_H_PYRYb77sxPNZT2ih9Dl04.roa (raw, json) Hash identifier: 6IlEAYRJiJP50/H4ON3Dg2Mh8Kx0w3B14xFQULr4uFw= Subject key identifier: B5:3C:7F:1F:F3:D8:45:86:FB:EE:CC:4F:35:94:F6:8A:1F:43:97:4E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DB7 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTx_H_PYRYb77sxPNZT2ih9Dl04.roa Signing time: Fri 01 Sep 2023 10:15:11 +0000 ROA not before: Fri 01 Sep 2023 10:15:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 61.56.160.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7607 (0x1db7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B53C7F1FF3D84586FBEECC4F3594F68A1F43974E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:d2:33:fc:fd:35:21:e6:e3:42:7c:08:2d: 8b:3a:80:aa:2e:94:fb:49:0d:0a:c5:30:45:19:14: 46:bc:81:de:53:af:19:5f:e0:39:90:d2:46:29:10: f2:6f:26:1b:16:38:58:3c:87:b6:68:60:eb:ee:bb: 55:a0:14:26:ac:6b:e2:e4:15:e8:bb:46:ce:1e:bd: 2f:bb:86:92:03:a7:be:5a:bf:c9:e6:8d:14:95:0c: 87:0a:56:0d:2b:1e:ae:fb:2e:2e:46:e8:65:2a:6c: 17:54:0c:d1:2c:4d:98:4f:e6:8b:e6:0b:0d:28:a3: e3:f4:34:5f:da:5a:d7:ce:da:8c:06:18:3b:b2:d6: e6:88:72:69:14:4b:fd:3b:b7:76:a1:07:08:0d:8e: 02:42:3f:0b:b3:15:17:41:eb:a8:83:8c:97:46:b5: ad:6e:24:04:88:65:6e:92:e2:93:ca:25:88:42:50: 63:a4:94:f8:4a:c1:99:3f:f8:94:69:d7:de:7f:d0: 5b:ef:7a:16:a7:40:45:9e:f9:9d:b6:5e:ab:ff:8f: b3:31:f1:cd:bd:c1:0f:b9:51:4c:fb:60:d2:8b:d0: 30:3e:18:e3:c7:20:42:10:11:4c:7d:8b:4f:8c:c2: a1:21:fb:28:47:2f:65:5d:91:42:ae:8f:50:c1:3d: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3C:7F:1F:F3:D8:45:86:FB:EE:CC:4F:35:94:F6:8A:1F:43:97:4E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTx_H_PYRYb77sxPNZT2ih9Dl04.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.160.0/19 Signature Algorithm: sha256WithRSAEncryption 4d:fc:43:1b:e2:e7:eb:ae:da:26:76:29:58:cd:d1:d2:ff:94: 6f:72:34:b5:ff:71:aa:d0:01:2f:1b:5e:9a:2a:aa:6c:44:48: 27:11:69:e1:bf:6a:3f:66:26:aa:9d:eb:bd:3f:f8:ea:55:7f: cd:55:ba:54:f3:b2:21:b5:49:83:a8:7a:5b:ab:87:51:9b:4e: 78:93:4e:3e:e5:6b:01:08:af:9f:6c:dd:f4:83:ca:63:45:92: a3:26:25:b7:11:26:b1:21:51:7f:01:2c:a1:ce:57:6a:35:0d: 64:cd:7f:a4:5b:52:3f:34:3e:b7:c3:03:f0:ba:88:00:db:2b: 37:b3:20:d5:84:d0:e5:3d:fd:47:76:8b:9e:97:aa:08:bc:2e: 26:03:d1:a6:f8:75:08:a1:72:cd:0b:9c:6c:dd:87:75:27:7c: d1:da:c3:3a:b8:a8:2e:0d:9e:47:06:31:4d:9e:59:8f:24:28: 24:af:0f:24:0b:e7:ee:67:f0:d2:d5:54:cb:45:d1:31:78:78: d9:89:d2:ae:fa:08:ff:e3:be:ee:0a:1a:6b:d8:f5:ae:f4:38: 80:86:af:3d:cd:58:1e:b0:e1:f6:70:1f:4a:a4:27:f7:10:3f: 28:4d:e4:dd:ad:6f:7c:be:22:2e:7b:f1:4e:31:06:fe:81:03: 42:8c:6b:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI1M0M3RjFGRjNEODQ1 ODZGQkVFQ0M0RjM1OTRGNjhBMUY0Mzk3NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChDtIz/P01IebjQnwILYs6gKoulPtJDQrFMEUZFEa8gd5Trxlf 4DmQ0kYpEPJvJhsWOFg8h7ZoYOvuu1WgFCasa+LkFei7Rs4evS+7hpIDp75av8nm jRSVDIcKVg0rHq77Li5G6GUqbBdUDNEsTZhP5ovmCw0oo+P0NF/aWtfO2owGGDuy 1uaIcmkUS/07t3ahBwgNjgJCPwuzFRdB66iDjJdGta1uJASIZW6S4pPKJYhCUGOk lPhKwZk/+JRp195/0FvvehanQEWe+Z22Xqv/j7Mx8c29wQ+5UUz7YNKL0DA+GOPH IEIQEUx9i0+MwqEh+yhHL2VdkUKuj1DBPaedAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtTx/H/PYRYb77sxPNZT2ih9Dl04wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RUeF9IX1BZUlliNzdzeFBO WlQyaWg5RGwwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 OKAwDQYJKoZIhvcNAQELBQADggEBAE38Qxvi5+uu2iZ2KVjN0dL/lG9yNLX/carQ AS8bXpoqqmxESCcRaeG/aj9mJqqd670/+OpVf81VulTzsiG1SYOoelurh1GbTniT Tj7lawEIr59s3fSDymNFkqMmJbcRJrEhUX8BLKHOV2o1DWTNf6RbUj80PrfDA/C6 iADbKzezINWE0OU9/Ud2i56Xqgi8LiYD0ab4dQihcs0LnGzdh3UnfNHawzq4qC4N nkcGMU2eWY8kKCSvDyQL5+5n8NLVVMtF0TF4eNmJ0q76CP/jvu4KGmvY9a70OICG rz3NWB6w4fZwH0qkJ/cQPyhN5N2tb3y+Ii578U4xBv6BA0KMax8= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org