$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWQmJt3EqKJnNALMWop04AbaUlM.roa File: tWQmJt3EqKJnNALMWop04AbaUlM.roa (raw, json) Hash identifier: c9LQrKv30PX5JVNmgLj8mZ2HoRzPjtx5uVgN/FY9/4o= Subject key identifier: B5:64:26:26:DD:C4:A8:A2:67:34:02:CC:5A:8A:74:E0:06:DA:52:53 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E42 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWQmJt3EqKJnNALMWop04AbaUlM.roa Signing time: Fri 01 Sep 2023 10:15:50 +0000 ROA not before: Fri 01 Sep 2023 10:15:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.61.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7746 (0x1e42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B5642626DDC4A8A2673402CC5A8A74E006DA5253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:61:4c:39:f1:27:3d:18:f6:c8:9f:62:4b: d9:9d:e2:37:a8:5c:76:8b:4e:71:de:64:36:63:92: 65:ef:62:95:2c:e6:a3:48:8c:fc:88:8c:0e:ce:00: 95:93:46:56:9a:b2:2d:11:a7:10:dc:eb:64:67:f3: 55:a1:d0:39:e9:78:4c:a5:73:bf:29:00:1d:1d:8f: dd:22:b8:de:ed:66:b5:67:44:ec:95:13:ea:4c:dd: 81:ca:80:b0:46:7b:94:30:c9:bc:00:9e:55:eb:64: 0f:77:63:5e:1c:39:2f:9b:4a:aa:a7:b1:70:04:ba: f4:e3:72:5e:eb:25:1f:d9:d8:cd:e4:44:9b:1d:b7: 5b:d2:97:ea:96:e1:f7:a6:ab:24:a2:3b:27:25:88: 7f:45:a1:f3:12:16:d4:dd:a1:9a:bd:1d:c7:22:2a: 9c:58:a9:70:74:7f:74:50:b6:4d:06:db:68:56:3d: 80:9b:e4:9b:b2:f4:84:02:0e:84:4e:80:d2:27:f9: 29:7e:16:47:0a:95:13:6b:a2:9f:16:35:9f:39:d6: dc:8d:b0:17:19:0a:e4:f2:92:a0:d6:da:b1:76:8b: 8f:e3:2f:21:95:8d:49:b2:6d:27:44:5b:87:f0:37: 3a:7c:da:bf:e8:30:76:35:f0:95:db:4c:aa:48:cd: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:64:26:26:DD:C4:A8:A2:67:34:02:CC:5A:8A:74:E0:06:DA:52:53 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWQmJt3EqKJnNALMWop04AbaUlM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.212.0/22 Signature Algorithm: sha256WithRSAEncryption 39:e2:9c:b5:b4:61:d8:54:73:6e:58:a7:38:4a:6b:19:a9:7f: 22:60:7d:3c:d5:9c:31:83:23:3a:f6:13:e0:37:1e:e4:ca:47: c7:ba:39:6b:09:92:91:9d:a3:ef:a8:79:53:77:01:2e:6b:fc: 15:ea:59:4f:cb:87:2a:14:18:40:6a:18:b5:98:74:4e:f4:ad: aa:f6:7a:52:1f:63:30:5d:33:34:66:bd:1c:25:d7:18:0f:80: 8f:81:95:6a:9a:3e:bb:ae:ad:bf:c9:6a:db:f7:b1:48:44:d6: 75:be:35:a5:3d:ee:89:2d:81:42:46:76:1b:12:51:22:10:24: 64:9f:46:1a:e4:1d:80:03:c3:91:c8:1c:52:89:14:bd:54:06: 36:f8:99:a9:a0:a2:f2:ae:f5:61:a9:af:51:b2:b2:a3:b1:1e: a1:dc:0e:3a:13:8c:d9:af:e7:49:62:3c:3a:b8:ea:8f:c9:2c: dc:2d:64:be:04:07:52:1c:50:0c:a6:d1:9a:e5:44:5c:fd:8e: fd:fd:f2:4e:09:52:98:33:41:9d:cb:34:7b:84:d5:19:c7:4a: d8:13:b9:0a:62:f8:90:f7:8f:6b:9e:dd:68:21:79:cd:34:57: c8:e3:9e:16:6c:bf:1e:f8:a3:e8:ae:fa:f3:a3:23:bf:ee:9d: be:fa:0b:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI1NjQyNjI2RERDNEE4 QTI2NzM0MDJDQzVBOEE3NEUwMDZEQTUyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm6GFMOfEnPRj2yJ9iS9md4jeoXHaLTnHeZDZjkmXvYpUs5qNI jPyIjA7OAJWTRlaasi0RpxDc62Rn81Wh0DnpeEylc78pAB0dj90iuN7tZrVnROyV E+pM3YHKgLBGe5QwybwAnlXrZA93Y14cOS+bSqqnsXAEuvTjcl7rJR/Z2M3kRJsd t1vSl+qW4femqySiOycliH9FofMSFtTdoZq9HcciKpxYqXB0f3RQtk0G22hWPYCb 5Juy9IQCDoROgNIn+Sl+FkcKlRNrop8WNZ851tyNsBcZCuTykqDW2rF2i4/jLyGV jUmybSdEW4fwNzp82r/oMHY18JXbTKpIzRz7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtWQmJt3EqKJnNALMWop04AbaUlMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RXUW1KdDNFcUtKbk5BTE1X b3AwNEFiYVVsTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 PdQwDQYJKoZIhvcNAQELBQADggEBADninLW0YdhUc25YpzhKaxmpfyJgfTzVnDGD Izr2E+A3HuTKR8e6OWsJkpGdo++oeVN3AS5r/BXqWU/LhyoUGEBqGLWYdE70rar2 elIfYzBdMzRmvRwl1xgPgI+BlWqaPruurb/Jatv3sUhE1nW+NaU97oktgUJGdhsS USIQJGSfRhrkHYADw5HIHFKJFL1UBjb4mamgovKu9WGpr1GysqOxHqHcDjoTjNmv 50liPDq46o/JLNwtZL4EB1IcUAym0ZrlRFz9jv398k4JUpgzQZ3LNHuE1RnHStgT uQpi+JD3j2ue3Wghec00V8jjnhZsvx74o+iu+vOjI7/unb76C6M= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org