$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa File: wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa (raw, json) Hash identifier: m8nVl6adS0K0Ku6+7SCfjtZSEPJ8wjd5RnCLVIfLLRI= Subject key identifier: C2:E6:95:2C:27:F6:CB:36:D7:84:B0:06:A5:EF:D8:D5:8D:8C:D3:48 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D8D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa Signing time: Fri 01 Sep 2023 10:15:00 +0000 ROA not before: Fri 01 Sep 2023 10:15:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 119.77.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7565 (0x1d8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C2E6952C27F6CB36D784B006A5EFD8D58D8CD348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:06:8a:5b:ad:97:7f:73:e4:e6:fd:dd:18: d6:d6:53:ec:e9:66:67:49:20:b1:35:88:fb:30:df: e6:ec:62:21:8d:c5:a9:2c:e4:e1:2f:7d:68:33:33: c5:58:97:e6:8a:2b:d1:aa:8d:22:7a:6e:46:c2:3d: fa:40:dd:29:81:1b:18:53:d1:cf:72:40:c8:72:1b: a7:b6:56:dc:4a:cb:1c:fe:f7:92:b9:18:b5:9d:7c: 54:6c:4b:14:80:b1:80:30:fc:f4:f0:1b:25:a3:c4: 1b:ba:22:b9:44:91:8f:7a:9d:f6:d2:d5:2d:a2:36: e3:eb:14:02:50:36:0c:eb:2d:3f:98:c5:eb:d7:02: 06:61:c9:7d:44:00:81:c4:6f:bc:49:a3:e9:bd:3b: b5:61:f0:d2:77:41:b2:b1:d0:fc:e0:83:fc:22:92: 35:57:52:97:c2:e4:4b:ac:44:6a:ec:be:0f:48:f3: 14:d0:43:8b:da:7a:3d:01:48:9d:e9:b7:1d:c7:93: 59:86:8a:4d:2e:ba:66:5e:ff:cd:5e:1a:1b:74:24: b8:7e:14:4f:45:0a:8a:9e:66:6c:de:ac:49:41:2b: de:41:53:38:fa:66:e5:91:a4:ff:5a:91:29:16:01: 1f:ae:fe:f5:a4:71:91:19:fb:cd:c5:e7:5d:91:5b: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E6:95:2C:27:F6:CB:36:D7:84:B0:06:A5:EF:D8:D5:8D:8C:D3:48 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.160.0/19 Signature Algorithm: sha256WithRSAEncryption 12:67:e2:2c:03:12:46:3a:22:9c:75:3b:f5:1d:de:33:e8:8d: fb:aa:64:25:32:62:3d:9e:78:27:70:29:50:aa:79:6f:11:a0: 46:55:64:ae:ea:87:cb:e4:71:a8:1b:52:1d:21:a5:95:b5:60: 7a:30:52:ab:74:99:0c:0d:e7:2c:10:61:0a:e3:a7:f0:52:85: dd:9f:c9:99:bc:cc:61:0a:e2:4a:d7:48:38:d5:42:81:c9:c5: ee:8e:8c:d4:60:47:84:c8:32:51:31:0d:d7:b6:4b:b2:50:68: 94:88:cc:d6:db:94:a4:e0:3d:b4:53:d5:39:fa:22:2e:cc:25: 07:f2:00:53:6c:67:18:e3:28:09:4f:fe:b0:7d:28:14:82:ac: 6c:8f:1e:02:06:e1:ea:bc:e6:bb:06:8b:ef:9e:7f:a2:bd:b5: e1:a9:89:0c:ec:01:bb:a8:f5:2f:0c:5f:28:94:83:75:60:74: 01:ab:af:86:0d:3f:68:e1:91:19:71:7b:fd:d8:09:a1:32:3b: c2:fd:27:1e:84:5c:e0:dd:11:5d:5c:a4:01:30:96:b7:3e:4a: de:12:80:3b:b6:eb:a7:ff:a5:e6:4c:76:25:87:24:88:a1:01: c4:bd:e4:ec:99:97:20:18:7e:90:e8:f5:f9:ab:3d:eb:96:9f: 37:2c:19:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMyRTY5NTJDMjdGNkNC MzZENzg0QjAwNkE1RUZEOEQ1OEQ4Q0QzNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYCQaKW62Xf3Pk5v3dGNbWU+zpZmdJILE1iPsw3+bsYiGNxaks 5OEvfWgzM8VYl+aKK9GqjSJ6bkbCPfpA3SmBGxhT0c9yQMhyG6e2VtxKyxz+95K5 GLWdfFRsSxSAsYAw/PTwGyWjxBu6IrlEkY96nfbS1S2iNuPrFAJQNgzrLT+YxevX AgZhyX1EAIHEb7xJo+m9O7Vh8NJ3QbKx0Pzgg/wikjVXUpfC5EusRGrsvg9I8xTQ Q4vaej0BSJ3ptx3Hk1mGik0uumZe/81eGht0JLh+FE9FCoqeZmzerElBK95BUzj6 ZuWRpP9akSkWAR+u/vWkcZEZ+83F512RW/45AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwuaVLCf2yzbXhLAGpe/Y1Y2M00gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3d1YVZMQ2YyeXpiWGhMQUdw ZV9ZMVkyTTAwZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3 TaAwDQYJKoZIhvcNAQELBQADggEBABJn4iwDEkY6Ipx1O/Ud3jPojfuqZCUyYj2e eCdwKVCqeW8RoEZVZK7qh8vkcagbUh0hpZW1YHowUqt0mQwN5ywQYQrjp/BShd2f yZm8zGEK4krXSDjVQoHJxe6OjNRgR4TIMlExDde2S7JQaJSIzNbblKTgPbRT1Tn6 Ii7MJQfyAFNsZxjjKAlP/rB9KBSCrGyPHgIG4eq85rsGi++ef6K9teGpiQzsAbuo 9S8MXyiUg3VgdAGrr4YNP2jhkRlxe/3YCaEyO8L9Jx6EXODdEV1cpAEwlrc+St4S gDu266f/peZMdiWHJIihAcS95OyZlyAYfpDo9fmrPeuWnzcsGVI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org