$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa File: x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa (raw, json) Hash identifier: ir9hAKH7jvqZVFZgaO0OnwYnt/rG1RswE93OOZjwEiE= Subject key identifier: C7:64:7B:80:C4:58:14:01:0B:E7:29:97:43:A2:DD:E9:B5:EE:1A:10 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DF3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa Signing time: Fri 01 Sep 2023 10:15:29 +0000 ROA not before: Fri 01 Sep 2023 10:15:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.64.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7667 (0x1df3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C7647B80C45814010BE7299743A2DDE9B5EE1A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:f8:44:2b:2c:2b:56:e0:8a:cf:9c:72:b1: 26:82:54:a1:44:5b:36:f2:06:41:9a:0c:d0:a9:cf: a1:5a:0f:90:90:53:84:fd:c0:6a:95:eb:cf:f4:a8: 76:d8:e2:58:c8:f2:cd:2d:b3:c8:08:a3:79:80:16: aa:55:00:53:d8:8c:52:11:03:8a:9d:28:90:01:9e: fc:5e:b6:ef:9f:64:db:ee:77:2b:d8:94:72:9d:d4: f0:7d:05:f2:d1:05:20:4b:bb:0e:9b:bb:74:dd:3a: 1a:4c:01:56:6c:fa:ba:1b:b3:0e:1a:e6:32:8a:45: 22:0f:34:95:47:b0:44:7b:3a:40:4d:f1:bd:62:eb: 54:ed:06:b4:da:74:55:e7:64:67:27:be:48:8a:ea: 46:cc:99:82:ff:e7:77:77:b0:71:85:d4:4d:3c:10: b0:3c:cc:cd:f9:d3:43:01:c1:ff:a8:e5:65:41:d4: bd:31:72:4e:71:19:93:a4:36:f8:f1:95:bc:21:67: 0d:7f:5e:2d:77:b5:ee:a1:a1:c2:a1:11:48:62:f4: 8e:f4:c8:82:ee:8a:3c:15:2b:4e:93:94:ca:f3:73: 98:60:fd:d7:6b:ae:c9:50:3e:56:3b:a3:dc:3f:b3: 28:ee:7f:97:eb:47:59:b6:e0:97:2e:f5:14:2c:18: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:64:7B:80:C4:58:14:01:0B:E7:29:97:43:A2:DD:E9:B5:EE:1A:10 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.28.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:fa:3d:be:07:4b:b2:dc:8b:bd:9f:c9:a6:72:d6:96:be:d2: 3f:e2:53:3c:56:26:09:11:2d:64:c9:e1:99:e1:44:62:d4:10: 69:c8:66:f4:ae:62:dc:27:9a:cb:79:f1:a2:db:34:c0:bb:56: 34:23:77:8c:b1:46:3a:8f:e3:da:b4:f1:d4:15:17:fe:2e:3a: 70:e1:f7:e2:58:ca:a3:69:2d:7d:94:cf:7b:43:2d:9b:7a:2f: 7c:5c:8f:00:ff:17:45:4c:6c:e8:cf:da:46:86:cd:67:0c:af: 74:25:cc:20:cc:a6:ef:f1:49:b3:b7:80:2e:e7:5d:ba:f8:15: ab:b5:44:4a:18:ea:40:20:15:df:9b:a9:2c:e8:e1:60:8d:42: 6e:9e:2d:4d:03:6f:f0:82:fb:bb:0f:e7:45:78:65:08:6b:6c: 05:23:00:a0:bb:2e:36:bb:09:f9:b0:25:c1:4e:40:8b:0b:07: 70:9f:0f:b9:c3:ca:c1:60:44:65:07:d1:ff:15:ca:02:a0:00: d7:90:d8:b1:92:f3:58:ef:00:6c:40:11:bd:b9:cf:36:8f:be: cb:56:47:d6:24:ba:b2:c8:f8:a4:3e:f8:20:41:18:59:0b:ec: 79:c2:4a:e3:2c:58:8f:0f:1b:3a:3e:65:a4:b2:c4:96:cd:66: 2c:af:a0:47 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM3NjQ3QjgwQzQ1ODE0 MDEwQkU3Mjk5NzQzQTJEREU5QjVFRTFBMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9UvhEKywrVuCKz5xysSaCVKFEWzbyBkGaDNCpz6FaD5CQU4T9 wGqV68/0qHbY4ljI8s0ts8gIo3mAFqpVAFPYjFIRA4qdKJABnvxetu+fZNvudyvY lHKd1PB9BfLRBSBLuw6bu3TdOhpMAVZs+robsw4a5jKKRSIPNJVHsER7OkBN8b1i 61TtBrTadFXnZGcnvkiK6kbMmYL/53d3sHGF1E08ELA8zM3500MBwf+o5WVB1L0x ck5xGZOkNvjxlbwhZw1/Xi13te6hocKhEUhi9I70yILuijwVK06TlMrzc5hg/ddr rslQPlY7o9w/syjuf5frR1m24Jcu9RQsGNnlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUx2R7gMRYFAEL5ymXQ6Ld6bXuGhAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3gyUjdnTVJZRkFFTDV5bVhR NkxkNmJYdUdoQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QBwwDQYJKoZIhvcNAQELBQADggEBADz6Pb4HS7Lci72fyaZy1pa+0j/iUzxWJgkR LWTJ4ZnhRGLUEGnIZvSuYtwnmst58aLbNMC7VjQjd4yxRjqP49q08dQVF/4uOnDh 9+JYyqNpLX2Uz3tDLZt6L3xcjwD/F0VMbOjP2kaGzWcMr3QlzCDMpu/xSbO3gC7n Xbr4Fau1REoY6kAgFd+bqSzo4WCNQm6eLU0Db/CC+7sP50V4ZQhrbAUjAKC7Lja7 CfmwJcFOQIsLB3CfD7nDysFgRGUH0f8VygKgANeQ2LGS81jvAGxAEb25zzaPvstW R9YkurLI+KQ++CBBGFkL7HnCSuMsWI8PGzo+ZaSyxJbNZiyvoEc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org