$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa File: yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa (raw, json) Hash identifier: 5wsp/r78025V3eWVzBxZwC1ABugwY3NqS48pwFhTr1U= Subject key identifier: C9:7C:30:2C:4E:B4:60:FC:19:4F:CA:F8:B0:CA:DB:AA:24:97:F1:08 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DAB Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa Signing time: Fri 01 Sep 2023 10:15:08 +0000 ROA not before: Fri 01 Sep 2023 10:15:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 122.100.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7595 (0x1dab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C97C302C4EB460FC194FCAF8B0CADBAA2497F108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f0:3c:90:5f:e9:27:52:e9:1f:d8:a2:59:44: 89:ba:e2:70:f7:36:1f:13:e9:cd:2f:00:8b:fc:f8: 4d:56:f7:0a:e6:0c:fe:83:f9:eb:d0:3b:5f:39:bf: 5c:66:0a:e0:10:19:a5:0d:05:d6:eb:c1:d9:57:49: 5f:69:b2:5b:89:f5:3a:a2:75:c5:2b:9c:03:a3:3c: e2:b7:e5:b7:f5:9d:9a:14:0b:02:e8:09:78:92:15: ea:17:b8:b5:c2:72:d3:b5:29:db:40:26:49:ce:37: 72:75:33:30:a1:cf:12:40:90:c3:82:00:9e:c1:4a: 2f:b9:61:b6:79:66:44:e9:c9:b8:27:2c:c8:e7:20: 53:81:3c:c1:79:ba:be:23:9a:4c:8e:b8:e1:f1:32: 5c:fd:11:98:12:cb:35:58:c8:f0:b3:6f:c4:2a:d5: 5d:81:21:45:b1:59:9f:0d:0e:08:73:1a:df:2c:ec: 55:f1:fb:64:49:a9:13:08:e7:d7:cc:bd:d5:17:c0: b0:c6:0d:d2:72:7a:16:b7:91:43:ed:00:39:70:2e: 22:e4:8d:ff:19:66:94:6a:b7:0b:ad:0b:b7:43:f2: bf:6f:bb:95:e8:ce:15:63:36:cd:dc:a2:10:62:80: 2c:fd:85:de:2d:06:a8:99:e3:b5:13:0b:91:b4:19: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:30:2C:4E:B4:60:FC:19:4F:CA:F8:B0:CA:DB:AA:24:97:F1:08 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.96.0/19 Signature Algorithm: sha256WithRSAEncryption 83:67:6d:2e:4e:c0:71:6f:61:21:bb:b8:11:84:c2:d4:58:5d: f4:f6:69:f3:f4:ab:de:95:55:dd:0f:9f:69:d1:d6:a9:97:23: e4:ad:d3:ce:ea:c8:12:24:48:21:7b:71:d3:2c:4b:80:f1:7f: 4c:98:f7:2b:c4:f6:ba:76:58:d6:4e:18:d6:57:0b:a5:71:c6: 5d:5c:5c:11:33:f5:31:af:2e:e5:c7:d9:51:42:32:11:88:e3: 88:b3:a6:89:7c:0b:fc:ed:b7:57:5a:5e:c3:3b:e5:6c:07:ca: 46:ff:04:d1:b1:7b:f1:86:3e:92:df:0f:b8:21:ed:dd:5e:a0: 9b:87:7f:74:3b:31:7a:a0:36:fc:6e:53:ae:95:f5:05:c0:a2: 2f:53:9d:e0:52:d4:7c:71:64:7c:f1:49:e1:8b:a0:6a:3f:70: 2e:bd:5c:e9:8b:84:8a:a1:17:b8:60:0e:15:df:94:84:05:35: 80:f0:69:9e:cd:c4:a8:0a:72:d4:d1:8f:39:5c:4b:1a:91:af: c9:a1:fe:e3:f9:a7:b5:75:c0:ec:2e:a0:37:04:02:15:f0:4a: c1:4a:9a:2f:a8:39:57:0d:a6:74:e4:18:c1:73:ae:70:4e:36: f2:98:06:30:30:98:ba:ff:aa:e8:8c:33:d2:bb:8a:dd:d5:ab: d0:af:c1:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM5N0MzMDJDNEVCNDYw RkMxOTRGQ0FGOEIwQ0FEQkFBMjQ5N0YxMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk8DyQX+knUukf2KJZRIm64nD3Nh8T6c0vAIv8+E1W9wrmDP6D +evQO185v1xmCuAQGaUNBdbrwdlXSV9psluJ9TqidcUrnAOjPOK35bf1nZoUCwLo CXiSFeoXuLXCctO1KdtAJknON3J1MzChzxJAkMOCAJ7BSi+5YbZ5ZkTpybgnLMjn IFOBPMF5ur4jmkyOuOHxMlz9EZgSyzVYyPCzb8Qq1V2BIUWxWZ8NDghzGt8s7FXx +2RJqRMI59fMvdUXwLDGDdJyeha3kUPtADlwLiLkjf8ZZpRqtwutC7dD8r9vu5Xo zhVjNs3cohBigCz9hd4tBqiZ47UTC5G0GdjFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyXwwLE60YPwZT8r4sMrbqiSX8QgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lYd3dMRTYwWVB3WlQ4cjRz TXJicWlTWDhRZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV6 ZGAwDQYJKoZIhvcNAQELBQADggEBAINnbS5OwHFvYSG7uBGEwtRYXfT2afP0q96V Vd0Pn2nR1qmXI+St087qyBIkSCF7cdMsS4Dxf0yY9yvE9rp2WNZOGNZXC6Vxxl1c XBEz9TGvLuXH2VFCMhGI44izpol8C/ztt1daXsM75WwHykb/BNGxe/GGPpLfD7gh 7d1eoJuHf3Q7MXqgNvxuU66V9QXAoi9TneBS1HxxZHzxSeGLoGo/cC69XOmLhIqh F7hgDhXflIQFNYDwaZ7NxKgKctTRjzlcSxqRr8mh/uP5p7V1wOwuoDcEAhXwSsFK mi+oOVcNpnTkGMFzrnBONvKYBjAwmLr/quiMM9K7it3Vq9CvwZI= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org