$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yuNlZ_jqi87vCdYFGWBRD96fOLo.roa File: yuNlZ_jqi87vCdYFGWBRD96fOLo.roa (raw, json) Hash identifier: r0ULzBfH9YUJnB/wydNFnCwG7Tqo6SeSEo0vdXxnSfg= Subject key identifier: CA:E3:65:67:F8:EA:8B:CE:EF:09:D6:05:19:60:51:0F:DE:9F:38:BA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EA6 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yuNlZ_jqi87vCdYFGWBRD96fOLo.roa Signing time: Fri 01 Sep 2023 10:16:19 +0000 ROA not before: Fri 01 Sep 2023 10:16:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4662 IP address blocks: 211.76.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7846 (0x1ea6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CAE36567F8EA8BCEEF09D6051960510FDE9F38BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ff:14:96:18:15:d3:51:20:01:bb:fc:91:09: 15:06:46:01:eb:10:ae:fd:71:0c:54:9f:c6:70:d2: 30:d6:ec:bc:07:76:bf:62:d6:ee:91:41:ae:8e:bf: 78:c0:00:0a:63:71:7a:0c:33:bf:f7:29:85:ab:a9: 19:eb:4b:39:5f:35:77:c5:46:23:13:af:40:ed:47: f5:69:1d:7d:ad:40:ee:5d:de:31:b4:56:d4:d8:7a: af:e9:9f:6a:2c:c8:df:b6:b2:6e:3f:3a:08:db:c8: 6e:81:2b:5f:f2:78:f8:2a:66:44:08:a8:e8:14:5e: 0e:5c:f7:e3:77:80:62:e5:1f:e7:b1:b1:86:82:ac: ee:38:5a:98:a7:de:07:26:1c:ab:81:6e:c3:5b:ce: 8f:a8:95:66:c3:55:62:6e:bd:fa:5a:59:af:57:ad: 5b:48:98:52:ff:ca:45:2a:31:16:bc:08:f0:e1:67: 0d:91:c0:90:9a:e3:aa:8b:01:ff:4d:f9:8d:16:8d: af:fb:82:15:e5:42:1d:dc:28:d1:09:1f:f3:05:80: 29:33:7d:b5:aa:54:e5:61:7d:18:39:f0:0c:d9:c5: d9:57:fb:61:37:5e:ba:89:35:8e:ab:95:9f:f0:70: 83:73:d9:31:0b:ca:0a:24:a4:59:d2:5f:30:31:3d: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:65:67:F8:EA:8B:CE:EF:09:D6:05:19:60:51:0F:DE:9F:38:BA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yuNlZ_jqi87vCdYFGWBRD96fOLo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5c:95:a5:4a:72:5b:b2:70:ce:26:66:13:dd:dc:b3:40:1d:fd: 36:8c:0d:81:bd:be:4c:2f:63:74:8c:21:9c:f9:a2:8d:29:a0: 0c:e0:cd:07:cb:78:b4:84:e6:06:db:ea:81:6e:ee:ae:81:bb: 59:8b:6f:a2:b9:ae:c2:0c:93:09:10:53:c3:ef:de:95:ee:b2: 30:f1:2e:c5:92:bc:58:d0:93:b5:5d:f2:bf:30:62:e9:56:73: b9:f0:29:ba:63:de:d0:1d:f3:62:c4:9e:72:1f:ff:62:99:c2: 2b:e5:ea:61:2e:29:be:b1:8b:40:32:d6:d6:65:23:73:57:d9: 7a:62:53:60:1b:65:1b:50:db:3c:51:7a:75:65:a4:04:d0:ad: 69:4d:26:d8:f3:d8:cf:d8:a6:24:ce:67:c6:57:c1:1d:1c:b1: 3f:cd:13:fb:5d:44:da:7a:c0:cb:26:c2:63:76:8c:5a:1f:b4: 7f:dd:08:12:fd:d0:fd:26:b7:f4:b4:a0:d8:fb:5c:65:c0:ba: 49:35:5f:ca:3e:2b:83:83:b2:8f:aa:00:52:b7:b1:cd:e1:26: 80:e3:7f:94:9b:27:50:14:d5:c2:6a:8a:c1:b8:2c:52:9c:e9: c0:3b:bf:be:18:e2:7a:02:37:5b:9c:01:3c:dc:54:fb:d7:3f: 69:a9:d9:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENBRTM2NTY3RjhFQThC Q0VFRjA5RDYwNTE5NjA1MTBGREU5RjM4QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDt/xSWGBXTUSABu/yRCRUGRgHrEK79cQxUn8Zw0jDW7LwHdr9i 1u6RQa6Ov3jAAApjcXoMM7/3KYWrqRnrSzlfNXfFRiMTr0DtR/VpHX2tQO5d3jG0 VtTYeq/pn2osyN+2sm4/OgjbyG6BK1/yePgqZkQIqOgUXg5c9+N3gGLlH+exsYaC rO44Wpin3gcmHKuBbsNbzo+olWbDVWJuvfpaWa9XrVtImFL/ykUqMRa8CPDhZw2R wJCa46qLAf9N+Y0Wja/7ghXlQh3cKNEJH/MFgCkzfbWqVOVhfRg58AzZxdlX+2E3 XrqJNY6rlZ/wcINz2TELygokpFnSXzAxPX8XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyuNlZ/jqi87vCdYFGWBRD96fOLowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3l1TmxaX2pxaTg3dkNkWUZH V0JSRDk2Zk9Mby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXT TCAwDQYJKoZIhvcNAQELBQADggEBAFyVpUpyW7JwziZmE93cs0Ad/TaMDYG9vkwv Y3SMIZz5oo0poAzgzQfLeLSE5gbb6oFu7q6Bu1mLb6K5rsIMkwkQU8Pv3pXusjDx LsWSvFjQk7Vd8r8wYulWc7nwKbpj3tAd82LEnnIf/2KZwivl6mEuKb6xi0Ay1tZl I3NX2XpiU2AbZRtQ2zxRenVlpATQrWlNJtjz2M/YpiTOZ8ZXwR0csT/NE/tdRNp6 wMsmwmN2jFoftH/dCBL90P0mt/S0oNj7XGXAukk1X8o+K4ODso+qAFK3sc3hJoDj f5SbJ1AU1cJqisG4LFKc6cA7v74Y4noCN1ucATzcVPvXP2mp2dQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org