$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa File: 1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa (raw, json) Hash identifier: C7uRMul45eOc8lDe0DloRYaqJUTghXgAHzrO48JmsoY= Subject key identifier: D4:09:3D:6D:8E:A0:64:7D:3E:C2:B0:86:DF:E9:B4:5E:BC:AB:28:9B Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D9C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa Signing time: Fri 01 Sep 2023 10:15:04 +0000 ROA not before: Fri 01 Sep 2023 10:15:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 114.198.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7580 (0x1d9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D4093D6D8EA0647D3EC2B086DFE9B45EBCAB289B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:cf:ab:5c:26:49:63:a2:15:d1:bb:67:4f: c2:be:23:bc:fa:bb:24:6f:d4:0a:55:9e:b1:4a:3c: 94:73:7e:c0:71:5c:1a:b0:07:12:16:dc:12:6d:a5: 0e:9f:4d:4a:b6:a6:b4:c3:ab:07:7a:ca:14:01:c5: 8b:af:da:2f:c5:76:1a:58:6e:85:d3:e3:09:fe:2b: ee:72:f1:af:18:26:8e:d0:2c:a4:6e:15:19:5c:3d: 87:ac:0a:c9:0c:86:02:64:ce:78:b9:f3:69:38:14: 56:e2:16:6e:33:67:35:e5:29:84:e8:43:39:d9:e6: 99:20:5a:b0:70:57:71:2c:a1:6b:eb:4d:87:35:0d: 99:89:f6:40:ee:73:77:21:f7:a6:35:74:f9:cb:08: e3:20:6d:28:15:94:33:4e:ee:30:1b:0d:29:59:94: 38:39:3f:55:e6:e4:f2:6b:a9:f4:65:23:2d:85:20: a5:89:84:12:9b:cd:44:cd:43:62:7f:d3:e5:64:4d: 3f:b4:75:19:84:1a:c4:46:e2:70:17:c8:ca:e7:b6: be:3a:f6:2d:28:a8:a6:d2:ae:1a:fc:6c:39:9a:52: ee:23:d3:9a:8f:d0:28:8b:34:07:68:35:a4:5d:82: da:8d:59:96:29:a2:96:8a:2f:de:33:87:a2:19:31: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:3D:6D:8E:A0:64:7D:3E:C2:B0:86:DF:E9:B4:5E:BC:AB:28:9B X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.164.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:07:25:e8:c2:4e:09:f4:54:20:c7:bd:86:37:94:72:5a:aa: 42:ce:46:1a:4a:b7:44:41:6d:be:b1:0e:24:8c:9a:2b:c9:91: 70:b4:b7:4d:64:57:00:15:f1:73:a7:25:ad:84:ed:fa:28:4d: e1:d6:0a:6e:de:42:34:10:21:b9:0b:c7:7e:41:af:7e:51:28: ef:67:cf:62:48:d1:05:00:6a:3e:0c:cb:cf:62:29:ef:00:b4: 89:3f:6a:37:42:d9:b6:43:d4:fd:3f:a3:2b:1f:fc:ce:a7:d3: 17:cc:76:cd:44:32:b6:08:f1:27:75:6a:97:14:f3:70:0e:e7: 58:79:18:dd:a4:31:e2:f7:5b:9e:d1:6e:78:be:19:c5:4c:24: de:67:6b:1a:c9:ef:10:28:84:74:ff:65:ed:f3:70:f9:91:1c: ef:be:da:39:78:af:19:ae:06:e3:5a:f2:70:1b:4b:81:66:08: 36:ef:09:01:5b:7d:8a:f5:4f:1a:4b:a1:d6:57:54:2d:be:5b: 1d:2b:3f:8c:d8:eb:c6:bd:93:84:93:c5:41:17:8d:ec:aa:ae: ed:4c:68:89:5a:f3:62:62:1a:3c:e2:cf:ad:35:3f:d3:ac:6f: 96:c0:a0:e3:53:e1:56:98:eb:d8:98:e0:b7:ad:fa:ed:8d:a3: f1:81:a5:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ0MDkzRDZEOEVBMDY0 N0QzRUMyQjA4NkRGRTlCNDVFQkNBQjI4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsFs+rXCZJY6IV0btnT8K+I7z6uyRv1ApVnrFKPJRzfsBxXBqw BxIW3BJtpQ6fTUq2prTDqwd6yhQBxYuv2i/FdhpYboXT4wn+K+5y8a8YJo7QLKRu FRlcPYesCskMhgJkzni582k4FFbiFm4zZzXlKYToQznZ5pkgWrBwV3EsoWvrTYc1 DZmJ9kDuc3ch96Y1dPnLCOMgbSgVlDNO7jAbDSlZlDg5P1Xm5PJrqfRlIy2FIKWJ hBKbzUTNQ2J/0+VkTT+0dRmEGsRG4nAXyMrntr469i0oqKbSrhr8bDmaUu4j05qP 0CiLNAdoNaRdgtqNWZYpopaKL94zh6IZMastAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1Ak9bY6gZH0+wrCG3+m0XryrKJswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFBazliWTZnWkgwLXdyQ0cz LW0wWHJ5cktKcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABy xqQwDQYJKoZIhvcNAQELBQADggEBAA0HJejCTgn0VCDHvYY3lHJaqkLORhpKt0RB bb6xDiSMmivJkXC0t01kVwAV8XOnJa2E7fooTeHWCm7eQjQQIbkLx35Br35RKO9n z2JI0QUAaj4My89iKe8AtIk/ajdC2bZD1P0/oysf/M6n0xfMds1EMrYI8Sd1apcU 83AO51h5GN2kMeL3W57Rbni+GcVMJN5naxrJ7xAohHT/Ze3zcPmRHO++2jl4rxmu BuNa8nAbS4FmCDbvCQFbfYr1TxpLodZXVC2+Wx0rP4zY68a9k4STxUEXjeyqru1M aIla82JiGjziz601P9Osb5bAoONT4VaY69iY4Let+u2No/GBpZE= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org