$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Jla3OeqVm9GRyP7piQfNFfFk6g.roa File: 4Jla3OeqVm9GRyP7piQfNFfFk6g.roa (raw, json) Hash identifier: EjLUChFviSK1lU5sp2lYu+aBT5qYDvtnFyPyBK7lXKc= Subject key identifier: E0:99:5A:DC:E7:AA:56:6F:46:47:23:FB:A6:24:1F:34:57:C5:93:A8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E7F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Jla3OeqVm9GRyP7piQfNFfFk6g.roa Signing time: Fri 01 Sep 2023 10:16:08 +0000 ROA not before: Fri 01 Sep 2023 10:16:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.64.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7807 (0x1e7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E0995ADCE7AA566F464723FBA6241F3457C593A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:56:cf:53:01:91:e8:71:fa:45:82:5a:80: 28:ae:3b:d1:31:6c:bd:7d:b7:49:06:cd:c3:bd:fe: 23:1f:f2:6b:83:23:74:7b:74:87:96:87:92:f0:c8: 83:20:6f:88:07:8f:58:c7:47:a6:dc:a8:e1:fc:34: a7:a0:11:ac:9d:de:02:5b:8a:6f:b0:c8:61:09:1c: 4e:17:27:75:5f:73:7c:38:43:32:8d:c5:43:e0:98: 21:a0:0d:a5:ec:73:5c:c9:37:85:2f:0a:e6:ca:08: 06:bc:04:f1:95:28:41:ec:3b:91:4e:03:cb:26:ac: a9:6d:9c:ff:16:d0:d4:2e:cc:fe:5d:7d:ea:a9:a6: 38:b5:3d:4e:7f:8f:67:58:3a:49:c5:28:d6:15:74: 1b:08:d0:42:77:4e:2e:d6:8b:90:06:04:df:b0:6c: 4f:49:2e:2c:61:43:7a:54:b7:44:76:1b:57:5e:dc: 06:83:2c:39:a5:42:ec:72:09:3d:6e:70:ed:9b:8f: 8c:41:f1:e0:ad:ba:3f:a3:54:21:d4:80:e2:de:56: 9e:9b:e2:ac:1b:78:57:e9:5a:3a:39:17:42:34:ea: 8d:02:7d:c6:20:b8:7d:d9:97:48:89:2c:98:d7:10: 48:c5:59:ce:86:27:d9:26:54:44:dd:52:5b:85:d6: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:99:5A:DC:E7:AA:56:6F:46:47:23:FB:A6:24:1F:34:57:C5:93:A8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Jla3OeqVm9GRyP7piQfNFfFk6g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.24.0/22 Signature Algorithm: sha256WithRSAEncryption 22:74:eb:0c:19:f3:0a:a5:d3:f2:f9:55:32:e5:bc:0f:ce:a7: 66:9f:1f:c4:04:eb:8e:06:5d:56:96:c4:b6:c1:c6:14:11:28: 8a:d1:95:1f:e6:a3:66:f4:c1:ca:b6:7d:a6:b7:0e:36:b3:b4: c7:53:e2:2e:5c:54:96:87:29:5a:c5:63:b3:a3:21:0a:e5:c6: 06:e7:27:bd:ca:cb:0d:4c:25:f9:d7:09:87:86:f4:a1:e0:72: dc:4e:4d:b2:cd:5c:3e:cd:78:84:bd:15:ee:79:d9:6d:62:a8: 0d:da:7e:6d:74:98:5f:03:56:12:b5:f7:27:6f:3a:bf:8c:a1: da:08:9c:04:bb:60:d8:3d:03:45:e3:f2:7a:d6:6a:a5:f4:30: 20:3c:c3:56:ad:f8:5d:97:64:0a:0c:02:43:f0:0c:ba:c1:78: 89:88:3c:3a:7a:3f:8d:c1:af:6f:de:d0:6c:b9:14:f0:3d:61: 2e:47:47:f5:0f:25:9b:9a:f8:13:be:50:d3:eb:dd:c2:da:79: 26:b4:5f:3d:5f:d8:21:26:6e:f7:0e:97:fe:65:cc:42:c8:b3: cd:d6:ac:38:51:ef:d6:ec:1b:71:4d:51:40:81:52:9e:b8:e7: 8c:c6:8e:ab:4d:83:56:a1:8a:f9:79:13:1e:f2:2b:58:0d:96: 1a:03:df:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUwOTk1QURDRTdBQTU2 NkY0NjQ3MjNGQkE2MjQxRjM0NTdDNTkzQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChgVbPUwGR6HH6RYJagCiuO9ExbL19t0kGzcO9/iMf8muDI3R7 dIeWh5LwyIMgb4gHj1jHR6bcqOH8NKegEayd3gJbim+wyGEJHE4XJ3Vfc3w4QzKN xUPgmCGgDaXsc1zJN4UvCubKCAa8BPGVKEHsO5FOA8smrKltnP8W0NQuzP5dfeqp pji1PU5/j2dYOknFKNYVdBsI0EJ3Ti7Wi5AGBN+wbE9JLixhQ3pUt0R2G1de3AaD LDmlQuxyCT1ucO2bj4xB8eCtuj+jVCHUgOLeVp6b4qwbeFfpWjo5F0I06o0CfcYg uH3Zl0iJLJjXEEjFWc6GJ9kmVETdUluF1jXzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4Jla3OeqVm9GRyP7piQfNFfFk6gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRKbGEzT2VxVm05R1J5UDdw aVFmTkZmRms2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9 QBgwDQYJKoZIhvcNAQELBQADggEBACJ06wwZ8wql0/L5VTLlvA/Op2afH8QE644G XVaWxLbBxhQRKIrRlR/mo2b0wcq2faa3DjaztMdT4i5cVJaHKVrFY7OjIQrlxgbn J73Kyw1MJfnXCYeG9KHgctxOTbLNXD7NeIS9Fe552W1iqA3afm10mF8DVhK19ydv Or+ModoInAS7YNg9A0Xj8nrWaqX0MCA8w1at+F2XZAoMAkPwDLrBeImIPDp6P43B r2/e0Gy5FPA9YS5HR/UPJZua+BO+UNPr3cLaeSa0Xz1f2CEmbvcOl/5lzELIs83W rDhR79bsG3FNUUCBUp6454zGjqtNg1ahivl5Ex7yK1gNlhoD30s= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org