$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa File: 8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa (raw, json) Hash identifier: gD3LJ1YuFPVa81jEMQSwy+LgcLxNGyaD3m462kHjw+c= Subject key identifier: F2:45:D7:7E:77:E6:58:06:74:60:93:FB:66:27:12:B0:6B:60:A1:9F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E5A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa Signing time: Fri 01 Sep 2023 10:15:55 +0000 ROA not before: Fri 01 Sep 2023 10:15:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 49.158.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7770 (0x1e5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F245D77E77E65806746093FB662712B06B60A19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:1e:d3:ad:06:09:5f:4e:e8:aa:03:ec:bd: 06:19:45:06:f0:12:98:15:4e:fe:8a:29:7d:ed:52: 5d:20:ce:65:67:83:d4:90:f6:06:db:83:db:b7:b6: 72:d9:f2:71:29:d2:17:5d:43:58:b8:ed:f4:81:15: 41:11:46:be:50:c9:95:c5:c9:89:b3:be:ad:64:12: 44:71:9a:b0:88:89:23:5e:13:a8:bd:76:ac:9f:5f: b3:4d:d3:42:ee:38:be:0f:77:94:b9:07:8a:61:dc: ab:3d:07:9a:c4:9e:53:0b:45:46:0e:13:3b:54:b0: 23:61:91:d0:13:e6:f6:f4:e1:43:d3:3c:d3:49:1d: 85:8a:07:b4:43:7e:e2:ab:dc:88:c7:e1:30:cd:c3: 88:0d:1e:c3:9b:12:c7:67:e4:b5:99:e5:fd:df:29: f0:cd:55:95:dc:0b:d7:30:db:de:02:e8:13:74:44: 64:d8:ed:3b:3b:0c:ac:32:31:95:63:6e:fa:a8:71: 9e:32:67:11:5f:f4:a5:ed:65:eb:6e:7c:3c:50:4c: ab:79:79:2d:c4:11:04:7b:88:22:93:3f:b0:58:16: 7b:c6:cd:a5:41:05:51:d1:fa:90:e1:b3:8e:a4:32: e1:ae:8e:f0:43:ed:4d:9c:d0:b1:bd:e3:2c:80:f2: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:45:D7:7E:77:E6:58:06:74:60:93:FB:66:27:12:B0:6B:60:A1:9F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.100.0/22 Signature Algorithm: sha256WithRSAEncryption 06:fc:3b:21:78:0c:a2:ab:68:ec:3e:58:48:bf:bb:1e:9f:5a: 53:ff:37:17:26:18:d3:15:52:a4:3c:b8:43:84:fa:37:ec:7e: 0d:08:e5:fd:b9:07:a3:71:ad:89:0b:56:c7:2f:6e:41:7c:f2: 52:20:9f:4a:e9:ae:c7:94:28:42:51:71:b6:82:65:c8:ab:a6: 3d:f2:8f:55:e6:59:93:e9:3e:7a:3a:f0:8d:73:d3:47:83:37: 5c:f3:c5:a2:61:e9:f1:24:92:15:09:e7:4f:7d:b9:33:1c:f8: b5:6c:2e:35:d1:d5:ac:1f:14:7a:4a:4c:87:2c:af:d4:e4:8d: 2f:70:4a:9f:ee:85:3c:65:92:bd:fc:f7:f6:87:d8:1b:c2:d1: 05:af:5f:e5:01:b6:85:61:5a:63:46:70:b9:1d:df:06:c7:54: 30:00:27:f6:a2:2f:aa:c5:3b:aa:62:0e:44:71:f9:08:e8:54: a5:fd:d0:86:0f:03:47:1a:a7:2b:15:9c:18:57:90:ca:2e:53: 19:e9:6a:7c:e2:2a:88:d9:07:9f:68:db:a3:9f:22:3e:36:11: 2f:e6:c0:47:2b:01:a2:36:2e:97:dc:3f:6a:d9:a6:f0:63:89: f8:a4:e3:a7:38:b2:74:9a:7f:88:8a:66:16:f8:a0:70:44:fa: 21:4d:90:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYyNDVENzdFNzdFNjU4 MDY3NDYwOTNGQjY2MjcxMkIwNkI2MEExOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb1h7TrQYJX07oqgPsvQYZRQbwEpgVTv6KKX3tUl0gzmVng9SQ 9gbbg9u3tnLZ8nEp0hddQ1i47fSBFUERRr5QyZXFyYmzvq1kEkRxmrCIiSNeE6i9 dqyfX7NN00LuOL4Pd5S5B4ph3Ks9B5rEnlMLRUYOEztUsCNhkdAT5vb04UPTPNNJ HYWKB7RDfuKr3IjH4TDNw4gNHsObEsdn5LWZ5f3fKfDNVZXcC9cw294C6BN0RGTY 7Ts7DKwyMZVjbvqocZ4yZxFf9KXtZetufDxQTKt5eS3EEQR7iCKTP7BYFnvGzaVB BVHR+pDhs46kMuGujvBD7U2c0LG94yyA8uDjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8kXXfnfmWAZ0YJP7ZicSsGtgoZ8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhrWFhmbmZtV0FaMFlKUDda aWNTc0d0Z29aOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nmQwDQYJKoZIhvcNAQELBQADggEBAAb8OyF4DKKraOw+WEi/ux6fWlP/NxcmGNMV UqQ8uEOE+jfsfg0I5f25B6NxrYkLVscvbkF88lIgn0rprseUKEJRcbaCZcirpj3y j1XmWZPpPno68I1z00eDN1zzxaJh6fEkkhUJ5099uTMc+LVsLjXR1awfFHpKTIcs r9TkjS9wSp/uhTxlkr389/aH2BvC0QWvX+UBtoVhWmNGcLkd3wbHVDAAJ/aiL6rF O6piDkRx+QjoVKX90IYPA0capysVnBhXkMouUxnpanziKojZB59o26OfIj42ES/m wEcrAaI2LpfcP2rZpvBjifik46c4snSaf4iKZhb4oHBE+iFNkIg= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org