$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lu7iO23ZG_y2V6Af6K-DHBijecY.roa File: Lu7iO23ZG_y2V6Af6K-DHBijecY.roa (raw, json) Hash identifier: fuGKdzNp6qbi0CW76+6y9mQv4GXRM0lDOQCFUHIG23k= Subject key identifier: 2E:EE:E2:3B:6D:D9:1B:FC:B6:57:A0:1F:E8:AF:83:1C:18:A3:79:C6 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EC0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lu7iO23ZG_y2V6Af6K-DHBijecY.roa Signing time: Fri 01 Sep 2023 10:16:25 +0000 ROA not before: Fri 01 Sep 2023 10:16:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 114.198.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7872 (0x1ec0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2EEEE23B6DD91BFCB657A01FE8AF831C18A379C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:ff:91:4e:23:ed:b9:be:21:75:a6:9d:93: 2e:ac:71:3d:ad:40:3c:25:e2:10:14:6b:5f:3b:5a: 13:a6:9a:fa:e3:8d:0a:58:08:28:7a:43:e5:a4:46: 0d:d9:92:a4:54:37:5e:97:3a:0b:d0:a8:50:4f:d6: 64:65:ff:97:b4:68:16:e3:3a:69:a4:2b:af:95:b2: 7e:a5:4c:a4:49:60:66:2a:db:5e:2c:95:f6:30:a0: f8:68:60:3d:1b:1e:00:a2:f0:8a:ec:60:90:78:df: a6:64:e8:7e:00:5d:a8:2e:5f:10:1d:b1:3f:e7:3c: ba:3c:96:6b:ff:70:2d:ca:32:8f:64:50:91:75:a2: 2d:eb:ba:15:32:67:43:2d:56:94:50:ce:76:11:4e: d0:f5:c7:86:f5:91:9d:65:76:6c:8c:32:92:e7:61: bf:95:7c:31:78:f4:bb:81:bb:c9:0b:69:45:f6:54: 23:68:d1:f3:95:f9:a9:28:3a:bc:74:2a:5e:e0:f9: af:61:30:12:49:03:1a:eb:70:bb:54:d9:ed:31:b0: ad:9a:e4:78:d8:9b:7e:87:58:10:1f:d9:95:87:18: 50:6d:2a:62:81:bc:ac:a0:d2:1a:cf:93:4a:40:32: 25:92:68:3b:44:58:76:f9:5f:e7:27:e2:0a:96:30: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:E2:3B:6D:D9:1B:FC:B6:57:A0:1F:E8:AF:83:1C:18:A3:79:C6 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lu7iO23ZG_y2V6Af6K-DHBijecY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.176.0/20 Signature Algorithm: sha256WithRSAEncryption 9c:ca:96:ce:f8:eb:4e:8b:50:7d:97:d8:d4:01:85:78:cb:31: 3e:70:dd:31:13:2d:0a:73:ae:a6:91:ab:5c:61:a0:54:b1:9c: ea:16:cf:d4:8b:a4:3f:27:cc:fc:4e:a1:98:c3:95:fc:63:12: 46:dd:bc:2c:95:6a:92:8c:4d:d2:cc:0d:a7:19:31:f5:0e:f4: 02:57:78:76:a9:25:6f:6a:76:7f:96:b0:37:23:44:98:a6:db: 74:46:0a:76:e3:19:f7:a5:8e:85:98:a5:3c:a1:27:b7:93:ae: ef:22:f0:cc:b0:2a:81:42:0b:07:da:92:bd:d1:ab:4d:11:40: d6:4b:03:a9:8b:f1:ae:cd:b4:c9:c5:92:07:1e:db:de:b3:87: 1d:e2:93:8a:c1:e1:f1:fe:cf:de:3f:b7:0d:b4:ee:76:28:a9: eb:52:2d:2d:f4:26:39:19:99:c6:17:15:ba:35:84:5d:c6:5a: 8c:7f:1b:e1:08:6b:ef:93:73:5e:36:20:4d:4e:2e:69:7d:a0: f2:ed:cb:c7:80:b2:17:a7:77:24:fd:26:fd:ff:eb:37:0f:0e: b0:20:f5:fd:63:50:f7:5a:0e:01:cd:db:bc:b5:1b:95:e1:0d: 93:c2:55:af:7d:03:80:c6:9f:89:ca:30:b6:4d:39:8d:8f:24: f9:b4:e0:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJFRUVFMjNCNkREOTFC RkNCNjU3QTAxRkU4QUY4MzFDMThBMzc5QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOkv+RTiPtub4hdaadky6scT2tQDwl4hAUa187WhOmmvrjjQpY CCh6Q+WkRg3ZkqRUN16XOgvQqFBP1mRl/5e0aBbjOmmkK6+Vsn6lTKRJYGYq214s lfYwoPhoYD0bHgCi8IrsYJB436Zk6H4AXaguXxAdsT/nPLo8lmv/cC3KMo9kUJF1 oi3ruhUyZ0MtVpRQznYRTtD1x4b1kZ1ldmyMMpLnYb+VfDF49LuBu8kLaUX2VCNo 0fOV+akoOrx0Kl7g+a9hMBJJAxrrcLtU2e0xsK2a5HjYm36HWBAf2ZWHGFBtKmKB vKyg0hrPk0pAMiWSaDtEWHb5X+cn4gqWMPJ9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULu7iO23ZG/y2V6Af6K+DHBijecYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0x1N2lPMjNaR195MlY2QWY2 Sy1ESEJpamVjWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xrAwDQYJKoZIhvcNAQELBQADggEBAJzKls74606LUH2X2NQBhXjLMT5w3TETLQpz rqaRq1xhoFSxnOoWz9SLpD8nzPxOoZjDlfxjEkbdvCyVapKMTdLMDacZMfUO9AJX eHapJW9qdn+WsDcjRJim23RGCnbjGfeljoWYpTyhJ7eTru8i8MywKoFCCwfakr3R q00RQNZLA6mL8a7NtMnFkgce296zhx3ik4rB4fH+z94/tw207nYoqetSLS30JjkZ mcYXFbo1hF3GWox/G+EIa++Tc142IE1OLml9oPLty8eAshendyT9Jv3/6zcPDrAg 9f1jUPdaDgHN27y1G5XhDZPCVa99A4DGn4nKMLZNOY2PJPm04O0= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org