$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R0cvL0sIfK1BX4iN63DdGEDV3ZY.roa File: R0cvL0sIfK1BX4iN63DdGEDV3ZY.roa (raw, json) Hash identifier: SabD8KvZOp93QKJni7PmgdW9iCmVpXs2L8NHLxEFS+Q= Subject key identifier: 47:47:2F:2F:4B:08:7C:AD:41:5F:88:8D:EB:70:DD:18:40:D5:DD:96 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E2E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R0cvL0sIfK1BX4iN63DdGEDV3ZY.roa Signing time: Fri 01 Sep 2023 10:15:45 +0000 ROA not before: Fri 01 Sep 2023 10:15:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 124.6.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7726 (0x1e2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=47472F2F4B087CAD415F888DEB70DD1840D5DD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:fd:e8:56:56:88:4a:51:33:0f:82:ff:37: de:f5:de:64:b8:06:9c:85:f8:e0:d6:c3:99:af:c4: ee:6c:e8:a1:a4:b7:4d:1a:28:6d:08:e2:6f:c9:9f: 8e:d9:00:a8:c2:94:02:ce:02:b6:5b:c0:25:2e:af: 79:46:6c:72:3c:06:23:ca:65:3a:e2:3a:a4:b1:24: 43:25:2a:e8:bc:8a:e0:93:68:b6:cd:73:48:1a:bb: 98:a2:a3:89:34:ab:9c:c1:59:6f:a9:52:42:64:6c: ca:bf:89:30:75:93:fb:f0:05:cc:ad:d1:c3:45:bc: b5:68:9d:bf:33:bf:8d:a8:70:98:ee:ff:bd:9f:9a: 82:68:a0:e1:82:03:5e:67:0d:9f:06:4b:3d:65:3b: ab:26:a8:1a:79:4d:ab:1c:7e:1d:f3:b2:84:a0:ef: f5:1b:87:50:bd:0a:44:d0:3b:f6:36:11:79:9b:0d: bd:3a:5f:2a:45:29:2c:45:f3:6a:68:93:65:35:90: 09:ae:fc:c2:69:ea:69:46:71:9b:e0:39:7e:c4:fd: 74:52:64:19:09:fe:3f:81:85:04:80:35:a3:7c:0b: 9f:e3:63:eb:21:cb:1f:42:09:a6:f3:8b:38:ef:7c: 4f:2c:d7:06:b0:98:2b:5b:36:06:55:09:8e:a1:98: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:47:2F:2F:4B:08:7C:AD:41:5F:88:8D:EB:70:DD:18:40:D5:DD:96 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R0cvL0sIfK1BX4iN63DdGEDV3ZY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.8.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:e6:4d:9b:fe:d3:9e:a7:17:b9:3c:06:88:90:9d:3a:36:af: d7:8c:bc:c8:fa:d8:70:30:cd:1d:3b:c5:1a:3e:70:34:0e:28: bd:f3:c2:21:e7:ab:e1:73:27:21:91:e1:17:fa:30:57:56:7e: bd:6e:af:cd:f8:6b:91:3b:a8:03:6d:4e:13:7f:33:d4:ba:77: d6:ba:3a:b6:73:a6:e3:5c:9e:36:28:b3:f9:7a:6c:a7:3c:4e: 39:5c:59:5f:99:57:79:6d:f2:3d:15:02:17:f4:a4:d3:23:50: 4f:83:f0:28:96:46:0f:b2:64:d9:0e:3c:17:65:fe:15:70:26: 15:09:48:3f:5a:0b:cf:5c:ec:ee:01:f7:a5:e0:bc:f8:78:20: ee:84:68:c9:fc:a9:d7:de:b0:34:ab:83:72:42:e7:d6:7a:f5: 5d:9a:30:83:2e:fc:72:9e:ec:1d:8b:5d:2d:43:3d:f8:e8:59: 57:d6:3a:19:6b:b7:ec:75:35:58:02:76:e6:88:20:a9:c8:da: 95:2f:1d:23:5a:77:18:fd:4d:1b:23:9f:f0:f0:d1:40:2e:c2: a7:8c:28:3b:55:d2:52:c2:ee:c9:a9:ca:11:ad:f5:ff:39:3f: 29:a6:d2:70:d0:53:45:39:83:ff:c4:88:4d:ee:cd:c1:71:0b: 8d:7a:e3:08 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ3NDcyRjJGNEIwODdD QUQ0MTVGODg4REVCNzBERDE4NDBENUREOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChV/3oVlaISlEzD4L/N9713mS4BpyF+ODWw5mvxO5s6KGkt00a KG0I4m/Jn47ZAKjClALOArZbwCUur3lGbHI8BiPKZTriOqSxJEMlKui8iuCTaLbN c0gau5iio4k0q5zBWW+pUkJkbMq/iTB1k/vwBcyt0cNFvLVonb8zv42ocJju/72f moJooOGCA15nDZ8GSz1lO6smqBp5Tascfh3zsoSg7/Ubh1C9CkTQO/Y2EXmbDb06 XypFKSxF82pok2U1kAmu/MJp6mlGcZvgOX7E/XRSZBkJ/j+BhQSANaN8C5/jY+sh yx9CCabzizjvfE8s1wawmCtbNgZVCY6hmDIXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUR0cvL0sIfK1BX4iN63DdGEDV3ZYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1IwY3ZMMHNJZksxQlg0aU42 M0RkR0VEVjNaWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN8 BggwDQYJKoZIhvcNAQELBQADggEBAIzmTZv+056nF7k8BoiQnTo2r9eMvMj62HAw zR07xRo+cDQOKL3zwiHnq+FzJyGR4Rf6MFdWfr1ur834a5E7qANtThN/M9S6d9a6 OrZzpuNcnjYos/l6bKc8TjlcWV+ZV3lt8j0VAhf0pNMjUE+D8CiWRg+yZNkOPBdl /hVwJhUJSD9aC89c7O4B96XgvPh4IO6EaMn8qdfesDSrg3JC59Z69V2aMIMu/HKe 7B2LXS1DPfjoWVfWOhlrt+x1NVgCduaIIKnI2pUvHSNadxj9TRsjn/Dw0UAuwqeM KDtV0lLC7smpyhGt9f85Pymm0nDQU0U5g//EiE3uzcFxC4164wg= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org