$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_O0IJhDndSdjD_a0bqd7ZOM0qGg.roa File: _O0IJhDndSdjD_a0bqd7ZOM0qGg.roa (raw, json) Hash identifier: LoZs/P55ZVlL7CUq6nukPA5uxEUL/JfLnA2tpSSTfts= Subject key identifier: FC:ED:08:26:10:E7:75:27:63:0F:F6:B4:6E:A7:7B:64:E3:34:A8:68 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DFC Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_O0IJhDndSdjD_a0bqd7ZOM0qGg.roa Signing time: Fri 01 Sep 2023 10:15:32 +0000 ROA not before: Fri 01 Sep 2023 10:15:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 122.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7676 (0x1dfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FCED082610E77527630FF6B46EA77B64E334A868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:cf:d6:c5:f8:d0:b2:28:a4:1f:e4:36:25: cc:90:db:77:e8:c8:f7:99:f7:a1:4a:76:b8:b2:34: 5a:be:9b:c7:e0:47:31:68:f3:95:7f:e7:c3:1c:d7: 54:fe:36:02:b3:23:73:18:ab:b2:63:aa:fa:09:39: 62:de:87:e9:d6:cd:70:d8:eb:a4:57:06:0e:31:ee: 10:5d:2a:17:fb:18:f6:74:fc:1b:cc:fc:e0:e4:78: d6:63:4a:e7:66:f1:ad:3f:77:ff:8c:74:70:92:50: 46:a4:32:13:d7:92:ee:19:a2:1e:d2:18:6f:20:a1: d3:cd:27:56:c6:07:14:80:da:05:af:69:0e:4a:dc: a9:6d:57:3e:b6:01:f0:0f:92:62:a3:52:ad:fe:74: 51:e1:7b:07:94:f4:7a:a0:cc:2d:74:79:72:37:58: a2:3a:61:48:50:54:06:ec:16:b6:6e:1d:cc:68:a6: 90:f6:d7:6b:22:0b:0f:51:4a:4a:95:e1:dd:66:bc: 3b:c5:ae:51:26:77:84:73:0c:09:05:23:46:9d:19: 14:6f:fd:5f:3e:3d:41:7a:f7:71:a5:c8:d9:8b:94: 62:ff:df:f5:6c:36:ef:85:0a:b7:ea:b3:76:98:90: 91:d8:f5:cf:14:1d:0b:67:c9:50:af:17:b4:16:f7: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:08:26:10:E7:75:27:63:0F:F6:B4:6E:A7:7B:64:E3:34:A8:68 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_O0IJhDndSdjD_a0bqd7ZOM0qGg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 08:b1:17:f6:01:fc:09:4e:88:cb:b7:64:92:87:7c:71:5a:7c: 86:ad:36:64:21:0d:4e:c4:32:4d:2a:0a:bd:30:4d:76:29:f6: 7b:fc:0f:4c:9a:b0:e8:c3:6c:75:c6:43:ba:e0:8d:a7:84:64: e2:e9:ad:67:cc:43:34:3b:ae:ef:1d:fa:02:6c:2a:ec:0c:14: c1:62:d2:57:0c:3b:15:1c:bf:5f:12:cb:e3:e7:d8:d5:2b:1f: a9:19:e0:1a:98:b5:f3:6b:9c:4b:08:8b:68:a0:1c:55:d8:8d: 0c:d1:1d:79:e5:c8:6c:8b:97:3f:33:bb:36:6e:af:60:f5:4e: 6e:3d:bb:93:89:a0:a8:38:ba:ef:2a:26:83:21:83:d4:2f:bc: 6c:65:81:e1:b8:b6:75:cf:ad:ac:5e:1d:78:20:c7:59:7e:bc: c5:7e:35:be:47:ad:f5:e9:b4:62:a5:ff:55:3e:f8:43:53:a1: da:bc:6e:e9:9c:41:36:a2:a1:53:40:64:c8:40:6f:75:43:8c: e0:f3:27:a0:00:76:8f:75:bf:7c:8b:9b:9b:31:7f:47:0a:15: 30:3b:04:8b:e5:4f:34:e9:a5:e6:ae:e0:a9:0c:4d:db:10:44: c4:db:f9:09:9f:30:98:02:f3:14:c8:2e:4a:a3:80:50:16:fa: 2b:a4:bb:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDRUQwODI2MTBFNzc1 Mjc2MzBGRjZCNDZFQTc3QjY0RTMzNEE4NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDku8/WxfjQsiikH+Q2JcyQ23foyPeZ96FKdriyNFq+m8fgRzFo 85V/58Mc11T+NgKzI3MYq7JjqvoJOWLeh+nWzXDY66RXBg4x7hBdKhf7GPZ0/BvM /ODkeNZjSudm8a0/d/+MdHCSUEakMhPXku4Zoh7SGG8godPNJ1bGBxSA2gWvaQ5K 3KltVz62AfAPkmKjUq3+dFHheweU9HqgzC10eXI3WKI6YUhQVAbsFrZuHcxoppD2 12siCw9RSkqV4d1mvDvFrlEmd4RzDAkFI0adGRRv/V8+PUF693GlyNmLlGL/3/Vs Nu+FCrfqs3aYkJHY9c8UHQtnyVCvF7QW9/IbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/O0IJhDndSdjD/a0bqd7ZOM0qGgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL19PMElKaERuZFNkakRfYTBi cWQ3Wk9NMHFHZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 ZEAwDQYJKoZIhvcNAQELBQADggEBAAixF/YB/AlOiMu3ZJKHfHFafIatNmQhDU7E Mk0qCr0wTXYp9nv8D0yasOjDbHXGQ7rgjaeEZOLprWfMQzQ7ru8d+gJsKuwMFMFi 0lcMOxUcv18Sy+Pn2NUrH6kZ4BqYtfNrnEsIi2igHFXYjQzRHXnlyGyLlz8zuzZu r2D1Tm49u5OJoKg4uu8qJoMhg9QvvGxlgeG4tnXPraxeHXggx1l+vMV+Nb5HrfXp tGKl/1U++ENTodq8bumcQTaioVNAZMhAb3VDjODzJ6AAdo91v3yLm5sxf0cKFTA7 BIvlTzTppeau4KkMTdsQRMTb+QmfMJgC8xTILkqjgFAW+iuku8M= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org