$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cNFVPXSsV0VauLB1FtyJOfqVlzo.roa File: cNFVPXSsV0VauLB1FtyJOfqVlzo.roa (raw, json) Hash identifier: GqCHI3DeqMpeb6/7kaQPXf3lCOXoFUcoQw/I/hVW3jQ= Subject key identifier: 70:D1:55:3D:74:AC:57:45:5A:B8:B0:75:16:DC:89:39:FA:95:97:3A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E4C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cNFVPXSsV0VauLB1FtyJOfqVlzo.roa Signing time: Fri 01 Sep 2023 10:15:52 +0000 ROA not before: Fri 01 Sep 2023 10:15:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 115.165.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7756 (0x1e4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=70D1553D74AC57455AB8B07516DC8939FA95973A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:65:a5:09:34:b5:af:8b:79:00:61:a5:52: bd:f3:a1:73:2a:8b:52:75:e0:a5:bd:dc:7f:1f:89: 7a:f7:a1:ad:9f:b0:f0:ef:15:0b:01:11:e1:c2:58: 66:bd:c3:28:dd:57:7d:18:08:67:c8:06:44:ab:e1: b7:c0:d9:20:87:0a:75:2e:02:4f:1c:f0:37:95:f0: 54:d9:92:40:45:ce:6f:e4:b4:be:f3:a9:0e:ee:01: 3d:4d:74:bc:73:c8:8e:6a:3b:9a:fb:e8:11:28:1c: 80:b4:da:0d:90:4a:9e:78:4d:81:7e:72:9b:94:9e: 32:74:72:86:e5:fa:2a:86:ae:fa:5b:9b:74:3c:0d: 06:88:73:37:6e:1d:fd:c6:cb:e3:39:1d:a5:26:1c: 7a:eb:6f:48:e1:19:fa:26:dd:39:99:02:e1:f0:f5: 32:d3:30:90:f7:82:59:56:fb:e8:bb:a8:36:2c:cb: 67:71:ac:5d:58:28:ff:06:68:2f:55:63:d0:89:cf: c0:53:c4:99:25:d1:c0:4f:55:e7:8c:e6:e7:93:28: da:2f:88:2f:31:7f:08:94:3b:fd:30:ce:dc:0f:42: b5:54:e7:2e:a2:ce:98:92:06:ab:2c:2a:d9:15:dc: da:86:b0:e3:31:b1:58:0f:53:a7:4f:c2:2f:6e:58: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D1:55:3D:74:AC:57:45:5A:B8:B0:75:16:DC:89:39:FA:95:97:3A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cNFVPXSsV0VauLB1FtyJOfqVlzo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.165.192.0/18 Signature Algorithm: sha256WithRSAEncryption 94:3b:1a:60:0a:af:c3:72:37:1c:8f:84:81:91:51:f3:10:a0: 25:57:e6:e3:9b:3d:56:c4:b9:5f:cc:a9:32:00:b6:29:16:e6: 8d:7e:e3:77:0b:07:f0:95:d2:9d:4e:23:34:a5:6a:8b:60:40: 58:6f:de:08:ff:59:ff:2a:e0:8d:cf:10:e3:8f:ed:d5:7e:17: ff:e3:7d:00:32:c7:7b:97:9f:b0:7c:6b:94:0e:4a:93:d3:d9: 1b:a4:4d:18:ed:b4:dc:c0:32:b3:69:e7:c7:c1:43:05:a7:84: 91:24:e7:e4:da:3f:e0:c9:2d:a5:78:59:78:eb:07:49:0a:56: de:1c:9e:57:9f:a1:6f:b0:6f:12:ce:3c:08:dd:59:57:a4:2f: 8e:9f:d3:ce:a1:80:5f:97:2d:4a:04:99:de:b3:71:a9:59:25: 33:8b:42:b2:60:32:11:aa:ed:16:62:34:5c:5d:5a:9d:c2:a4: d6:13:69:45:d3:fc:d0:d6:a9:b2:d5:d6:0e:fb:6d:88:ad:3a: 75:5e:f2:ef:1d:70:80:99:cf:81:7d:bb:58:59:9d:1e:eb:88: dc:f6:9e:87:81:77:16:83:df:48:f4:32:c2:1b:5e:dc:e3:23: e5:b1:63:c2:20:63:fb:77:dc:c5:a1:3b:ad:52:cf:fa:3f:71: 11:86:a4:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwRDE1NTNENzRBQzU3 NDU1QUI4QjA3NTE2REM4OTM5RkE5NTk3M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/ZWWlCTS1r4t5AGGlUr3zoXMqi1J14KW93H8fiXr3oa2fsPDv FQsBEeHCWGa9wyjdV30YCGfIBkSr4bfA2SCHCnUuAk8c8DeV8FTZkkBFzm/ktL7z qQ7uAT1NdLxzyI5qO5r76BEoHIC02g2QSp54TYF+cpuUnjJ0cobl+iqGrvpbm3Q8 DQaIczduHf3Gy+M5HaUmHHrrb0jhGfom3TmZAuHw9TLTMJD3gllW++i7qDYsy2dx rF1YKP8GaC9VY9CJz8BTxJkl0cBPVeeM5ueTKNoviC8xfwiUO/0wztwPQrVU5y6i zpiSBqssKtkV3NqGsOMxsVgPU6dPwi9uWFVdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcNFVPXSsV0VauLB1FtyJOfqVlzowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NORlZQWFNzVjBWYXVMQjFG dHlKT2ZxVmx6by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZz pcAwDQYJKoZIhvcNAQELBQADggEBAJQ7GmAKr8NyNxyPhIGRUfMQoCVX5uObPVbE uV/MqTIAtikW5o1+43cLB/CV0p1OIzSlaotgQFhv3gj/Wf8q4I3PEOOP7dV+F//j fQAyx3uXn7B8a5QOSpPT2RukTRjttNzAMrNp58fBQwWnhJEk5+TaP+DJLaV4WXjr B0kKVt4cnlefoW+wbxLOPAjdWVekL46f086hgF+XLUoEmd6zcalZJTOLQrJgMhGq 7RZiNFxdWp3CpNYTaUXT/NDWqbLV1g77bYitOnVe8u8dcICZz4F9u1hZnR7riNz2 noeBdxaD30j0MsIbXtzjI+WxY8IgY/t33MWhO61Sz/o/cRGGpHs= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org