$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dD0qqCEMTzj3xWv5oaSO5HvecqQ.roa File: dD0qqCEMTzj3xWv5oaSO5HvecqQ.roa (raw, json) Hash identifier: mO8nNIlwQy/I45YJNl3mF9gy66IQ1WeFZIg3WMIzzNM= Subject key identifier: 74:3D:2A:A8:21:0C:4F:38:F7:C5:6B:F9:A1:A4:8E:E4:7B:DE:72:A4 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E7E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dD0qqCEMTzj3xWv5oaSO5HvecqQ.roa Signing time: Fri 01 Sep 2023 10:16:07 +0000 ROA not before: Fri 01 Sep 2023 10:16:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 114.198.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7806 (0x1e7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=743D2AA8210C4F38F7C56BF9A1A48EE47BDE72A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:d4:8d:19:80:d5:8f:21:50:50:b0:6b:de: 56:b9:cb:1b:e0:e4:bc:09:0a:62:30:95:ec:22:47: a7:8b:58:e1:41:d3:93:ef:70:6f:93:8b:33:f0:7b: e4:94:d5:8a:c8:d0:d6:a0:0c:f0:4f:98:b2:ac:4a: 2e:36:95:d0:02:e4:45:72:07:7b:db:10:a0:0e:e4: f0:fa:98:cc:2e:24:31:62:8e:48:0b:0b:63:33:ad: 4b:10:bb:3d:c3:ec:11:b4:dd:79:34:7b:56:31:bf: 4d:67:ed:f6:c5:12:04:91:75:48:b6:9b:cf:13:f1: 01:7b:2c:3d:38:1f:8e:1e:0c:98:70:96:fe:53:1b: 0c:a4:7d:5d:f3:8c:2e:76:83:1e:d8:33:af:fd:48: 4f:e6:77:6c:fa:f5:f7:cb:5a:63:0a:88:93:a9:ec: 5f:a7:52:93:04:83:0f:14:bb:85:f2:76:15:f7:35: 4c:a7:cb:b4:1a:31:f8:a7:a2:4f:ac:a0:55:d3:f1: 6a:f0:e6:05:5a:8f:10:f8:49:61:62:89:de:b1:66: d3:ff:58:12:23:9b:a8:1c:b9:52:77:7a:23:f0:63: c4:55:d1:7d:93:dc:a1:42:1c:d3:a8:ee:79:f7:7e: 8d:22:14:ca:cd:05:c0:32:0d:2f:bd:1d:d9:c6:9d: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3D:2A:A8:21:0C:4F:38:F7:C5:6B:F9:A1:A4:8E:E4:7B:DE:72:A4 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dD0qqCEMTzj3xWv5oaSO5HvecqQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.176.0/20 Signature Algorithm: sha256WithRSAEncryption 34:ed:74:6c:ce:41:da:c9:9d:78:c8:4d:6a:02:83:71:f9:f6: 92:be:22:3a:8d:69:e0:11:91:26:b1:7b:fe:f8:33:c2:9c:7c: cf:72:5f:bc:44:c0:7d:c2:51:ae:a5:6c:ed:a0:cf:6d:0b:22: 0b:ae:7b:62:d5:63:bd:40:17:d6:9c:d7:5d:2e:9f:2c:99:f7: 2c:0e:33:e4:6b:9c:ff:a7:f0:b7:23:49:60:37:90:1d:1e:42: 99:bf:a6:29:6f:7e:52:d8:57:42:69:b6:92:ae:ec:e1:5c:7b: de:15:5f:34:bd:fe:88:97:67:99:11:cf:cc:c0:6e:a5:6d:71: fb:5b:91:ee:7c:23:49:a5:33:a5:2b:52:b9:49:fe:c9:69:f1: 05:ad:e5:c7:d1:82:94:58:85:dc:15:97:bc:d3:67:c9:b7:12: bd:e4:fa:ae:a2:ca:f7:ff:cf:67:10:3e:fe:1d:bd:2c:1e:55: 76:dc:c9:33:e5:07:96:5a:33:19:ff:88:a2:6d:21:c2:d4:39: cb:1e:b4:06:20:e3:cd:5c:20:e6:a7:c4:61:82:84:c9:dc:fe: 78:0e:67:fc:de:85:07:73:8c:48:5b:82:3a:a1:ad:12:a5:b4: f9:e8:c8:62:7d:c4:84:32:88:81:88:87:0a:00:a9:87:a0:ac: aa:8f:0c:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc0M0QyQUE4MjEwQzRG MzhGN0M1NkJGOUExQTQ4RUU0N0JERTcyQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiedSNGYDVjyFQULBr3la5yxvg5LwJCmIwlewiR6eLWOFB05Pv cG+TizPwe+SU1YrI0NagDPBPmLKsSi42ldAC5EVyB3vbEKAO5PD6mMwuJDFijkgL C2MzrUsQuz3D7BG03Xk0e1Yxv01n7fbFEgSRdUi2m88T8QF7LD04H44eDJhwlv5T GwykfV3zjC52gx7YM6/9SE/md2z69ffLWmMKiJOp7F+nUpMEgw8Uu4XydhX3NUyn y7QaMfinok+soFXT8Wrw5gVajxD4SWFiid6xZtP/WBIjm6gcuVJ3eiPwY8RV0X2T 3KFCHNOo7nn3fo0iFMrNBcAyDS+9HdnGnYy5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdD0qqCEMTzj3xWv5oaSO5HvecqQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2REMHFxQ0VNVHpqM3hXdjVv YVNPNUh2ZWNxUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xrAwDQYJKoZIhvcNAQELBQADggEBADTtdGzOQdrJnXjITWoCg3H59pK+IjqNaeAR kSaxe/74M8KcfM9yX7xEwH3CUa6lbO2gz20LIguue2LVY71AF9ac110unyyZ9ywO M+RrnP+n8LcjSWA3kB0eQpm/pilvflLYV0JptpKu7OFce94VXzS9/oiXZ5kRz8zA bqVtcftbke58I0mlM6UrUrlJ/slp8QWt5cfRgpRYhdwVl7zTZ8m3Er3k+q6iyvf/ z2cQPv4dvSweVXbcyTPlB5ZaMxn/iKJtIcLUOcsetAYg481cIOanxGGChMnc/ngO Z/zehQdzjEhbgjqhrRKltPnoyGJ9xIQyiIGIhwoAqYegrKqPDGY= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org