$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f03k9QOnNTQta-OFTpFgs4NKXeU.roa File: f03k9QOnNTQta-OFTpFgs4NKXeU.roa (raw, json) Hash identifier: NIXogi3lUI/QfU2pwaU1aspBTPW5vmm1hOCtzPfM72U= Subject key identifier: 7F:4D:E4:F5:03:A7:35:34:2D:6B:E3:85:4E:91:60:B3:83:4A:5D:E5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DC9 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f03k9QOnNTQta-OFTpFgs4NKXeU.roa Signing time: Fri 01 Sep 2023 10:15:18 +0000 ROA not before: Fri 01 Sep 2023 10:15:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 114.198.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7625 (0x1dc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7F4DE4F503A735342D6BE3854E9160B3834A5DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:6a:11:4f:0a:e1:30:b8:72:ea:35:b2:ee: c5:e7:d9:c5:58:9f:7a:67:d2:70:4e:3e:c4:4e:c7: 02:2a:0a:a9:a0:8a:e1:2b:6d:ba:c1:3c:ad:e1:93: 2c:ad:4f:06:3f:ab:78:8c:ea:13:d3:2a:5e:b5:9a: 9a:ec:80:5e:c7:2c:30:6a:4d:86:47:bc:f3:58:11: 25:a3:8e:1c:0e:bd:47:56:8d:32:80:31:00:28:9a: f6:89:12:ba:0a:33:25:53:d5:53:34:0b:66:b6:f2: f2:4a:64:f7:f8:ff:91:5f:bb:a5:8a:27:11:f6:c7: d9:1f:05:4f:32:a0:f2:49:2a:d2:5f:ec:eb:0f:6e: 00:5b:4e:e7:1b:cb:94:c4:a6:0f:95:5a:3e:9c:6e: 2e:3f:9c:37:e2:10:ae:3c:51:ff:40:f9:84:06:b1: d6:60:73:90:ad:26:48:ed:c8:fd:b8:6f:45:81:f0: 33:a7:6d:8c:2a:ba:50:0c:97:03:b3:34:4e:89:f5: 24:b4:b3:3b:7c:5c:26:f7:74:a8:9d:91:5b:de:6d: 7a:b3:81:e1:5a:07:fe:4a:85:b0:ac:9e:eb:2c:49: 46:58:eb:25:62:a3:93:30:b3:d8:37:07:cb:a5:26: 29:13:2f:ea:cf:d8:e0:03:ff:ef:9f:fa:f5:97:62: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4D:E4:F5:03:A7:35:34:2D:6B:E3:85:4E:91:60:B3:83:4A:5D:E5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f03k9QOnNTQta-OFTpFgs4NKXeU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.165.0/24 Signature Algorithm: sha256WithRSAEncryption 72:8d:c0:6d:df:03:b9:02:49:d9:6c:af:16:94:84:d6:10:48: ce:83:59:db:73:c5:05:cc:5e:ba:fa:41:3b:5d:bd:ba:3e:df: 38:41:a6:68:c0:a8:ff:f4:87:b4:62:c6:a0:5f:11:ea:07:d9: b1:f1:8c:15:28:29:a0:05:2b:6e:3c:8d:bb:bc:f8:9b:a8:46: 05:aa:8d:73:2f:65:8e:e1:a4:7d:02:bd:93:d8:b5:f3:d7:4b: d6:1b:af:b8:10:16:94:14:d0:38:3c:f0:88:e2:da:a9:a6:82: 37:1b:de:0a:3a:54:7f:67:f1:b5:34:b1:ce:2f:19:f4:9d:1b: 1a:48:fb:9b:e8:4c:a8:86:6f:11:8d:c5:e9:9c:31:83:85:56: 17:be:c9:e0:c8:5d:a8:5b:02:a3:d4:f0:f7:ba:db:ec:2f:7d: 9b:a5:f4:b5:c7:8d:44:33:f8:e3:38:fa:4a:26:1f:55:45:12: 5b:16:a5:18:62:7b:c9:61:cb:3c:d1:63:dc:44:5c:8e:5b:8f: d2:e7:fe:9e:60:59:dc:8b:d1:68:25:0e:ce:62:cc:45:db:03: 13:ac:c1:e6:81:ae:df:be:57:bc:4f:85:47:37:10:73:1f:d3: 5d:28:81:b8:73:d3:82:28:21:4c:13:95:bf:be:1f:77:e7:55: d8:7d:e3:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdGNERFNEY1MDNBNzM1 MzQyRDZCRTM4NTRFOTE2MEIzODM0QTVERTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPmmoRTwrhMLhy6jWy7sXn2cVYn3pn0nBOPsROxwIqCqmgiuEr bbrBPK3hkyytTwY/q3iM6hPTKl61mprsgF7HLDBqTYZHvPNYESWjjhwOvUdWjTKA MQAomvaJEroKMyVT1VM0C2a28vJKZPf4/5Ffu6WKJxH2x9kfBU8yoPJJKtJf7OsP bgBbTucby5TEpg+VWj6cbi4/nDfiEK48Uf9A+YQGsdZgc5CtJkjtyP24b0WB8DOn bYwqulAMlwOzNE6J9SS0szt8XCb3dKidkVvebXqzgeFaB/5KhbCsnussSUZY6yVi o5Mws9g3B8ulJikTL+rP2OAD/++f+vWXYv9nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUf03k9QOnNTQta+OFTpFgs4NKXeUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2YwM2s5UU9uTlRRdGEtT0ZU cEZnczROS1hlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABy xqUwDQYJKoZIhvcNAQELBQADggEBAHKNwG3fA7kCSdlsrxaUhNYQSM6DWdtzxQXM Xrr6QTtdvbo+3zhBpmjAqP/0h7RixqBfEeoH2bHxjBUoKaAFK248jbu8+JuoRgWq jXMvZY7hpH0CvZPYtfPXS9Ybr7gQFpQU0Dg88Iji2qmmgjcb3go6VH9n8bU0sc4v GfSdGxpI+5voTKiGbxGNxemcMYOFVhe+yeDIXahbAqPU8Pe62+wvfZul9LXHjUQz +OM4+komH1VFElsWpRhie8lhyzzRY9xEXI5bj9Ln/p5gWdyL0WglDs5izEXbAxOs weaBrt++V7xPhUc3EHMf010ogbhz04IoIUwTlb++H3fnVdh947w= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org