$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fxUmOaX4kbjubUM2Fp1MCq_2Y4I.roa File: fxUmOaX4kbjubUM2Fp1MCq_2Y4I.roa (raw, json) Hash identifier: xXvCw+Gr/wZWdytYJzEM8dTycalV7DHi+nwuy4eOkco= Subject key identifier: 7F:15:26:39:A5:F8:91:B8:EE:6D:43:36:16:9D:4C:0A:AF:F6:63:82 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DC4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fxUmOaX4kbjubUM2Fp1MCq_2Y4I.roa Signing time: Fri 01 Sep 2023 10:15:15 +0000 ROA not before: Fri 01 Sep 2023 10:15:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24614 IP address blocks: 114.198.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7620 (0x1dc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7F152639A5F891B8EE6D4336169D4C0AAFF66382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:37:f1:bd:87:0d:ff:74:f4:a9:80:47:e1: 8d:d0:49:56:9e:2c:d2:e7:18:1a:9f:94:97:54:d4: e5:eb:65:eb:ab:63:71:63:b3:46:b5:6f:23:f2:41: 4d:d9:45:42:bf:bd:bc:98:ff:65:c5:43:62:70:af: 15:52:20:d2:c9:0c:c3:1d:72:6a:e7:45:42:3d:b9: 6c:b8:af:fe:71:5f:da:19:27:d4:f8:ae:ee:4e:59: cc:56:29:e9:4a:87:73:13:dd:63:6d:2e:c3:75:d7: 92:f5:1d:ec:13:12:c2:b6:bc:0c:78:a8:dc:de:0f: 44:47:dc:9c:ca:b3:37:a6:1e:e2:39:e8:77:ec:81: 20:a5:68:9d:12:42:63:1e:d4:73:cb:a6:a0:bb:b0: 2b:94:01:59:56:97:03:be:de:2c:b6:f5:d1:22:43: 52:a3:ea:c8:ee:e9:8a:31:d4:78:5e:79:ea:c8:d8: 45:2b:c8:c9:96:4e:04:78:fc:17:5d:65:e3:4f:c4: e0:85:64:a7:d6:25:77:9f:d9:ea:3b:17:da:8a:e1: ab:64:88:f8:6b:81:66:40:70:7e:ca:98:0d:89:87: 9e:3e:fa:da:28:ea:99:38:db:bf:b0:82:6d:63:09: e7:82:19:44:b0:22:8a:eb:c3:48:c7:a0:6c:36:46: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:15:26:39:A5:F8:91:B8:EE:6D:43:36:16:9D:4C:0A:AF:F6:63:82 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fxUmOaX4kbjubUM2Fp1MCq_2Y4I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.166.0/23 Signature Algorithm: sha256WithRSAEncryption 92:2a:f7:28:08:2d:9b:ee:d5:52:8a:14:b6:81:82:46:4e:8a: 36:bf:23:08:4d:e3:36:42:98:f9:b2:e1:a7:03:57:65:78:13: 0f:13:6e:35:34:35:5d:8b:70:bc:bf:65:d6:f2:bc:db:fd:f7: 64:b6:22:04:1b:eb:1e:fe:da:5e:49:12:e1:7b:6f:28:13:e4: ce:bb:5b:f7:24:8a:cc:92:81:f4:e3:49:a3:d9:28:bf:41:03: ad:cd:f7:c3:a8:28:4e:9e:9e:f4:bf:22:27:ed:da:a4:cd:68: d7:8c:85:05:1d:26:51:a2:70:6c:1a:4a:67:78:73:09:30:d2: 78:fc:be:c8:6a:dd:c1:f0:46:ff:d9:b9:53:81:b3:6c:da:ce: 71:b8:42:c4:15:9d:fa:75:d3:8f:94:c5:71:e9:49:9c:34:4a: 8e:57:d2:f2:6b:ad:80:01:ff:2f:31:fc:12:07:c1:9d:70:69: 4e:59:0e:31:ac:c4:c0:4c:a5:cc:81:6c:f9:6f:14:c1:8e:f0: 1f:54:71:77:ff:f6:1f:20:46:e3:b7:c2:6d:86:92:2c:ff:27: ed:43:1f:53:55:e1:83:4c:77:ed:f7:7f:f9:07:33:87:4e:ec: c3:a9:53:81:1d:b4:88:5d:69:f4:41:86:56:e8:7e:05:93:5e: bf:f3:a3:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdGMTUyNjM5QTVGODkx QjhFRTZENDMzNjE2OUQ0QzBBQUZGNjYzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNUDfxvYcN/3T0qYBH4Y3QSVaeLNLnGBqflJdU1OXrZeurY3Fj s0a1byPyQU3ZRUK/vbyY/2XFQ2JwrxVSINLJDMMdcmrnRUI9uWy4r/5xX9oZJ9T4 ru5OWcxWKelKh3MT3WNtLsN115L1HewTEsK2vAx4qNzeD0RH3JzKszemHuI56Hfs gSClaJ0SQmMe1HPLpqC7sCuUAVlWlwO+3iy29dEiQ1Kj6sju6Yox1HheeerI2EUr yMmWTgR4/BddZeNPxOCFZKfWJXef2eo7F9qK4atkiPhrgWZAcH7KmA2Jh54++too 6pk427+wgm1jCeeCGUSwIorrw0jHoGw2RsShAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfxUmOaX4kbjubUM2Fp1MCq/2Y4IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2Z4VW1PYVg0a2JqdWJVTTJG cDFNQ3FfMlk0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFy xqYwDQYJKoZIhvcNAQELBQADggEBAJIq9ygILZvu1VKKFLaBgkZOija/IwhN4zZC mPmy4acDV2V4Ew8TbjU0NV2LcLy/ZdbyvNv992S2IgQb6x7+2l5JEuF7bygT5M67 W/ckisySgfTjSaPZKL9BA63N98OoKE6envS/Iift2qTNaNeMhQUdJlGicGwaSmd4 cwkw0nj8vshq3cHwRv/ZuVOBs2zaznG4QsQVnfp104+UxXHpSZw0So5X0vJrrYAB /y8x/BIHwZ1waU5ZDjGsxMBMpcyBbPlvFMGO8B9UcXf/9h8gRuO3wm2Gkiz/J+1D H1NV4YNMd+33f/kHM4dO7MOpU4EdtIhdafRBhlbofgWTXr/zo64= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org