$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa File: lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa (raw, json) Hash identifier: bGY9Pm9fWP0qrkglSV72l3vq7+5M2WSJUf29qWNHhJk= Subject key identifier: 94:6C:19:6F:95:DD:79:BF:30:AD:0A:C7:2F:8C:4D:BF:A0:6F:C4:FC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E8D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa Signing time: Fri 01 Sep 2023 10:16:11 +0000 ROA not before: Fri 01 Sep 2023 10:16:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 115.165.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7821 (0x1e8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=946C196F95DD79BF30AD0AC72F8C4DBFA06FC4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:9c:29:bb:dd:cc:65:bf:4f:f4:3a:e8:ff: ca:e7:de:f4:d3:c1:b2:7b:89:a6:7f:82:68:28:dd: b6:0f:2a:e4:73:81:c2:be:58:57:f4:8f:cc:97:30: 38:68:f2:3b:8b:79:14:d9:61:34:b0:f8:18:16:dc: b8:eb:58:17:1a:af:69:ca:38:fb:e5:9c:2c:64:37: 71:d7:ed:0e:7c:fc:9c:a3:92:5d:6d:d9:3a:7e:6a: 27:18:46:81:d7:20:ab:13:4a:e4:60:35:f7:c1:77: 1f:7c:b1:07:13:6f:b7:9b:2a:51:f2:b9:bf:4a:14: 35:ad:48:0b:07:66:bb:1f:0d:7d:6a:ec:60:a5:ee: 52:cc:f3:f7:da:0e:1d:0f:e0:d2:80:4e:ed:c7:41: 14:98:ba:58:be:2f:cd:44:6d:bc:2f:11:5b:db:a8: d8:76:02:6a:38:30:b3:5b:41:80:bf:d3:f8:be:5d: a5:1e:23:37:42:49:b4:73:65:98:9e:2d:c7:a1:50: 19:c4:08:dd:8b:25:43:c9:47:83:2e:a3:1c:2f:20: 92:ab:81:e2:82:79:59:01:0d:79:ef:62:3c:18:9b: f1:3d:c5:8e:ea:4b:08:e7:6c:c4:95:dc:8d:ea:8b: 73:cc:8f:b6:59:78:93:e9:ec:8b:9f:1a:a3:5b:f7: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6C:19:6F:95:DD:79:BF:30:AD:0A:C7:2F:8C:4D:BF:A0:6F:C4:FC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.165.232.0/22 Signature Algorithm: sha256WithRSAEncryption 44:6b:93:27:ee:1f:17:93:48:e7:a5:93:f7:36:c7:6d:00:b3: f7:55:e4:57:61:1e:04:3e:7b:c5:1d:7a:82:90:1a:ea:55:2f: b7:f1:a3:17:17:01:37:f4:62:4a:da:1e:a4:ac:05:a8:f3:51: d9:c5:60:60:f7:87:1b:fb:64:0a:61:db:ca:83:da:de:a1:03: fb:4d:22:d0:65:41:d3:3c:74:67:c0:2d:75:2e:c3:c3:10:67: 00:56:85:94:54:bb:c1:19:1a:3d:3e:0d:22:4d:fe:32:ab:a9: 49:b6:33:bc:fc:8b:5f:de:1a:75:51:8a:c0:fd:dd:c2:7c:7c: b6:6b:e6:e8:84:a4:8f:44:49:7c:5e:25:d3:bf:b4:ae:4c:b4: 2f:aa:70:4b:24:21:5a:58:67:ac:44:4b:ee:c6:87:64:a4:4b: b6:17:de:e9:fa:38:65:40:ac:19:5c:bf:de:dc:5e:be:f3:a5: a9:79:48:a5:b1:41:fd:07:eb:60:a4:ce:bf:5e:1d:22:0d:eb: cf:71:49:d7:cf:4e:ca:bd:2e:06:32:30:19:88:cf:0f:1c:da: 63:8a:d0:4d:f6:53:39:e8:d0:3e:cb:1b:5e:9d:c6:5e:74:58: 7a:e6:b0:71:15:39:8b:96:5b:2b:df:ac:2b:3f:81:c8:64:06: 23:18:22:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk0NkMxOTZGOTVERDc5 QkYzMEFEMEFDNzJGOEM0REJGQTA2RkM0RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCze5wpu93MZb9P9Dro/8rn3vTTwbJ7iaZ/gmgo3bYPKuRzgcK+ WFf0j8yXMDho8juLeRTZYTSw+BgW3LjrWBcar2nKOPvlnCxkN3HX7Q58/Jyjkl1t 2Tp+aicYRoHXIKsTSuRgNffBdx98sQcTb7ebKlHyub9KFDWtSAsHZrsfDX1q7GCl 7lLM8/faDh0P4NKATu3HQRSYuli+L81EbbwvEVvbqNh2Amo4MLNbQYC/0/i+XaUe IzdCSbRzZZieLcehUBnECN2LJUPJR4MuoxwvIJKrgeKCeVkBDXnvYjwYm/E9xY7q SwjnbMSV3I3qi3PMj7ZZeJPp7IufGqNb91A9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlGwZb5Xdeb8wrQrHL4xNv6BvxPwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xHd1piNVhkZWI4d3JRckhM NHhOdjZCdnhQdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJz pegwDQYJKoZIhvcNAQELBQADggEBAERrkyfuHxeTSOelk/c2x20As/dV5FdhHgQ+ e8UdeoKQGupVL7fxoxcXATf0YkraHqSsBajzUdnFYGD3hxv7ZAph28qD2t6hA/tN ItBlQdM8dGfALXUuw8MQZwBWhZRUu8EZGj0+DSJN/jKrqUm2M7z8i1/eGnVRisD9 3cJ8fLZr5uiEpI9ESXxeJdO/tK5MtC+qcEskIVpYZ6xES+7Gh2SkS7YX3un6OGVA rBlcv97cXr7zpal5SKWxQf0H62Ckzr9eHSIN689xSdfPTsq9LgYyMBmIzw8c2mOK 0E32Uzno0D7LG16dxl50WHrmsHEVOYuWWyvfrCs/gchkBiMYInc= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org