$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lXJXQUe7m_93O_Sx2aYNXsrIax4.roa File: lXJXQUe7m_93O_Sx2aYNXsrIax4.roa (raw, json) Hash identifier: WFqtmPOrJDkEJWoveW2i3ZHu41xluowOnVRIDdYdhWs= Subject key identifier: 95:72:57:41:47:BB:9B:FF:77:3B:F4:B1:D9:A6:0D:5E:CA:C8:6B:1E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DF2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lXJXQUe7m_93O_Sx2aYNXsrIax4.roa Signing time: Fri 01 Sep 2023 10:15:29 +0000 ROA not before: Fri 01 Sep 2023 10:15:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 103.225.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7666 (0x1df2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9572574147BB9BFF773BF4B1D9A60D5ECAC86B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:d2:e5:c7:f6:df:41:99:1c:86:8f:16:4d: ee:0d:6b:3e:7e:f9:8f:33:1b:80:88:d4:f4:18:90: 2c:f1:43:da:87:20:fd:ca:d0:16:bb:bc:25:b8:64: fb:66:6e:5c:a8:e9:95:54:c7:40:5b:e6:0a:1a:23: 1c:0b:c4:cc:08:ce:63:27:22:db:d2:89:21:0a:5c: 3f:30:2e:52:98:1a:72:8b:72:4e:43:b9:e8:09:bf: 51:bf:54:8a:df:8a:3f:39:ac:03:eb:28:98:d7:3a: 6f:f5:c9:42:9f:71:d2:68:ff:0f:c1:79:9a:06:3a: 9c:5e:fe:3b:52:6c:ce:dc:ea:cc:54:d2:89:e1:34: 34:35:2f:fa:78:57:11:36:43:48:26:75:92:4f:ac: 50:28:1d:31:90:7d:16:6e:89:5d:f8:68:fa:29:e8: 95:58:ae:35:c2:1a:e8:b9:9c:46:32:1c:a9:ab:2e: d0:74:c8:7d:a7:5f:00:aa:23:e1:3a:36:e2:6f:89: a1:e9:80:e8:5c:66:24:ec:32:d0:0a:85:a5:19:4e: 65:fa:ab:c4:df:57:09:26:14:f4:43:a5:ee:26:12: 20:d2:69:a2:d1:c4:97:45:a7:99:86:2a:7b:de:e4: 7d:21:dd:52:38:b9:1c:6f:a7:d2:1e:52:83:31:0a: fe:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:57:41:47:BB:9B:FF:77:3B:F4:B1:D9:A6:0D:5E:CA:C8:6B:1E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lXJXQUe7m_93O_Sx2aYNXsrIax4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.225.0.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:67:71:46:b1:b5:d6:68:ec:06:99:f6:01:dd:e8:37:63:e7: 2f:d9:b6:16:7c:71:6b:da:07:a7:b7:f7:74:a7:27:83:20:44: 4f:b2:e0:2e:c5:fb:2c:81:e5:60:3a:03:4a:25:1c:fc:43:59: 46:32:a8:94:41:bf:15:b0:23:99:2b:93:0b:f2:29:71:52:0f: 62:9c:90:13:4d:d9:74:14:e2:a8:af:13:2b:d4:ee:d3:4f:f0: 17:e8:5f:1a:7d:82:78:23:7b:07:0f:af:a1:76:6c:80:9b:23: a2:81:22:7d:b8:60:74:74:d0:ba:81:3f:a4:64:c8:aa:0e:39: c7:1c:41:08:30:d4:ed:05:8f:1d:e6:78:32:32:7e:90:24:fa: 47:30:1b:95:56:a6:30:b3:a8:36:b3:48:02:af:e1:54:da:90: 15:c4:c3:87:a5:84:0d:8b:05:cf:5a:d6:78:ba:c8:d8:eb:75: 54:ae:1c:33:15:d7:8a:c8:7e:e2:fc:9d:be:7e:82:89:f7:91: a2:23:e4:10:55:a8:0f:c4:ff:d2:b5:3d:91:25:de:c0:b4:34: 16:b6:47:46:da:05:51:b3:75:d1:49:64:b3:93:59:58:13:86: f3:37:6e:d6:0f:68:89:d9:ff:a9:d7:80:b8:a4:2e:d5:c2:3d: 94:7e:8c:5c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk1NzI1NzQxNDdCQjlC RkY3NzNCRjRCMUQ5QTYwRDVFQ0FDODZCMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCad9Llx/bfQZkcho8WTe4Naz5++Y8zG4CI1PQYkCzxQ9qHIP3K 0Ba7vCW4ZPtmblyo6ZVUx0Bb5goaIxwLxMwIzmMnItvSiSEKXD8wLlKYGnKLck5D uegJv1G/VIrfij85rAPrKJjXOm/1yUKfcdJo/w/BeZoGOpxe/jtSbM7c6sxU0onh NDQ1L/p4VxE2Q0gmdZJPrFAoHTGQfRZuiV34aPop6JVYrjXCGui5nEYyHKmrLtB0 yH2nXwCqI+E6NuJviaHpgOhcZiTsMtAKhaUZTmX6q8TfVwkmFPRDpe4mEiDSaaLR xJdFp5mGKnve5H0h3VI4uRxvp9IeUoMxCv7BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlXJXQUe7m/93O/Sx2aYNXsrIax4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xYSlhRVWU3bV85M09fU3gy YVlOWHNySWF4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn 4QAwDQYJKoZIhvcNAQELBQADggEBAJ9ncUaxtdZo7AaZ9gHd6Ddj5y/ZthZ8cWva B6e393SnJ4MgRE+y4C7F+yyB5WA6A0olHPxDWUYyqJRBvxWwI5krkwvyKXFSD2Kc kBNN2XQU4qivEyvU7tNP8BfoXxp9gngjewcPr6F2bICbI6KBIn24YHR00LqBP6Rk yKoOOcccQQgw1O0Fjx3meDIyfpAk+kcwG5VWpjCzqDazSAKv4VTakBXEw4elhA2L Bc9a1ni6yNjrdVSuHDMV14rIfuL8nb5+gon3kaIj5BBVqA/E/9K1PZEl3sC0NBa2 R0baBVGzddFJZLOTWVgThvM3btYPaInZ/6nXgLikLtXCPZR+jFw= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org