$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uBZkdRy725L2Rbup0oroKvzMuV0.roa File: uBZkdRy725L2Rbup0oroKvzMuV0.roa (raw, json) Hash identifier: 9nPk/50onrBZpqRSXMOqJpES0qc7MUGg3yfMkR3BB6s= Subject key identifier: B8:16:64:75:1C:BB:DB:92:F6:45:BB:A9:D2:8A:E8:2A:FC:CC:B9:5D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DDD Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uBZkdRy725L2Rbup0oroKvzMuV0.roa Signing time: Fri 01 Sep 2023 10:15:24 +0000 ROA not before: Fri 01 Sep 2023 10:15:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24613 IP address blocks: 122.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7645 (0x1ddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B81664751CBBDB92F645BBA9D28AE82AFCCCB95D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:82:42:25:86:e5:e1:9d:2e:e6:67:d2:92: 22:7c:69:63:10:2f:41:e1:39:5f:97:6d:6a:97:f2: 17:86:cd:0b:b6:ec:99:dc:0d:13:3f:58:e4:44:df: 66:df:47:76:70:20:74:af:86:2f:9d:c4:ba:35:dd: 6a:17:5d:35:5e:fc:e6:4a:64:0d:50:e4:8f:f5:3f: 3d:5f:d9:e9:64:a5:a6:d8:5a:fd:19:b4:b4:88:4e: ac:96:1b:2f:6b:57:66:4d:73:e7:d7:67:ed:98:8f: 7c:92:f7:12:dc:27:58:48:09:dc:9e:44:52:fc:a1: f2:69:a7:aa:f8:07:69:2a:7e:27:e5:19:eb:4a:2f: 57:6a:ee:29:7a:5f:47:32:2a:ef:76:b0:11:2e:df: 3a:8c:70:b4:6e:6a:d3:3c:39:3b:1a:54:bc:94:69: fc:0c:fb:83:47:01:9e:60:8f:b0:a7:d0:af:42:f8: d4:0b:79:d8:5a:42:6b:be:a9:f1:4f:db:7e:a0:0d: 7a:4e:6b:b3:b5:89:e9:90:4e:01:d6:5c:c2:98:d5: 55:f3:8c:b6:c3:7d:9b:4f:9b:1c:78:3c:e6:e6:16: b3:68:82:08:a2:75:77:19:3e:f6:f7:52:a3:2e:b1: a3:a2:60:cb:f2:03:f4:2c:b0:05:8e:41:80:96:32: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:16:64:75:1C:BB:DB:92:F6:45:BB:A9:D2:8A:E8:2A:FC:CC:B9:5D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uBZkdRy725L2Rbup0oroKvzMuV0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 1a:6e:9a:5d:3a:92:27:e9:d1:2f:ce:71:ef:c8:58:46:c9:cb: 88:eb:86:42:07:3d:19:96:74:33:6d:e8:71:5c:7b:31:55:f9: f8:a5:52:d5:e7:8f:91:83:84:6f:59:45:da:4b:2f:09:df:97: 98:17:83:22:ad:07:ec:d1:7c:20:35:e6:36:5a:79:d0:6c:39: 1b:33:b5:10:e1:d2:c9:c0:09:35:00:f9:a9:85:bc:52:82:b9: d2:2e:c7:d5:75:93:7c:fe:1e:1b:5e:ca:42:fe:f6:4c:39:02: 5b:53:72:6a:87:92:4e:67:f6:45:30:db:53:40:dd:2f:df:de: d6:53:c5:cb:54:7d:ea:c5:57:bf:74:6c:6a:54:c5:6f:15:41: 86:25:fc:3a:36:df:29:df:cb:6c:04:2b:cc:5c:26:2a:67:e3: d3:25:ab:7e:d2:34:80:ce:32:25:13:3a:09:a1:41:15:47:a4: 97:a2:a4:b3:1d:f7:7a:b1:be:45:93:26:9c:9d:a7:3b:7b:da: e3:88:64:f9:86:38:46:4c:82:e0:11:d0:04:19:76:bf:73:61: 9b:72:e1:bc:d9:bb:3b:a4:f2:7a:a9:43:77:37:55:16:11:4a: 02:e5:da:74:09:13:b2:21:43:dd:ad:a9:d7:42:07:20:b1:8b: fe:1f:21:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHd0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI4MTY2NDc1MUNCQkRC OTJGNjQ1QkJBOUQyOEFFODJBRkNDQ0I5NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9aIJCJYbl4Z0u5mfSkiJ8aWMQL0HhOV+XbWqX8heGzQu27Jnc DRM/WORE32bfR3ZwIHSvhi+dxLo13WoXXTVe/OZKZA1Q5I/1Pz1f2elkpabYWv0Z tLSITqyWGy9rV2ZNc+fXZ+2Yj3yS9xLcJ1hICdyeRFL8ofJpp6r4B2kqfiflGetK L1dq7il6X0cyKu92sBEu3zqMcLRuatM8OTsaVLyUafwM+4NHAZ5gj7Cn0K9C+NQL edhaQmu+qfFP236gDXpOa7O1iemQTgHWXMKY1VXzjLbDfZtPmxx4PObmFrNoggii dXcZPvb3UqMusaOiYMvyA/QssAWOQYCWMjhFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuBZkdRy725L2Rbup0oroKvzMuV0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VCWmtkUnk3MjVMMlJidXAw b3JvS3Z6TXVWMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 ZEAwDQYJKoZIhvcNAQELBQADggEBABpuml06kifp0S/Oce/IWEbJy4jrhkIHPRmW dDNt6HFcezFV+filUtXnj5GDhG9ZRdpLLwnfl5gXgyKtB+zRfCA15jZaedBsORsz tRDh0snACTUA+amFvFKCudIux9V1k3z+HhteykL+9kw5AltTcmqHkk5n9kUw21NA 3S/f3tZTxctUferFV790bGpUxW8VQYYl/Do23ynfy2wEK8xcJipn49Mlq37SNIDO MiUTOgmhQRVHpJeipLMd93qxvkWTJpydpzt72uOIZPmGOEZMguAR0AQZdr9zYZty 4bzZuzuk8nqpQ3c3VRYRSgLl2nQJE7IhQ92tqddCByCxi/4fIXQ= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org