$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa File: x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa (raw, json) Hash identifier: BAkJcmSEZmAN7V4L9pqhI6zKnyuH8iqguVghEtj1MCk= Subject key identifier: C7:48:1C:7F:2D:81:87:39:9D:C3:64:7F:BF:05:C3:5B:35:7B:E7:02 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DE4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa Signing time: Fri 01 Sep 2023 10:15:25 +0000 ROA not before: Fri 01 Sep 2023 10:15:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.64.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7652 (0x1de4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:25 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C7481C7F2D8187399DC3647FBF05C35B357BE702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:43:44:4e:91:48:4f:03:4f:d5:dc:5b:32:f0: d0:1c:da:ab:4a:fd:53:4f:10:7f:56:60:84:d3:28: 75:d2:dd:b2:c5:43:9d:79:77:9f:55:6f:55:d5:6a: 99:fa:9d:c1:b5:6d:ca:8b:4a:7c:36:94:a4:4f:0f: 0c:ea:64:a2:ef:79:ec:7b:43:09:00:44:6c:28:03: 91:66:4e:7b:dc:48:3e:5c:18:d1:3a:9d:91:6c:58: 43:84:db:68:1a:d5:94:87:e9:56:0e:53:8c:d6:8f: 23:dd:83:f7:f7:53:98:10:a3:b7:a0:11:f1:53:db: b0:73:1f:1d:5f:94:45:a8:b9:0b:9e:64:9b:4b:f4: 15:0e:62:ec:34:a9:fb:d0:b6:12:cc:08:2f:1c:b9: 04:ce:9d:51:e5:f4:5a:42:02:01:f6:10:a7:f1:56: ef:e6:37:d5:dc:de:18:4c:25:16:b4:3a:d5:c7:09: 28:e0:7d:f8:5c:f5:ab:93:5d:bc:2c:fb:31:1d:26: ea:c6:93:7e:22:d2:d2:fb:d9:d2:ab:13:69:79:bd: 6e:15:a6:49:b9:a8:8b:d9:02:64:5f:1c:63:bd:fb: 20:33:a6:cc:2a:02:99:d9:bd:64:30:3d:f6:33:e3: 3a:f3:3f:63:4a:8b:a3:d7:e7:35:b7:ac:19:b0:e6: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:1C:7F:2D:81:87:39:9D:C3:64:7F:BF:05:C3:5B:35:7B:E7:02 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.24.0/21 Signature Algorithm: sha256WithRSAEncryption 66:8b:c9:2d:01:66:78:f0:24:60:80:ce:c4:ba:43:f3:fe:0e: ac:1a:1e:6e:90:39:04:ed:7b:6b:93:a3:26:e5:6b:15:32:b2: 20:f8:34:fb:00:7a:30:62:fa:00:5a:d8:55:17:49:a5:24:fe: 52:36:f7:b5:7e:07:f7:cb:53:de:34:41:63:0d:0d:a7:a5:79: a3:fe:b7:c8:a2:07:11:8d:6a:7b:cb:ca:b8:7d:56:35:15:b2: 37:a1:34:cd:f2:fe:0a:6f:d5:7f:64:aa:a7:7c:35:fa:39:52: 3a:0b:e2:35:e5:7c:95:4c:1f:e8:05:dd:e7:cf:41:fe:87:83: 47:07:57:1f:6d:0a:01:11:61:b3:fe:84:33:89:11:64:6c:72: 55:1e:07:a7:92:0b:b1:ec:7f:60:c9:b3:4c:83:b6:e0:8c:d0: 0b:04:99:ad:01:09:44:c3:e5:53:c6:47:5f:46:55:a7:44:83: a9:d6:5d:25:ed:bc:ec:f7:b5:61:ac:ec:7c:2a:2d:95:2f:28: d4:4e:0c:64:0d:13:39:00:36:bf:67:53:e5:90:52:ac:09:b8: 32:75:1a:9f:7b:40:b9:60:7a:da:77:62:bf:34:7a:c9:ef:e4: cd:1f:d0:3c:bc:66:c6:d4:c0:52:80:1b:82:4a:d6:4e:4b:36: 6a:c9:73:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM3NDgxQzdGMkQ4MTg3 Mzk5REMzNjQ3RkJGMDVDMzVCMzU3QkU3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqQ0ROkUhPA0/V3Fsy8NAc2qtK/VNPEH9WYITTKHXS3bLFQ515 d59Vb1XVapn6ncG1bcqLSnw2lKRPDwzqZKLveex7QwkARGwoA5FmTnvcSD5cGNE6 nZFsWEOE22ga1ZSH6VYOU4zWjyPdg/f3U5gQo7egEfFT27BzHx1flEWouQueZJtL 9BUOYuw0qfvQthLMCC8cuQTOnVHl9FpCAgH2EKfxVu/mN9Xc3hhMJRa0OtXHCSjg ffhc9auTXbws+zEdJurGk34i0tL72dKrE2l5vW4Vpkm5qIvZAmRfHGO9+yAzpswq ApnZvWQwPfYz4zrzP2NKi6PX5zW3rBmw5pCDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUx0gcfy2Bhzmdw2R/vwXDWzV75wIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3gwZ2NmeTJCaHptZHcyUl92 d1hEV3pWNzV3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 QBgwDQYJKoZIhvcNAQELBQADggEBAGaLyS0BZnjwJGCAzsS6Q/P+DqwaHm6QOQTt e2uToyblaxUysiD4NPsAejBi+gBa2FUXSaUk/lI297V+B/fLU940QWMNDaeleaP+ t8iiBxGNanvLyrh9VjUVsjehNM3y/gpv1X9kqqd8Nfo5UjoL4jXlfJVMH+gF3efP Qf6Hg0cHVx9tCgERYbP+hDOJEWRsclUeB6eSC7Hsf2DJs0yDtuCM0AsEma0BCUTD 5VPGR19GVadEg6nWXSXtvOz3tWGs7HwqLZUvKNRODGQNEzkANr9nU+WQUqwJuDJ1 Gp97QLlgetp3Yr80esnv5M0f0Dy8ZsbUwFKAG4JK1k5LNmrJc4o= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org