$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa File: 0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa (raw, json) Hash identifier: +cb5cY59yYOPqcj3Vd9jaEmZ7Aad+R+854KP1o46lEA= Subject key identifier: D0:6A:68:36:82:AF:A5:3B:2E:16:E3:15:60:FE:B0:A9:79:B3:DA:3A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D50 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa Signing time: Fri 01 Sep 2023 10:14:39 +0000 ROA not before: Fri 01 Sep 2023 10:14:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 2407:4b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7504 (0x1d50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D06A683682AFA53B2E16E31560FEB0A979B3DA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:f9:6d:72:8a:09:88:ad:86:74:0b:90:24: f9:2b:93:35:ee:d7:d6:49:a0:79:26:52:73:f4:98: 45:f5:04:92:a1:97:e4:ba:4d:6d:83:ad:48:49:e6: aa:6b:75:91:bb:54:36:dd:78:02:c0:69:ae:53:f5: ad:60:3d:a7:f3:01:cb:31:e0:b8:b2:bb:2e:48:3f: 82:16:79:56:ab:01:d3:82:93:3c:16:61:0d:8b:48: 06:39:bd:8f:bd:4c:d6:f6:ea:ed:1a:47:ea:6d:f2: 23:88:55:03:1a:62:7c:3a:7b:2d:b3:15:f7:2e:9d: e5:ff:f4:a1:4e:64:29:77:85:43:4c:5f:7e:ec:5c: 88:cf:22:d1:40:9f:44:91:32:b4:b7:90:60:01:d1: a9:06:82:48:1b:be:cf:a6:2e:13:e3:bb:02:2d:20: f8:4a:d7:14:76:e9:7d:8c:89:55:8f:75:fa:02:d9: 2d:83:f9:55:d8:51:c1:b6:6b:1a:0a:14:5b:83:24: a8:46:b2:58:65:c9:2b:66:7f:b0:2b:cf:90:77:15: 4e:18:b3:23:cf:f0:26:fd:d6:72:6f:cf:f8:51:d5: 11:e5:2e:8f:51:76:59:38:15:c0:0d:2e:10:6d:ff: 33:77:63:f1:75:b0:de:be:df:05:05:da:18:d6:a6: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6A:68:36:82:AF:A5:3B:2E:16:E3:15:60:FE:B0:A9:79:B3:DA:3A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 20:4d:3f:13:9d:b4:7d:4d:79:3b:1e:7d:25:cc:7b:a0:84:5f: 0e:4a:12:50:fa:76:57:31:2e:3d:b1:42:88:29:29:b9:47:15: cd:b2:c4:9c:92:d9:e9:0e:63:19:86:4a:f1:41:73:c8:22:a5: b3:bb:b3:4b:4d:e2:1c:84:bf:b3:ea:9f:c6:a2:1d:58:c7:42: f9:f2:89:18:86:b6:56:5a:34:81:66:73:eb:e1:20:44:07:ad: cd:fc:d8:bf:ef:68:87:fb:fb:9f:a7:e7:74:eb:78:56:8d:4e: f2:34:e8:03:b3:e5:8e:ac:e3:b9:fd:b8:0e:b3:13:22:ff:12: c1:ee:7a:c5:2d:d4:ac:0f:92:79:54:8c:e0:a9:24:49:9e:ed: eb:92:6f:a7:ab:5a:94:80:bd:44:cc:e8:84:83:01:85:11:91: 87:42:3e:f4:e1:48:7c:1e:b1:6e:35:98:00:15:fa:8d:ba:02: be:8a:e7:7c:84:97:ae:15:af:a2:1f:23:48:f7:6c:e1:4e:57: 36:72:a4:65:82:7c:21:07:27:f4:65:89:43:60:35:19:6b:30: 4a:16:e4:79:23:1f:e1:dd:ee:cd:ab:30:c4:88:75:54:4b:b9: fd:05:17:fb:b7:01:0c:00:6d:f5:db:e0:2c:d7:80:dc:40:8d: 51:e5:69:f0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICHVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQwNkE2ODM2ODJBRkE1 M0IyRTE2RTMxNTYwRkVCMEE5NzlCM0RBM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCVfltcooJiK2GdAuQJPkrkzXu19ZJoHkmUnP0mEX1BJKhl+S6 TW2DrUhJ5qprdZG7VDbdeALAaa5T9a1gPafzAcsx4Liyuy5IP4IWeVarAdOCkzwW YQ2LSAY5vY+9TNb26u0aR+pt8iOIVQMaYnw6ey2zFfcuneX/9KFOZCl3hUNMX37s XIjPItFAn0SRMrS3kGAB0akGgkgbvs+mLhPjuwItIPhK1xR26X2MiVWPdfoC2S2D +VXYUcG2axoKFFuDJKhGslhlyStmf7Arz5B3FU4YsyPP8Cb91nJvz/hR1RHlLo9R dlk4FcANLhBt/zN3Y/F1sN6+3wUF2hjWpv9xAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU0GpoNoKvpTsuFuMVYP6wqXmz2jowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBHcG9Ob0t2cFRzdUZ1TVZZ UDZ3cVhtejJqby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B0sAMA0GCSqGSIb3DQEBCwUAA4IBAQAgTT8TnbR9TXk7Hn0lzHughF8OShJQ+nZX MS49sUKIKSm5RxXNssScktnpDmMZhkrxQXPIIqWzu7NLTeIchL+z6p/Goh1Yx0L5 8okYhrZWWjSBZnPr4SBEB63N/Ni/72iH+/ufp+d063hWjU7yNOgDs+WOrOO5/bgO sxMi/xLB7nrFLdSsD5J5VIzgqSRJnu3rkm+nq1qUgL1EzOiEgwGFEZGHQj704Uh8 HrFuNZgAFfqNugK+iud8hJeuFa+iHyNI92zhTlc2cqRlgnwhByf0ZYlDYDUZazBK FuR5Ix/h3e7NqzDEiHVUS7n9BRf7twEMAG312+As14DcQI1R5Wnw -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org