$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FJIk-KmB4E9MqRmDffSzfcsyj7M.roa File: FJIk-KmB4E9MqRmDffSzfcsyj7M.roa (raw, json) Hash identifier: IKwPQ8SFWHiKKIz7+J3gNhPyes3Q6x+/FLszZ6sex44= Subject key identifier: 14:92:24:F8:A9:81:E0:4F:4C:A9:19:83:7D:F4:B3:7D:CB:32:8F:B3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EA8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FJIk-KmB4E9MqRmDffSzfcsyj7M.roa Signing time: Fri 01 Sep 2023 10:16:19 +0000 ROA not before: Fri 01 Sep 2023 10:16:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 2407:4b00::/32 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7848 (0x1ea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=149224F8A981E04F4CA919837DF4B37DCB328FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:ab:e1:5a:d0:3e:3d:8c:47:2c:6f:07:a1: 20:d0:6a:33:64:c4:c7:e2:2a:eb:f1:58:3d:51:ca: be:55:16:3c:d3:71:6c:3e:f0:27:4b:93:83:64:76: 7a:7f:6a:77:8e:a8:18:83:63:fc:ef:f0:63:f0:0f: 44:c9:b3:bd:f4:80:dc:f0:c0:1c:bd:5f:40:b0:c5: 0c:0d:38:0f:3e:6b:30:80:c3:97:0e:70:28:be:7a: 87:a8:87:1c:9c:54:7b:65:44:73:f2:54:89:9e:d6: b9:5c:81:e2:be:40:b2:4c:df:6c:0c:66:99:18:cd: 44:9e:9c:98:af:c5:53:17:3b:6d:87:38:5f:8e:46: a4:b0:6c:87:53:70:85:11:15:21:3a:79:1f:d0:17: ea:ea:64:51:f4:e0:f3:f1:66:eb:63:c7:b1:d3:74: 2f:a9:b8:5f:61:28:f6:9c:4a:46:9d:58:b7:66:b6: 9c:ae:b2:44:ca:c2:21:d9:1a:13:45:b6:3f:89:ce: fb:d0:93:40:c9:a7:1f:d4:9c:12:89:f2:69:2a:a7: 96:4e:91:54:67:36:69:f2:83:bc:1e:fe:ee:a7:f8: 4c:39:b4:d8:dc:3f:4f:00:98:6d:54:b1:a4:72:77: 0a:69:04:b0:8f:05:03:c2:09:42:92:92:fb:9e:9e: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:24:F8:A9:81:E0:4F:4C:A9:19:83:7D:F4:B3:7D:CB:32:8F:B3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FJIk-KmB4E9MqRmDffSzfcsyj7M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 2f:f8:3d:02:87:a1:1f:28:32:93:e4:37:ca:38:f5:94:c4:f8: 36:fc:f3:8c:14:e7:e1:98:d8:5c:7b:49:eb:c5:5a:eb:59:a9: 04:03:f5:4b:2c:1b:cc:c4:bd:8a:5e:01:95:c8:9e:da:a3:3e: 95:2a:2d:6f:d6:be:83:01:45:3b:23:47:ff:1c:ab:68:cf:b9: e7:b1:8b:fa:57:a2:23:4c:b0:2b:08:90:57:76:6c:ab:95:4d: 6c:0c:48:da:4c:63:f0:76:2b:78:08:95:9b:3f:b2:f4:0a:3b: 18:a4:ef:15:88:83:25:e0:36:2b:ab:26:71:8c:77:eb:23:a7: d2:18:12:13:9f:f0:f9:8e:8d:90:c1:8e:1a:7c:c3:13:6c:a6: 28:76:63:11:61:0c:d3:4a:bc:0d:62:92:bf:40:77:41:f1:fd: ee:f7:62:eb:c8:8a:40:b0:03:1e:f8:9b:5e:bc:de:15:53:db: 04:ff:8c:10:21:71:e7:6c:8f:83:63:4b:05:78:5c:ed:dc:b8: 6d:6f:98:ec:4d:4a:bb:4d:94:18:ac:b4:d2:f6:2d:32:f9:1d: 35:01:21:f5:be:97:c8:99:3d:29:35:42:71:46:c1:92:7e:ae: 8a:f5:85:9f:bd:a0:20:7c:65:44:c9:4e:43:5d:84:c2:f8:1c: 87:4c:0e:77 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICHqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE0OTIyNEY4QTk4MUUw NEY0Q0E5MTk4MzdERjRCMzdEQ0IzMjhGQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoyqvhWtA+PYxHLG8HoSDQajNkxMfiKuvxWD1Ryr5VFjzTcWw+ 8CdLk4Nkdnp/aneOqBiDY/zv8GPwD0TJs730gNzwwBy9X0CwxQwNOA8+azCAw5cO cCi+eoeohxycVHtlRHPyVIme1rlcgeK+QLJM32wMZpkYzUSenJivxVMXO22HOF+O RqSwbIdTcIURFSE6eR/QF+rqZFH04PPxZutjx7HTdC+puF9hKPacSkadWLdmtpyu skTKwiHZGhNFtj+JzvvQk0DJpx/UnBKJ8mkqp5ZOkVRnNmnyg7we/u6n+Ew5tNjc P08AmG1UsaRydwppBLCPBQPCCUKSkvuentYzAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUFJIk+KmB4E9MqRmDffSzfcsyj7MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZKSWstS21CNEU5TXFSbURm ZlN6ZmNzeWo3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B0sAMA0GCSqGSIb3DQEBCwUAA4IBAQAv+D0Ch6EfKDKT5DfKOPWUxPg2/POMFOfh mNhce0nrxVrrWakEA/VLLBvMxL2KXgGVyJ7aoz6VKi1v1r6DAUU7I0f/HKtoz7nn sYv6V6IjTLArCJBXdmyrlU1sDEjaTGPwdit4CJWbP7L0CjsYpO8ViIMl4DYrqyZx jHfrI6fSGBITn/D5jo2QwY4afMMTbKYodmMRYQzTSrwNYpK/QHdB8f3u92LryIpA sAMe+JtevN4VU9sE/4wQIXHnbI+DY0sFeFzt3Lhtb5jsTUq7TZQYrLTS9i0y+R01 ASH1vpfImT0pNUJxRsGSfq6K9YWfvaAgfGVEyU5DXYTC+ByHTA53 -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org