$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa File: JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa (raw, json) Hash identifier: PFHNBmWMULSL3ib++aIRSGPr7/B4ybLfQhPeaDfKhAk= Subject key identifier: 24:6D:E4:53:92:40:A7:74:4E:1C:F1:8C:49:AB:F1:83:A5:2E:FD:F5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EB3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa Signing time: Fri 01 Sep 2023 10:16:21 +0000 ROA not before: Fri 01 Sep 2023 10:16:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 124.6.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7859 (0x1eb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=246DE4539240A7744E1CF18C49ABF183A52EFDF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:8b:d8:a7:22:f4:3c:8f:fa:c1:7e:4f:fc: 3c:9c:0b:9c:75:c6:44:4b:91:4c:43:2e:0d:6d:aa: f8:37:ce:3e:be:94:5e:f4:d8:26:de:61:ae:09:75: 59:01:71:74:1f:5e:0b:2d:48:25:b1:9d:85:48:8b: 67:3c:fc:99:aa:10:4b:b5:76:63:f9:9c:fb:ab:01: ef:16:8c:56:2b:03:1c:44:c5:b6:9d:7f:3c:0a:df: b5:b0:20:da:ca:08:d3:21:a9:9a:c6:e2:ac:71:25: a0:f8:33:10:c8:76:53:b2:2f:c0:41:55:fa:24:53: 69:46:ce:70:56:af:5c:78:42:45:41:bf:2d:66:f0: 2e:ef:c6:39:d6:25:d1:45:90:a7:71:80:56:d3:6a: 68:0b:f8:0f:bc:6b:d2:3e:bc:66:1c:51:62:2c:c5: 9f:ee:46:da:0e:37:6b:76:5e:fc:a9:b0:f7:59:63: c9:83:b3:c1:dc:af:8e:9d:03:46:f9:0e:49:20:d0: d4:55:26:4a:e6:00:86:86:e3:67:16:b7:c5:3d:48: 2b:78:17:67:af:66:33:13:b5:9b:c1:13:34:00:10: 4d:0b:7e:3b:29:e7:4f:03:5a:df:44:39:77:73:5b: 2e:1e:cf:4a:a3:42:d2:ae:3b:ae:e6:16:f6:d0:c2: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6D:E4:53:92:40:A7:74:4E:1C:F1:8C:49:AB:F1:83:A5:2E:FD:F5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.8.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:0a:29:39:29:b5:d4:e6:c8:1a:cd:14:a5:8f:8f:13:8b:e2: 9b:1d:a2:f6:69:f7:ab:45:a3:2c:5f:35:ca:77:ae:b7:1b:80: 4b:1c:db:83:c4:d4:ef:b0:1c:af:85:74:57:bc:0f:ca:d7:68: b5:23:12:0f:e2:6f:e4:4b:50:f9:78:f6:ab:f7:08:f5:bc:09: 98:44:53:36:dc:35:21:ae:15:20:80:d9:84:8c:4b:5f:cf:2d: d3:1b:87:bb:ff:c4:a2:e3:0c:b8:f0:ce:7d:83:a8:8c:8d:8e: d4:27:40:b3:f9:52:65:47:a0:1d:54:3c:14:73:b3:7f:4d:41: 60:02:81:34:fa:dc:6d:a2:99:f8:ea:08:76:9d:f8:29:cd:39: c2:49:81:6e:48:f4:f4:0f:3f:fc:5c:be:25:75:b7:91:b4:05: dc:9a:5c:3c:37:9f:b7:4b:3b:5f:b6:4e:d8:9f:3b:01:f8:9f: c2:eb:3a:9d:ba:11:41:a0:85:c4:4d:cd:bf:05:3e:34:c8:4a: 9f:36:ae:90:1a:c0:65:16:54:74:3a:83:84:04:4b:c9:51:ca: 77:07:2d:30:76:94:d9:aa:17:22:74:aa:8e:e3:1d:e6:e3:3d: 16:96:93:5f:ad:12:9d:b5:3b:25:e9:3d:9a:e7:e4:36:f6:d8: b6:e4:6e:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHrMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI0NkRFNDUzOTI0MEE3 NzQ0RTFDRjE4QzQ5QUJGMTgzQTUyRUZERjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfSovYpyL0PI/6wX5P/DycC5x1xkRLkUxDLg1tqvg3zj6+lF70 2CbeYa4JdVkBcXQfXgstSCWxnYVIi2c8/JmqEEu1dmP5nPurAe8WjFYrAxxExbad fzwK37WwINrKCNMhqZrG4qxxJaD4MxDIdlOyL8BBVfokU2lGznBWr1x4QkVBvy1m 8C7vxjnWJdFFkKdxgFbTamgL+A+8a9I+vGYcUWIsxZ/uRtoON2t2XvypsPdZY8mD s8Hcr46dA0b5Dkkg0NRVJkrmAIaG42cWt8U9SCt4F2evZjMTtZvBEzQAEE0Lfjsp 508DWt9EOXdzWy4ez0qjQtKuO67mFvbQwu3XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJG3kU5JAp3ROHPGMSavxg6Uu/fUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pHM2tVNUpBcDNST0hQR01T YXZ4ZzZVdV9mVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BggwDQYJKoZIhvcNAQELBQADggEBAH0KKTkptdTmyBrNFKWPjxOL4psdovZp96tF oyxfNcp3rrcbgEsc24PE1O+wHK+FdFe8D8rXaLUjEg/ib+RLUPl49qv3CPW8CZhE UzbcNSGuFSCA2YSMS1/PLdMbh7v/xKLjDLjwzn2DqIyNjtQnQLP5UmVHoB1UPBRz s39NQWACgTT63G2imfjqCHad+CnNOcJJgW5I9PQPP/xcviV1t5G0BdyaXDw3n7dL O1+2TtifOwH4n8LrOp26EUGghcRNzb8FPjTISp82rpAawGUWVHQ6g4QES8lRyncH LTB2lNmqFyJ0qo7jHebjPRaWk1+tEp21OyXpPZrn5Db22LbkbkU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org