$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kn4ty9crMYOpnRDXoLaO9y3wh80.roa File: Kn4ty9crMYOpnRDXoLaO9y3wh80.roa (raw, json) Hash identifier: /q1zqRk+KLXVbMik/0LjKbyCoMK3msmkJ9etLPMnHyA= Subject key identifier: 2A:7E:2D:CB:D7:2B:31:83:A9:9D:10:D7:A0:B6:8E:F7:2D:F0:87:CD Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DE8 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kn4ty9crMYOpnRDXoLaO9y3wh80.roa Signing time: Fri 01 Sep 2023 10:15:27 +0000 ROA not before: Fri 01 Sep 2023 10:15:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 123.0.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7656 (0x1de8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2A7E2DCBD72B3183A99D10D7A0B68EF72DF087CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:96:a0:93:2c:52:1a:a2:20:a7:a4:b6:9c: 42:15:39:d7:86:90:57:2d:56:b8:a2:75:4c:e5:a1: 82:70:5b:a4:d7:43:a8:a3:46:2d:72:5c:cb:47:88: 38:77:65:df:8a:06:8f:60:7c:be:dc:41:b7:54:32: aa:f6:7e:e0:8e:87:82:fe:87:26:dd:16:2d:50:f4: 00:1c:8c:a7:c2:fb:4e:77:0d:1d:3f:16:d0:f1:36: 9c:e6:f2:a2:f0:90:2e:85:31:ce:92:d6:a4:e0:e8: 1a:df:6b:c4:89:e0:3c:3c:6e:c8:6a:08:c9:bb:72: db:02:c6:30:24:da:91:60:fe:10:bd:42:b2:59:3c: 85:23:16:69:14:43:df:71:28:be:72:37:f7:69:0d: db:63:f4:52:d1:c2:85:b0:20:c8:5c:02:b1:11:f8: 00:12:37:aa:99:65:82:18:ce:97:d3:c4:d7:4a:68: 16:26:19:ae:89:e1:4c:b8:ad:9c:84:19:4e:6d:cb: f2:0b:de:4f:9e:01:93:a6:ba:c2:1d:cd:f8:cf:7f: cf:07:14:05:06:8a:76:cb:dd:c1:d5:37:e5:08:c0: 7d:b6:1e:48:0d:c3:47:04:80:8f:c1:0d:73:b5:50: a4:89:d8:43:1c:c0:5c:32:44:48:f6:d6:e9:56:56: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7E:2D:CB:D7:2B:31:83:A9:9D:10:D7:A0:B6:8E:F7:2D:F0:87:CD X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kn4ty9crMYOpnRDXoLaO9y3wh80.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.46.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:80:06:eb:9b:64:a6:99:89:07:b2:96:6b:5f:e0:f7:7b:75: 51:73:9c:ce:d5:d8:60:3d:cf:e6:2b:d6:64:d7:8f:9f:42:0c: 23:80:2c:3a:55:a1:5f:4b:93:a5:1d:e6:db:48:0d:7d:45:7b: 29:50:5c:b1:ca:b5:54:20:a2:85:4f:57:cf:15:5c:ae:6e:c7: f1:8a:ea:a1:25:f4:f9:66:bf:d0:aa:92:36:43:2c:d2:ad:b3: 8a:75:3d:a6:e8:af:66:f6:94:fd:1f:42:c9:47:b5:b4:6d:ef: 7f:64:18:4e:8d:47:fc:f0:31:e0:e0:54:ad:9e:01:83:e2:06: 01:b3:0b:9e:d5:e7:38:81:ab:8e:ab:6b:25:d5:46:41:4a:18: e6:b1:dc:7b:c2:46:bf:b3:33:9d:13:b4:47:cd:12:48:0a:db: 54:01:44:e6:5b:33:e3:f6:5e:de:70:8f:61:dc:a2:62:cb:34: ac:5e:54:79:4d:88:b6:7f:b3:30:4d:19:ff:55:a7:de:d8:dc: e7:3d:6d:82:f4:46:36:0e:47:c2:5d:33:24:49:ce:e4:7f:df: 83:29:9a:d9:81:e8:ac:65:ca:c8:61:eb:8c:9c:bf:c5:a8:80: 98:59:f8:b3:d3:b0:a5:73:90:f5:d7:eb:38:44:08:ba:95:f2: f9:af:46:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJBN0UyRENCRDcyQjMx ODNBOTlEMTBEN0EwQjY4RUY3MkRGMDg3Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwpJagkyxSGqIgp6S2nEIVOdeGkFctVriidUzloYJwW6TXQ6ij Ri1yXMtHiDh3Zd+KBo9gfL7cQbdUMqr2fuCOh4L+hybdFi1Q9AAcjKfC+053DR0/ FtDxNpzm8qLwkC6FMc6S1qTg6Brfa8SJ4Dw8bshqCMm7ctsCxjAk2pFg/hC9QrJZ PIUjFmkUQ99xKL5yN/dpDdtj9FLRwoWwIMhcArER+AASN6qZZYIYzpfTxNdKaBYm Ga6J4Uy4rZyEGU5ty/IL3k+eAZOmusIdzfjPf88HFAUGinbL3cHVN+UIwH22HkgN w0cEgI/BDXO1UKSJ2EMcwFwyREj21ulWVpx1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKn4ty9crMYOpnRDXoLaO9y3wh80wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tuNHR5OWNyTVlPcG5SRFhv TGFPOXkzd2g4MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 AC4wDQYJKoZIhvcNAQELBQADggEBACyABuubZKaZiQeylmtf4Pd7dVFznM7V2GA9 z+Yr1mTXj59CDCOALDpVoV9Lk6Ud5ttIDX1FeylQXLHKtVQgooVPV88VXK5ux/GK 6qEl9Plmv9CqkjZDLNKts4p1Pabor2b2lP0fQslHtbRt739kGE6NR/zwMeDgVK2e AYPiBgGzC57V5ziBq46rayXVRkFKGOax3HvCRr+zM50TtEfNEkgK21QBROZbM+P2 Xt5wj2HcomLLNKxeVHlNiLZ/szBNGf9Vp97Y3Oc9bYL0RjYOR8JdMyRJzuR/34Mp mtmB6Kxlyshh64ycv8WogJhZ+LPTsKVzkPXX6zhECLqV8vmvRlk= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org