$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa File: Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa (raw, json) Hash identifier: Z4+92z+05iK/ySvfIbVE0UwANyD3OkHfg/x1/M4KTIM= Subject key identifier: 55:FE:4D:25:07:FE:F2:6F:E1:09:8E:91:EA:D0:4A:D8:C7:43:89:7F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DB3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa Signing time: Fri 01 Sep 2023 10:15:11 +0000 ROA not before: Fri 01 Sep 2023 10:15:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 122.254.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7603 (0x1db3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=55FE4D2507FEF26FE1098E91EAD04AD8C743897F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b9:af:a9:30:ed:60:52:0f:16:ab:7e:8f:93: 24:6a:4e:42:1c:fc:86:74:87:89:a5:80:f1:79:b3: ff:be:0f:1e:fb:40:4c:73:b4:c6:3f:c6:a5:cd:8e: 2b:f3:df:af:5d:ad:42:4c:36:3e:b0:b7:b5:bc:2d: 74:aa:dd:d1:f9:ea:ee:9d:54:4b:ad:ed:ac:29:04: ba:56:71:2f:4a:ea:c3:72:a2:89:e1:b3:11:ea:26: dc:16:21:b0:01:7f:2a:0d:69:f7:b5:9c:82:de:6f: 91:20:21:da:2a:bb:77:2e:48:6d:ab:21:6f:01:0c: 46:7e:65:bd:a2:30:e6:94:17:fb:d9:b7:d3:4c:c0: 91:9c:07:06:60:87:e5:e9:11:05:9e:2e:28:25:27: d0:13:52:da:e0:09:17:4e:15:1f:62:99:37:03:74: d9:e2:03:72:f5:94:7f:6d:2a:cc:b1:cf:e7:92:d4: 20:d0:54:92:c3:69:a0:e2:61:43:50:b3:2f:9b:68: 67:2e:5c:3a:38:35:cb:55:48:4d:0d:0f:87:bb:21: d1:86:4c:b5:69:be:47:89:af:b1:4c:fc:e1:32:7b: d6:38:0d:3e:89:03:5a:6b:bc:58:7b:53:a9:10:df: 84:32:3a:b4:4f:39:c0:f2:fc:b6:40:44:68:0b:4c: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FE:4D:25:07:FE:F2:6F:E1:09:8E:91:EA:D0:4A:D8:C7:43:89:7F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.32.0/22 Signature Algorithm: sha256WithRSAEncryption 90:89:d0:f2:95:20:26:08:1f:a0:33:cb:59:74:0b:2b:0a:42: 9a:a9:f6:38:49:68:33:51:f3:f4:c7:97:7f:f6:34:3b:fc:b7: e9:3c:92:fe:5f:71:c7:a2:f6:04:31:4d:53:c5:20:21:12:ab: 11:ce:8a:68:2c:5c:ca:38:c7:f7:bd:f2:70:54:74:5c:89:ac: 53:41:1f:8f:1b:c0:98:f6:96:9f:e6:d1:4a:f4:81:00:ca:03: 16:aa:09:08:77:43:a2:06:b1:d5:40:e8:28:92:a6:4a:85:96: a0:58:ca:37:3c:08:37:09:8a:8b:af:85:d5:66:7c:95:f5:8e: 0e:ab:63:f0:53:90:bf:62:d7:81:60:f2:af:f1:4c:11:de:31: 2e:e7:85:a8:c5:a2:07:b1:ca:bb:78:33:b0:67:18:cc:25:70: 87:80:5a:59:46:e9:35:bf:c8:3e:14:8f:d8:f1:d9:dc:e6:0a: 95:0e:46:df:63:70:f5:d9:d5:20:37:c9:51:35:47:d9:2c:90: c1:89:f2:25:4a:99:2c:bb:0c:f0:e7:df:5c:5e:97:79:19:8e: 50:cd:2b:0f:00:5e:c9:09:9b:14:02:55:25:e7:4a:0a:ea:c7: 06:94:48:ba:cd:ef:1e:68:57:e0:09:3e:59:c9:0f:8a:32:7f: c4:54:7c:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU1RkU0RDI1MDdGRUYy NkZFMTA5OEU5MUVBRDA0QUQ4Qzc0Mzg5N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtua+pMO1gUg8Wq36PkyRqTkIc/IZ0h4mlgPF5s/++Dx77QExz tMY/xqXNjivz369drUJMNj6wt7W8LXSq3dH56u6dVEut7awpBLpWcS9K6sNyoonh sxHqJtwWIbABfyoNafe1nILeb5EgIdoqu3cuSG2rIW8BDEZ+Zb2iMOaUF/vZt9NM wJGcBwZgh+XpEQWeLiglJ9ATUtrgCRdOFR9imTcDdNniA3L1lH9tKsyxz+eS1CDQ VJLDaaDiYUNQsy+baGcuXDo4NctVSE0ND4e7IdGGTLVpvkeJr7FM/OEye9Y4DT6J A1prvFh7U6kQ34QyOrRPOcDy/LZARGgLTLlRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVf5NJQf+8m/hCY6R6tBK2MdDiX8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZmNU5KUWYtOG1faENZNlI2 dEJLMk1kRGlYOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6 /iAwDQYJKoZIhvcNAQELBQADggEBAJCJ0PKVICYIH6Azy1l0CysKQpqp9jhJaDNR 8/THl3/2NDv8t+k8kv5fccei9gQxTVPFICESqxHOimgsXMo4x/e98nBUdFyJrFNB H48bwJj2lp/m0Ur0gQDKAxaqCQh3Q6IGsdVA6CiSpkqFlqBYyjc8CDcJiouvhdVm fJX1jg6rY/BTkL9i14Fg8q/xTBHeMS7nhajFogexyrt4M7BnGMwlcIeAWllG6TW/ yD4Uj9jx2dzmCpUORt9jcPXZ1SA3yVE1R9kskMGJ8iVKmSy7DPDn31xel3kZjlDN Kw8AXskJmxQCVSXnSgrqxwaUSLrN7x5oV+AJPlnJD4oyf8RUfH4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org