$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBoC0Z5N7qQrNZELCZXQev9rx6M.roa File: dBoC0Z5N7qQrNZELCZXQev9rx6M.roa (raw, json) Hash identifier: e0K7GyG/ArtSV6KiIoBW0w+KgUjGDgTRJLTjENlxK7Y= Subject key identifier: 74:1A:02:D1:9E:4D:EE:A4:2B:35:91:0B:09:95:D0:7A:FF:6B:C7:A3 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E3A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBoC0Z5N7qQrNZELCZXQev9rx6M.roa Signing time: Fri 01 Sep 2023 10:15:48 +0000 ROA not before: Fri 01 Sep 2023 10:15:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 124.6.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7738 (0x1e3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=741A02D19E4DEEA42B35910B0995D07AFF6BC7A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:b2:3e:e0:d6:ba:65:5f:65:5c:7c:c0:a3: db:36:c5:77:9e:13:04:1e:ba:15:20:a2:8e:9e:32: 34:3f:df:9b:c4:1b:5e:af:b2:58:61:ea:d6:83:f5: 1f:a6:7b:ef:a1:44:0b:83:bd:08:4e:15:ca:ec:66: 6d:cd:a6:2c:96:ae:5a:ba:89:30:3f:c0:49:bf:57: 2e:06:60:1d:9f:b7:18:dd:9e:bd:68:fa:2d:d9:45: 93:24:fb:6e:64:0a:bf:a1:1c:8e:50:74:b0:91:15: 53:eb:12:51:59:85:77:bb:e2:82:70:0a:4f:df:c4: 7a:d8:a4:a7:66:82:f2:81:00:69:c3:37:57:3e:8a: 9b:d0:a4:99:20:3c:b8:62:79:e3:ff:90:d1:64:26: a6:82:59:a1:d4:74:98:8f:38:cb:3f:d5:24:8c:e2: da:ba:13:03:92:02:cd:8d:90:3b:7f:7f:1a:83:e6: 37:b1:f9:1c:8a:af:2f:03:41:bf:cd:89:0c:da:7a: 20:20:c7:81:07:ed:cd:73:0b:71:6f:9b:46:07:8d: c9:17:08:e0:5b:e6:e9:da:1f:e2:4c:18:49:5f:d7: a7:05:66:23:84:95:0a:1b:08:83:23:76:d2:41:6c: ff:d5:ca:d3:7f:c7:7a:6c:1c:18:80:00:6a:2b:b5: 39:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1A:02:D1:9E:4D:EE:A4:2B:35:91:0B:09:95:D0:7A:FF:6B:C7:A3 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBoC0Z5N7qQrNZELCZXQev9rx6M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.28.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:0f:e7:8e:11:bd:b7:1e:f9:3e:37:eb:2c:e6:ac:f6:eb:fd: cf:04:30:f4:69:08:23:12:4d:df:c8:db:5a:c3:ba:a8:ee:47: bc:ee:99:ba:bf:7c:c8:c0:1b:25:15:52:54:49:79:e8:88:98: 93:9e:bf:6d:12:dc:c1:8b:2a:53:4f:e8:79:5f:2e:ee:70:75: 7c:fb:2f:67:22:e1:3d:d8:a2:9d:6f:6a:da:cb:90:39:1d:06: e1:31:77:e1:72:1e:32:3e:db:ec:16:fd:cd:d5:b7:3c:8f:a8: 95:17:7e:9b:75:f9:33:3b:ed:f4:f6:bf:04:49:44:e4:ad:aa: a5:eb:6d:d6:18:36:76:3f:a7:f3:63:53:67:47:25:67:10:45: ab:0c:f9:b5:a1:98:54:30:a7:c1:3d:f4:24:a2:56:58:2a:3a: 3b:4e:82:5b:dc:79:09:87:80:97:16:8d:04:d5:21:c3:54:48: c8:d9:63:0e:98:67:b2:c9:74:be:ad:b3:c7:2e:e4:6d:ed:ab: b2:37:56:cd:af:05:3d:4f:1d:43:0b:2b:80:7d:6b:28:28:80: 6e:1c:03:38:4f:0f:0f:04:85:c0:25:23:38:20:9a:f1:14:83: fc:ad:22:82:69:3e:57:99:a4:e6:ac:d6:c6:a0:9f:e7:56:6d: e3:14:d0:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc0MUEwMkQxOUU0REVF QTQyQjM1OTEwQjA5OTVEMDdBRkY2QkM3QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9cLI+4Na6ZV9lXHzAo9s2xXeeEwQeuhUgoo6eMjQ/35vEG16v slhh6taD9R+me++hRAuDvQhOFcrsZm3NpiyWrlq6iTA/wEm/Vy4GYB2ftxjdnr1o +i3ZRZMk+25kCr+hHI5QdLCRFVPrElFZhXe74oJwCk/fxHrYpKdmgvKBAGnDN1c+ ipvQpJkgPLhieeP/kNFkJqaCWaHUdJiPOMs/1SSM4tq6EwOSAs2NkDt/fxqD5jex +RyKry8DQb/NiQzaeiAgx4EH7c1zC3Fvm0YHjckXCOBb5unaH+JMGElf16cFZiOE lQobCIMjdtJBbP/VytN/x3psHBiAAGortTmDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdBoC0Z5N7qQrNZELCZXQev9rx6MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2RCb0MwWjVON3FRck5aRUxD WlhRZXY5cng2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BhwwDQYJKoZIhvcNAQELBQADggEBAD0P544Rvbce+T436yzmrPbr/c8EMPRpCCMS Td/I21rDuqjuR7zumbq/fMjAGyUVUlRJeeiImJOev20S3MGLKlNP6HlfLu5wdXz7 L2ci4T3Yop1vatrLkDkdBuExd+FyHjI+2+wW/c3VtzyPqJUXfpt1+TM77fT2vwRJ ROStqqXrbdYYNnY/p/NjU2dHJWcQRasM+bWhmFQwp8E99CSiVlgqOjtOglvceQmH gJcWjQTVIcNUSMjZYw6YZ7LJdL6ts8cu5G3tq7I3Vs2vBT1PHUMLK4B9aygogG4c AzhPDw8EhcAlIzggmvEUg/ytIoJpPleZpOas1sagn+dWbeMU0Eo= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org