$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa File: pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa (raw, json) Hash identifier: XB5dVPe6g/CZTHr/PQS/+SpiKqsO9psxQkR6gmbij5A= Subject key identifier: A5:0C:C5:6B:9C:AB:4A:ED:6B:23:A3:AA:B5:FE:60:28:45:83:C2:E5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D6F Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa Signing time: Fri 01 Sep 2023 10:14:48 +0000 ROA not before: Fri 01 Sep 2023 10:14:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 122.254.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7535 (0x1d6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A50CC56B9CAB4AED6B23A3AAB5FE60284583C2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:91:3b:69:c4:09:04:c9:8a:4d:d8:da:c0: 30:21:7f:0f:f3:fb:ef:c6:e2:f0:9d:fb:9d:fe:6c: d9:ce:ae:ba:39:f2:29:e3:f8:d6:28:f9:7e:58:a3: 28:ad:51:1e:72:e0:65:24:68:5d:ee:bd:f9:22:59: f2:33:3e:7d:6a:f0:aa:e2:83:a1:9f:c9:44:fe:79: 3e:ee:09:96:d8:55:1a:8a:41:2d:3d:01:fb:40:01: 9b:a6:c8:ad:03:b1:f0:8a:cc:f9:e3:ad:d0:ea:65: 41:d0:6c:ed:24:ed:a1:49:78:34:18:a7:44:3c:79: 70:2b:0a:11:ed:16:af:87:e7:85:bf:29:89:c4:15: a9:a5:0c:4a:d1:99:c9:d1:a7:4d:e4:de:fe:54:4b: f0:b7:fe:87:4f:57:88:7c:7e:96:64:d6:73:b6:74: 83:98:ea:3c:45:e9:b2:42:ba:bf:79:da:07:34:d0: 74:fb:17:35:81:9e:a4:a7:6a:34:be:e5:db:8a:ec: 49:67:1f:0b:75:a1:3d:15:1a:67:56:fd:40:40:db: 35:8a:38:25:4c:81:ef:b4:a0:22:f0:29:14:51:bc: a5:02:1c:dc:76:66:3e:a7:e9:91:1a:7d:f9:03:9b: 23:d8:0b:5d:44:6e:1a:76:88:42:9e:3f:cc:d4:a5: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0C:C5:6B:9C:AB:4A:ED:6B:23:A3:AA:B5:FE:60:28:45:83:C2:E5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.254.16.0/21 Signature Algorithm: sha256WithRSAEncryption 04:c3:22:43:a8:07:1e:49:10:e0:a9:aa:87:a3:13:d7:fc:e5: 67:75:02:12:21:b8:3e:bd:9a:cd:30:64:d6:5f:d9:43:b8:ab: 0c:bd:92:f2:e9:c7:17:1a:8c:80:80:c5:c3:e1:30:bb:32:62: db:00:9f:f2:e7:7b:aa:1b:6f:76:22:0a:96:d3:5f:15:03:f2: dc:8a:e3:b1:cd:37:a9:7d:43:6a:7a:c2:20:5b:53:7a:59:45: 58:43:bf:81:e7:9c:80:50:05:14:44:e1:5d:d0:31:a0:16:81: a3:b8:b1:e9:6e:54:97:4c:69:22:4f:06:0f:cb:04:73:3f:34: 07:b4:6c:3c:c5:50:08:8a:8c:ec:73:61:8b:fe:46:f1:10:b8: bb:72:42:d9:98:85:e8:b7:a5:23:13:dc:2a:7f:d4:93:c2:2f: 6a:4c:1b:43:b5:b2:6b:a8:84:40:d8:47:63:0f:0c:30:13:b9: 37:79:c9:c3:86:a3:5a:5a:00:c3:b7:32:a1:f5:3e:7e:18:f9: ff:d3:df:64:d1:01:77:01:ea:25:8e:27:f1:b9:b3:26:4a:da: 14:c5:31:a5:a2:eb:f8:03:12:73:9c:ea:1e:30:41:df:81:c1: 23:05:ad:34:09:c3:6a:46:0e:99:ec:36:58:35:c8:75:3f:c0: 8b:17:a6:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE1MENDNTZCOUNBQjRB RUQ2QjIzQTNBQUI1RkU2MDI4NDU4M0MyRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt/pE7acQJBMmKTdjawDAhfw/z++/G4vCd+53+bNnOrro58inj +NYo+X5YoyitUR5y4GUkaF3uvfkiWfIzPn1q8Krig6GfyUT+eT7uCZbYVRqKQS09 AftAAZumyK0DsfCKzPnjrdDqZUHQbO0k7aFJeDQYp0Q8eXArChHtFq+H54W/KYnE FamlDErRmcnRp03k3v5US/C3/odPV4h8fpZk1nO2dIOY6jxF6bJCur952gc00HT7 FzWBnqSnajS+5duK7ElnHwt1oT0VGmdW/UBA2zWKOCVMge+0oCLwKRRRvKUCHNx2 Zj6n6ZEaffkDmyPYC11Ebhp2iEKeP8zUpUMFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpQzFa5yrSu1rI6Oqtf5gKEWDwuUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BRekZhNXlyU3Uxckk2T3F0 ZjVnS0VXRHd1VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6 /hAwDQYJKoZIhvcNAQELBQADggEBAATDIkOoBx5JEOCpqoejE9f85Wd1AhIhuD69 ms0wZNZf2UO4qwy9kvLpxxcajICAxcPhMLsyYtsAn/Lne6obb3YiCpbTXxUD8tyK 47HNN6l9Q2p6wiBbU3pZRVhDv4HnnIBQBRRE4V3QMaAWgaO4seluVJdMaSJPBg/L BHM/NAe0bDzFUAiKjOxzYYv+RvEQuLtyQtmYhei3pSMT3Cp/1JPCL2pMG0O1smuo hEDYR2MPDDATuTd5ycOGo1paAMO3MqH1Pn4Y+f/T32TRAXcB6iWOJ/G5syZK2hTF MaWi6/gDEnOc6h4wQd+BwSMFrTQJw2pGDpnsNlg1yHU/wIsXpqQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org