$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sJmlbixeO6KVIfPC4Rva-IaXLfk.roa File: sJmlbixeO6KVIfPC4Rva-IaXLfk.roa (raw, json) Hash identifier: bdBJxfjZ7QxBpYGlZE2Zim+wDTtS2+DKH29xxTUvzkI= Subject key identifier: B0:99:A5:6E:2C:5E:3B:A2:95:21:F3:C2:E1:1B:DA:F8:86:97:2D:F9 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DC0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sJmlbixeO6KVIfPC4Rva-IaXLfk.roa Signing time: Fri 01 Sep 2023 10:15:15 +0000 ROA not before: Fri 01 Sep 2023 10:15:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.64.0.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7616 (0x1dc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B099A56E2C5E3BA29521F3C2E11BDAF886972DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:9e:91:57:6b:90:66:18:69:22:93:ba:8b: 3a:30:f8:f2:ed:9e:00:b9:4f:ef:3a:3a:69:6b:e9: 9a:67:fa:90:eb:0b:a3:ba:28:e7:a8:97:80:16:a9: 41:ee:64:02:32:12:43:e6:06:6a:7e:d6:8b:2b:89: 33:17:06:f9:bc:da:c0:7f:7e:66:8f:b8:b4:1c:a9: 0c:b0:a5:76:d0:1d:2e:45:24:d5:29:f3:89:90:75: 7d:fd:b1:2c:1b:8a:af:6f:54:ab:78:56:52:a3:0f: af:4f:f5:78:f2:e4:db:8f:ad:f3:1b:bc:22:12:28: 82:a5:bd:8b:7d:01:56:fd:be:d4:7e:09:51:68:3c: 10:a0:ee:74:c2:61:05:f4:b6:9e:62:20:da:07:40: 8d:c7:0b:cf:9d:9c:66:43:5c:9f:c9:a5:d9:f5:83: 14:f0:93:a7:29:ba:66:2c:84:8f:6a:c6:0b:0e:4f: 67:cc:77:c3:32:ed:19:f7:53:9d:27:00:f8:d6:e8: 08:4c:38:7b:c0:0f:09:49:e7:cb:32:f9:91:b8:d0: e2:f9:20:5e:a4:22:96:c0:81:8d:4b:b6:44:9e:2f: e6:35:8e:9f:9a:58:b7:8c:0d:c4:1e:4c:d5:93:c9: 69:5b:40:17:98:9d:3a:ff:a3:27:cb:e3:a4:99:97: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:A5:6E:2C:5E:3B:A2:95:21:F3:C2:E1:1B:DA:F8:86:97:2D:F9 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sJmlbixeO6KVIfPC4Rva-IaXLfk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.0.0/19 Signature Algorithm: sha256WithRSAEncryption 82:a6:62:41:88:f7:f2:55:d2:2a:1d:a6:2a:ed:53:8b:d3:b7: 2b:ac:26:e4:92:85:10:f7:eb:d0:2d:a5:cf:72:86:b7:78:77: 62:7a:fb:f3:ee:e3:be:bb:71:a0:a8:33:f7:05:7f:1c:67:34: 76:2d:7c:13:21:a9:b2:4e:6c:34:e2:44:9d:49:b1:8f:5c:7d: 91:78:a5:26:5a:83:a5:ff:f5:0f:55:de:c9:b3:ee:5a:f2:6e: 3b:97:3a:2a:c1:37:a9:23:83:2e:71:04:56:a1:f7:0a:fa:e5: 05:62:ec:d0:b6:47:84:2a:7d:a2:c1:20:fd:fd:fa:11:5c:8b: ee:ab:3e:d5:d2:58:f7:0d:9b:7d:a1:44:81:d0:fc:56:68:82: 68:b9:07:83:50:4e:2e:fc:d7:99:98:38:7e:57:b6:d4:95:37: 84:46:74:7e:8f:ee:41:1a:11:4d:13:87:95:ad:10:62:8f:23: 19:66:13:22:4a:54:20:7d:8d:b9:04:04:72:74:a7:96:ca:72: cd:53:c5:69:40:c6:22:fd:68:dc:90:f3:2e:a8:98:15:84:13: dd:08:7c:4c:53:96:73:0a:22:4f:d5:aa:6a:87:1d:3a:9c:be: 1b:fa:98:f8:5d:3e:f2:92:65:16:fa:e2:a2:0c:9e:24:c0:6a: eb:f7:8d:72 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIwOTlBNTZFMkM1RTNC QTI5NTIxRjNDMkUxMUJEQUY4ODY5NzJERjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnN56RV2uQZhhpIpO6izow+PLtngC5T+86Omlr6Zpn+pDrC6O6 KOeol4AWqUHuZAIyEkPmBmp+1osriTMXBvm82sB/fmaPuLQcqQywpXbQHS5FJNUp 84mQdX39sSwbiq9vVKt4VlKjD69P9Xjy5NuPrfMbvCISKIKlvYt9AVb9vtR+CVFo PBCg7nTCYQX0tp5iINoHQI3HC8+dnGZDXJ/Jpdn1gxTwk6cpumYshI9qxgsOT2fM d8My7Rn3U50nAPjW6AhMOHvADwlJ58sy+ZG40OL5IF6kIpbAgY1LtkSeL+Y1jp+a WLeMDcQeTNWTyWlbQBeYnTr/oyfL46SZl/pzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsJmlbixeO6KVIfPC4Rva+IaXLfkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NKbWxiaXhlTzZLVklmUEM0 UnZhLUlhWExmay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 QAAwDQYJKoZIhvcNAQELBQADggEBAIKmYkGI9/JV0iodpirtU4vTtyusJuSShRD3 69Atpc9yhrd4d2J6+/Pu4767caCoM/cFfxxnNHYtfBMhqbJObDTiRJ1JsY9cfZF4 pSZag6X/9Q9V3smz7lrybjuXOirBN6kjgy5xBFah9wr65QVi7NC2R4QqfaLBIP39 +hFci+6rPtXSWPcNm32hRIHQ/FZogmi5B4NQTi7815mYOH5XttSVN4RGdH6P7kEa EU0Th5WtEGKPIxlmEyJKVCB9jbkEBHJ0p5bKcs1TxWlAxiL9aNyQ8y6omBWEE90I fExTlnMKIk/VqmqHHTqcvhv6mPhdPvKSZRb64qIMniTAauv3jXI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org