$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tqPnDu-eyqz98eKvFKVxzlwkWqU.roa File: tqPnDu-eyqz98eKvFKVxzlwkWqU.roa (raw, json) Hash identifier: +Yzuuj70qHD5N7uCM79xvTv64RoRvRovYsWf8Sv18Bw= Subject key identifier: B6:A3:E7:0E:EF:9E:CA:AC:FD:F1:E2:AF:14:A5:71:CE:5C:24:5A:A5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E59 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tqPnDu-eyqz98eKvFKVxzlwkWqU.roa Signing time: Fri 01 Sep 2023 10:15:55 +0000 ROA not before: Fri 01 Sep 2023 10:15:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 61.61.208.0/21 maxlen: 29 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7769 (0x1e59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B6A3E70EEF9ECAACFDF1E2AF14A571CE5C245AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:2d:ff:fe:4b:5d:b5:ed:0e:c8:e0:62:73: 73:04:02:47:e1:bc:79:29:0c:3e:bb:2d:2e:ce:76: 18:4b:4d:7c:55:91:1a:6b:f5:d2:f1:a9:d1:70:f4: 13:e8:96:81:ad:e1:07:06:53:ff:4a:97:23:cf:11: 41:b5:fa:2d:97:ed:fa:04:ae:01:39:06:c7:ef:39: 0b:83:c3:82:f3:55:2c:d2:e5:70:0c:f8:0f:5a:7d: 6a:d2:83:85:b6:a5:b1:92:ab:ed:fa:c1:92:1c:1c: 46:64:a8:6b:15:4d:3f:5b:bc:31:19:b6:6a:68:11: e5:75:0b:58:5d:e1:86:0c:fc:05:c0:d1:3d:1e:be: 64:e3:99:d3:28:57:b7:72:b6:bb:44:78:33:cb:b0: 45:83:2c:e4:2d:15:08:04:58:d3:0d:81:c9:82:ce: 57:4b:bf:c6:8c:32:f8:41:5d:39:7a:3a:7b:49:d7: 5b:57:57:07:fb:79:a3:62:df:78:84:f2:1b:d1:f6: 30:2f:7c:b9:d0:fc:89:c1:be:25:ff:c2:0c:7e:10: c1:ce:7e:c3:83:19:7c:98:67:70:d2:3f:d5:d1:b0: 8f:60:44:23:7d:09:2b:1b:b3:6d:cd:b4:9e:c2:cb: 97:f3:33:d1:c8:be:e9:1e:4c:20:7d:0d:ff:57:16: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A3:E7:0E:EF:9E:CA:AC:FD:F1:E2:AF:14:A5:71:CE:5C:24:5A:A5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tqPnDu-eyqz98eKvFKVxzlwkWqU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:e7:d7:7a:db:f0:d8:f8:10:bc:c5:3a:51:3f:6c:1c:8c:6a: f1:46:ca:30:59:b8:6d:c8:34:0a:a9:6d:3b:d1:89:94:ba:69: 0a:ac:65:48:eb:82:dd:b1:96:15:94:a4:f7:ea:24:a4:01:fb: 51:40:00:57:fb:df:df:37:92:45:35:53:45:5f:a5:60:ab:fd: 59:e7:be:e9:ee:02:c2:c6:b8:80:1c:77:03:bd:f8:96:cc:68: a1:df:c7:4c:0e:4d:dc:2e:45:5a:f4:87:cb:90:9f:24:53:e8: aa:e0:30:a4:2d:b3:5d:d8:cc:7c:46:ec:36:74:2c:95:20:38: 0d:e6:7f:c2:4f:a2:82:6c:cb:4f:95:56:d1:89:68:03:bd:6e: 5f:09:81:2e:91:06:83:43:cf:22:79:cb:19:05:db:c3:f8:1a: cd:ae:41:c7:00:ca:7e:c6:d4:f1:9b:9a:a2:66:1b:32:c5:6a: fc:29:9e:a0:b2:cd:c0:09:9d:f0:9b:2e:e7:3a:14:c8:88:33: 41:7e:5c:f1:61:ba:4d:d4:af:76:6b:b2:28:d9:6a:ed:d6:c0: ea:18:02:f8:8d:1b:9b:10:8f:3c:be:69:2f:95:64:8c:a1:1d: 6e:4e:5c:5a:f4:5f:e7:ef:2e:1b:ff:bd:8a:f5:59:ed:f0:09: 47:31:bd:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI2QTNFNzBFRUY5RUNB QUNGREYxRTJBRjE0QTU3MUNFNUMyNDVBQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFsi3//ktdte0OyOBic3MEAkfhvHkpDD67LS7OdhhLTXxVkRpr 9dLxqdFw9BPoloGt4QcGU/9KlyPPEUG1+i2X7foErgE5BsfvOQuDw4LzVSzS5XAM +A9afWrSg4W2pbGSq+36wZIcHEZkqGsVTT9bvDEZtmpoEeV1C1hd4YYM/AXA0T0e vmTjmdMoV7dytrtEeDPLsEWDLOQtFQgEWNMNgcmCzldLv8aMMvhBXTl6OntJ11tX Vwf7eaNi33iE8hvR9jAvfLnQ/InBviX/wgx+EMHOfsODGXyYZ3DSP9XRsI9gRCN9 CSsbs23NtJ7Cy5fzM9HIvukeTCB9Df9XFkAzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtqPnDu+eyqz98eKvFKVxzlwkWqUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RxUG5EdS1leXF6OThlS3ZG S1Z4emx3a1dxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 PdAwDQYJKoZIhvcNAQELBQADggEBAIzn13rb8Nj4ELzFOlE/bByMavFGyjBZuG3I NAqpbTvRiZS6aQqsZUjrgt2xlhWUpPfqJKQB+1FAAFf73983kkU1U0VfpWCr/Vnn vunuAsLGuIAcdwO9+JbMaKHfx0wOTdwuRVr0h8uQnyRT6KrgMKQts13YzHxG7DZ0 LJUgOA3mf8JPooJsy0+VVtGJaAO9bl8JgS6RBoNDzyJ5yxkF28P4Gs2uQccAyn7G 1PGbmqJmGzLFavwpnqCyzcAJnfCbLuc6FMiIM0F+XPFhuk3Ur3ZrsijZau3WwOoY AviNG5sQjzy+aS+VZIyhHW5OXFr0X+fvLhv/vYr1We3wCUcxvdw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org