$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3NFLPqePDipgF2rQ1DIvATkAcuo.roa File: 3NFLPqePDipgF2rQ1DIvATkAcuo.roa (raw, json) Hash identifier: PSQ+cLSKp8opPd1Gfo5MmNTtcN8jSt6QmGm86pUjIgs= Subject key identifier: DC:D1:4B:3E:A7:8F:0E:2A:60:17:6A:D0:D4:32:2F:01:39:00:72:EA Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EE3 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3NFLPqePDipgF2rQ1DIvATkAcuo.roa Signing time: Fri 13 Oct 2023 03:11:29 +0000 ROA not before: Fri 13 Oct 2023 03:11:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7907 (0x1ee3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Oct 13 03:11:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DCD14B3EA78F0E2A60176AD0D4322F01390072EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:af:0d:b9:fe:e6:5f:ae:7d:68:d7:3c:04: 27:6f:2d:4b:41:0b:5e:4f:68:88:9f:e5:e0:dd:95: bb:c4:01:24:61:00:7e:70:7d:52:18:71:a0:47:a1: e5:de:9b:ea:4e:43:3f:a4:36:dc:c5:35:99:67:84: 79:da:70:63:12:f4:86:b0:28:ff:40:e1:1e:24:76: 5d:53:60:00:43:f0:b3:e7:c7:43:b7:13:4b:8b:57: 6d:ae:c5:be:5c:66:a8:20:93:58:2c:50:d7:a7:d0: d5:9f:f8:eb:77:64:e7:4f:39:1c:44:c5:89:2f:23: 50:d9:db:49:fd:06:27:42:4d:bd:81:52:2a:94:6d: 30:0c:0f:1f:de:50:33:68:22:54:4f:6b:3d:57:c7: 65:d9:b8:b4:63:59:24:45:2e:74:d2:0e:f6:ad:92: 22:06:41:1f:87:3f:6f:07:40:e3:ce:ce:5d:fc:4e: cf:6f:c2:bf:dd:9c:51:80:9e:37:5b:1b:a1:93:75: 86:2c:98:55:fd:a4:43:ff:a7:c0:67:2a:2b:99:d9: 58:bd:52:f7:a9:bb:ca:cc:c6:d7:8d:a0:a7:fb:bd: 8e:a0:1f:ec:e4:0a:84:7f:12:71:c7:0e:56:bb:14: ca:d7:a8:80:f0:1b:ee:ac:67:fa:79:c6:ef:fe:69: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D1:4B:3E:A7:8F:0E:2A:60:17:6A:D0:D4:32:2F:01:39:00:72:EA X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3NFLPqePDipgF2rQ1DIvATkAcuo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.128.0/17 Signature Algorithm: sha256WithRSAEncryption 49:80:a4:74:aa:dc:3e:ac:b5:b8:6a:47:c7:a1:17:3f:a7:07: 29:e3:54:15:a8:5c:91:0d:da:0c:19:4c:bd:b5:87:e2:4f:7b: 41:3f:5f:48:91:74:71:97:e2:78:c7:22:ed:49:e3:8f:ab:b6: 4e:95:ff:7f:4a:4d:c5:b5:3e:39:e4:9a:c6:5b:58:21:81:07: bb:7a:2d:c0:b6:5c:c7:6a:f8:47:2c:02:dd:1b:80:32:0c:a1: 6c:5f:03:f6:ce:3f:01:b8:af:68:b7:79:3e:05:e7:bc:95:b2: 44:39:fb:0e:2e:5d:d8:70:07:3c:19:4d:96:19:1b:f3:b5:55: 25:40:cd:f6:4b:50:fa:d9:2d:27:a6:46:97:ab:87:7a:4b:5e: 8a:d1:e0:3b:9f:ec:04:eb:2e:d7:5c:cc:1f:40:9e:46:52:4b: 22:0c:36:9d:28:29:2a:3d:b5:b2:68:7e:90:96:1a:3c:4e:77: bf:cd:86:b8:cf:72:3e:f6:e9:78:27:95:c1:75:d8:d9:be:ae: c0:2a:b6:ac:c5:9e:6c:ce:97:f2:8d:5b:9b:76:fb:ac:46:9c: a1:55:9a:bb:05:a1:af:3f:9e:ae:4a:fb:95:4e:9d:e5:8d:70: 4c:0c:fe:5a:04:a7:ed:74:56:d9:62:cb:be:e5:f6:b3:7c:cf: f4:75:45:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzEwMTMw MzExMjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERDRDE0QjNFQTc4RjBF MkE2MDE3NkFEMEQ0MzIyRjAxMzkwMDcyRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL1q8Nuf7mX659aNc8BCdvLUtBC15PaIif5eDdlbvEASRhAH5w fVIYcaBHoeXem+pOQz+kNtzFNZlnhHnacGMS9IawKP9A4R4kdl1TYABD8LPnx0O3 E0uLV22uxb5cZqggk1gsUNen0NWf+Ot3ZOdPORxExYkvI1DZ20n9BidCTb2BUiqU bTAMDx/eUDNoIlRPaz1Xx2XZuLRjWSRFLnTSDvatkiIGQR+HP28HQOPOzl38Ts9v wr/dnFGAnjdbG6GTdYYsmFX9pEP/p8BnKiuZ2Vi9Uvepu8rMxteNoKf7vY6gH+zk CoR/EnHHDla7FMrXqIDwG+6sZ/p5xu/+acHZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3NFLPqePDipgF2rQ1DIvATkAcuowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNORkxQcWVQRGlwZ0YyclEx REl2QVRrQWN1by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe0 2oAwDQYJKoZIhvcNAQELBQADggEBAEmApHSq3D6stbhqR8ehFz+nBynjVBWoXJEN 2gwZTL21h+JPe0E/X0iRdHGX4njHIu1J44+rtk6V/39KTcW1PjnkmsZbWCGBB7t6 LcC2XMdq+EcsAt0bgDIMoWxfA/bOPwG4r2i3eT4F57yVskQ5+w4uXdhwBzwZTZYZ G/O1VSVAzfZLUPrZLSemRperh3pLXorR4Duf7ATrLtdczB9AnkZSSyIMNp0oKSo9 tbJofpCWGjxOd7/NhrjPcj726XgnlcF12Nm+rsAqtqzFnmzOl/KNW5t2+6xGnKFV mrsFoa8/nq5K+5VOneWNcEwM/loEp+10Vtliy77l9rN8z/R1RSY= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org