$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa File: 8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa (raw, json) Hash identifier: gtVZeI8ck9dNXNd7gjXBIoDRNKd1RcR80EMcxaMQjUY= Subject key identifier: F1:ED:8A:DA:32:D9:ED:BA:48:CC:6D:EE:28:FF:FD:FE:7E:54:50:63 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E0D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa Signing time: Fri 01 Sep 2023 10:15:37 +0000 ROA not before: Fri 01 Sep 2023 10:15:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7693 (0x1e0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F1ED8ADA32D9EDBA48CC6DEE28FFFDFE7E545063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:d5:47:48:1f:92:77:ac:5a:ea:7a:44:36: 42:36:c8:43:79:83:a6:d0:f1:2e:91:5d:06:c1:4e: 37:54:67:64:83:d3:fa:d5:a1:51:12:a9:99:71:6f: 88:ca:4d:12:47:83:05:88:15:25:62:9c:e1:1b:71: f1:96:8e:b2:ec:ee:e1:f9:fc:86:1e:fe:9f:a1:f3: 4b:f1:9d:a0:45:3b:0e:bb:10:50:da:1e:c2:5a:52: bd:2d:ca:07:d6:1d:90:c3:ad:f1:43:f5:ce:cd:85: 2b:c6:86:00:0e:d5:01:6d:59:76:a4:c4:de:ed:7d: b8:4d:ab:96:ac:05:87:19:5c:29:b7:d0:db:86:15: 09:a9:01:db:4d:79:08:97:7d:b8:5a:e2:4c:20:d3: 32:83:34:f6:43:af:ce:a6:66:b6:06:4d:1b:3c:19: 87:74:27:54:1d:7e:d8:38:f1:44:8e:ff:3e:6f:71: a6:76:f5:ec:cc:50:3d:f1:34:04:23:e3:82:46:89: 6f:59:8b:ba:ff:d3:58:6c:25:17:cf:c1:f9:35:8b: 7d:52:74:09:df:e6:77:a7:6d:d4:de:c8:d3:6c:db: 41:b6:55:3e:d0:ef:66:4d:9c:ee:2f:33:9f:99:c1: ab:3f:a2:b2:de:cb:60:f9:4e:79:ba:a1:20:90:16: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:ED:8A:DA:32:D9:ED:BA:48:CC:6D:EE:28:FF:FD:FE:7E:54:50:63 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:99:05:a3:bc:5b:5a:2f:ec:64:bd:cd:87:30:da:8e:1a:3e: 41:b9:bf:90:f8:b1:b4:bc:5a:27:1a:92:37:7f:cf:97:8b:c5: 26:f0:e4:1b:61:be:5c:a7:ab:1a:5e:7e:9a:a5:b2:5b:50:73: 90:ee:64:92:fc:4b:74:82:1d:63:de:30:5d:25:e7:93:fd:96: a4:a3:94:c4:33:3a:04:07:17:bc:be:4c:79:2d:97:9e:e0:11: cb:d2:78:b4:f2:67:28:1e:d7:96:0b:c8:02:89:8a:ce:05:95: 16:d6:23:5a:22:19:25:61:f0:36:27:d7:4a:2a:e8:5e:e9:51: de:0e:cc:b7:ad:3a:b2:13:d4:ef:d7:66:36:12:a2:06:5e:13: 90:ea:d5:33:2c:0c:c2:e5:0c:c0:7e:4d:95:67:37:7a:9a:62: a4:cb:c2:06:44:b9:d1:d1:fe:78:39:82:dd:e1:bf:a3:06:d1: 39:e1:d7:55:04:28:33:2a:4d:90:c7:aa:2b:1f:44:b2:5c:23: b8:84:d6:3a:f9:ba:b6:47:cb:4d:2d:a9:f8:4f:52:20:8b:ed: cc:3d:7b:95:5d:c8:16:4a:51:78:6f:cc:3d:a6:a2:33:15:b2: 6b:e9:4e:96:b6:47:3e:28:fa:74:6a:6f:77:c9:88:ac:17:73: 2d:10:38:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxRUQ4QURBMzJEOUVE QkE0OENDNkRFRTI4RkZGREZFN0U1NDUwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC13NVHSB+Sd6xa6npENkI2yEN5g6bQ8S6RXQbBTjdUZ2SD0/rV oVESqZlxb4jKTRJHgwWIFSVinOEbcfGWjrLs7uH5/IYe/p+h80vxnaBFOw67EFDa HsJaUr0tygfWHZDDrfFD9c7NhSvGhgAO1QFtWXakxN7tfbhNq5asBYcZXCm30NuG FQmpAdtNeQiXfbha4kwg0zKDNPZDr86mZrYGTRs8GYd0J1Qdftg48USO/z5vcaZ2 9ezMUD3xNAQj44JGiW9Zi7r/01hsJRfPwfk1i31SdAnf5nenbdTeyNNs20G2VT7Q 72ZNnO4vM5+Zwas/orLey2D5Tnm6oSCQFm4XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8e2K2jLZ7bpIzG3uKP/9/n5UUGMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhlMksyakxaN2JwSXpHM3VL UF85X241VVVHTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2pAwDQYJKoZIhvcNAQELBQADggEBABqZBaO8W1ov7GS9zYcw2o4aPkG5v5D4sbS8 Wicakjd/z5eLxSbw5BthvlynqxpefpqlsltQc5DuZJL8S3SCHWPeMF0l55P9lqSj lMQzOgQHF7y+THktl57gEcvSeLTyZyge15YLyAKJis4FlRbWI1oiGSVh8DYn10oq 6F7pUd4OzLetOrIT1O/XZjYSogZeE5Dq1TMsDMLlDMB+TZVnN3qaYqTLwgZEudHR /ng5gt3hv6MG0Tnh11UEKDMqTZDHqisfRLJcI7iE1jr5urZHy00tqfhPUiCL7cw9 e5VdyBZKUXhvzD2mojMVsmvpTpa2Rz4o+nRqb3fJiKwXcy0QOJ0= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org