$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KL7S4GoUH2Adcmw06MwQTNN0NL8.roa File: KL7S4GoUH2Adcmw06MwQTNN0NL8.roa (raw, json) Hash identifier: faxFGqq7V8xqAut186jrLbWQJ2syzYzLeiMldRqytbc= Subject key identifier: 28:BE:D2:E0:6A:14:1F:60:1D:72:6C:34:E8:CC:10:4C:D3:74:34:BF Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EA0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KL7S4GoUH2Adcmw06MwQTNN0NL8.roa Signing time: Fri 01 Sep 2023 10:16:17 +0000 ROA not before: Fri 01 Sep 2023 10:16:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7840 (0x1ea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=28BED2E06A141F601D726C34E8CC104CD37434BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:b3:92:78:54:22:77:06:3f:1e:97:48:66: 8d:6f:4e:4d:07:60:22:1b:50:85:14:b3:66:4a:15: 64:d5:46:7e:76:12:55:f5:c1:3b:84:17:fe:c6:14: 75:14:d3:0d:fe:50:c4:ff:c7:ae:bc:f4:61:ea:1d: 7d:5d:4e:bd:3a:75:13:69:af:ff:c8:6d:10:d2:36: 35:31:d3:ad:d7:cd:3b:f9:ab:0e:07:94:d4:e3:e8: 06:2b:4f:56:b0:b8:fb:a1:a7:12:50:b0:66:10:2e: 89:23:bf:33:1c:9e:67:a9:41:98:89:70:63:1a:d7: 8a:cd:a8:1c:5e:61:b4:d0:8c:51:33:6c:bc:8c:52: 4f:41:28:93:fd:12:cd:b2:04:88:0f:41:51:b9:4b: 97:6d:7d:24:29:3f:9c:5f:f6:4d:d0:9d:eb:8c:23: e6:25:23:78:cb:25:12:58:8a:75:bf:37:6c:55:ac: 67:48:18:11:23:8c:e6:93:6e:e3:71:0a:39:00:1d: 89:fe:8d:59:0d:ea:0b:5a:ae:d8:ce:4b:da:c6:35: 7e:02:78:dc:b6:f2:73:d7:fc:82:c4:96:26:42:d8: cf:cd:27:b0:34:98:62:19:c4:c4:50:cc:ec:43:f4: 78:46:ea:4c:94:71:d5:ba:f1:3d:16:6c:d7:d1:b4: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BE:D2:E0:6A:14:1F:60:1D:72:6C:34:E8:CC:10:4C:D3:74:34:BF X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KL7S4GoUH2Adcmw06MwQTNN0NL8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.148.0/22 Signature Algorithm: sha256WithRSAEncryption 08:35:4d:a3:cd:db:54:b2:b2:e2:55:7b:77:f3:dd:e8:54:de: 69:99:83:01:81:e7:15:c0:fb:9a:4d:db:14:bd:5d:4e:ed:cc: ae:59:a4:34:ce:83:19:fa:19:f3:57:5e:5b:6d:77:ff:9b:4e: b6:14:01:ae:14:19:23:c5:29:0a:a7:a2:5e:59:86:5c:c5:2f: 1e:8d:00:09:85:a0:7a:8a:f4:d2:66:50:ff:81:ba:30:d1:2e: f5:93:3b:51:fe:ed:a6:2e:71:23:95:63:f0:0b:00:e5:9b:c5: ec:ea:4e:c4:7a:3e:5a:f0:90:6e:3a:a6:e6:52:d8:67:9d:30: 24:3d:32:06:c9:5c:1c:40:12:33:42:c8:04:79:6e:86:b9:11: 15:75:ba:db:cd:e6:43:78:50:6c:fc:7f:13:2a:d1:f7:34:e7: d6:65:ee:2f:7e:01:35:7f:3e:44:13:01:6b:cf:33:f6:f7:14: 56:56:d2:0d:03:83:2c:a1:74:67:49:16:f6:df:90:19:95:b0: c3:84:5b:92:ef:7a:58:75:37:1e:61:83:73:8b:26:cf:37:48: 39:a0:31:a3:8e:ad:4f:0f:1b:79:20:08:f6:a8:37:95:37:07: 5d:5c:42:f7:b7:5d:bb:bb:b4:28:9e:9c:3c:b0:4f:a0:48:0b: 12:33:22:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI4QkVEMkUwNkExNDFG NjAxRDcyNkMzNEU4Q0MxMDRDRDM3NDM0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYt7OSeFQidwY/HpdIZo1vTk0HYCIbUIUUs2ZKFWTVRn52ElX1 wTuEF/7GFHUU0w3+UMT/x6689GHqHX1dTr06dRNpr//IbRDSNjUx063XzTv5qw4H lNTj6AYrT1awuPuhpxJQsGYQLokjvzMcnmepQZiJcGMa14rNqBxeYbTQjFEzbLyM Uk9BKJP9Es2yBIgPQVG5S5dtfSQpP5xf9k3QneuMI+YlI3jLJRJYinW/N2xVrGdI GBEjjOaTbuNxCjkAHYn+jVkN6gtartjOS9rGNX4CeNy28nPX/ILEliZC2M/NJ7A0 mGIZxMRQzOxD9HhG6kyUcdW68T0WbNfRtLx/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKL7S4GoUH2Adcmw06MwQTNN0NL8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tMN1M0R29VSDJBZGNtdzA2 TXdRVE5OME5MOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2pQwDQYJKoZIhvcNAQELBQADggEBAAg1TaPN21SysuJVe3fz3ehU3mmZgwGB5xXA +5pN2xS9XU7tzK5ZpDTOgxn6GfNXXlttd/+bTrYUAa4UGSPFKQqnol5ZhlzFLx6N AAmFoHqK9NJmUP+BujDRLvWTO1H+7aYucSOVY/ALAOWbxezqTsR6PlrwkG46puZS 2GedMCQ9MgbJXBxAEjNCyAR5boa5ERV1utvN5kN4UGz8fxMq0fc059Zl7i9+ATV/ PkQTAWvPM/b3FFZW0g0DgyyhdGdJFvbfkBmVsMOEW5Lvelh1Nx5hg3OLJs83SDmg MaOOrU8PG3kgCPaoN5U3B11cQve3Xbu7tCienDywT6BICxIzImE= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org