$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGdp3RMitlT7lc--YeXv2QFPSMA.roa File: QGdp3RMitlT7lc--YeXv2QFPSMA.roa (raw, json) Hash identifier: k+XnYy7rxbeG9b79LG+654UCBYAW6wVhlkycCLFVUUg= Subject key identifier: 40:67:69:DD:13:22:B6:54:FB:95:CF:BE:61:E5:EF:D9:01:4F:48:C0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E28 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGdp3RMitlT7lc--YeXv2QFPSMA.roa Signing time: Fri 01 Sep 2023 10:15:44 +0000 ROA not before: Fri 01 Sep 2023 10:15:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7720 (0x1e28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:44 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=406769DD1322B654FB95CFBE61E5EFD9014F48C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:ed:15:04:bd:63:9f:fe:61:9b:9d:ee:7b: 8d:b5:c0:f6:c4:aa:4d:36:4e:78:91:e5:a7:be:bc: 80:8b:81:c7:44:19:6f:88:16:1f:bb:66:c7:a0:cd: 7c:47:7d:10:3c:45:57:bd:cf:39:41:2b:2b:24:9c: bd:bc:af:63:d7:ae:52:0e:bd:a2:cb:67:fc:41:90: f9:89:9d:1e:e1:6c:70:84:da:84:ff:d8:ff:c4:bb: 7d:ff:48:79:98:55:e9:14:8e:3b:45:ec:ce:45:06: ad:de:e3:7a:b2:e5:ca:2f:45:5f:50:59:53:f3:6f: 00:92:3c:2e:1a:76:bf:c3:c6:84:12:f4:ca:4c:5d: 6d:69:dc:00:59:7f:65:70:8f:1c:8b:1d:94:b5:41: 35:87:23:56:c1:75:c4:28:38:18:a1:1a:a9:85:bd: b8:4b:12:21:f6:65:a2:75:1f:ce:7d:3b:54:d4:fa: 81:ae:ed:77:fa:71:79:5a:72:d5:62:c8:27:bf:af: 12:c8:40:53:4a:a4:87:9c:97:d9:58:9e:cc:90:23: 5a:1c:78:e7:71:25:08:a1:e1:32:1e:1d:78:b6:fe: 11:a3:96:21:30:c9:dd:da:d4:82:75:6e:5c:fb:15: ab:1f:f0:4d:d4:27:37:ad:38:c8:31:2b:90:82:b5: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:69:DD:13:22:B6:54:FB:95:CF:BE:61:E5:EF:D9:01:4F:48:C0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGdp3RMitlT7lc--YeXv2QFPSMA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.168.0/22 Signature Algorithm: sha256WithRSAEncryption 77:03:43:ae:0a:23:c8:1d:c8:e6:6d:3f:88:2d:cb:8c:b3:55: aa:ce:68:3a:51:4b:31:c2:93:2c:c7:31:e6:27:b6:97:3c:6a: e7:57:64:2a:d2:fd:6d:a4:bb:b1:2a:d7:84:82:7c:bd:48:70: 76:59:3d:7b:51:8f:cc:67:6a:a1:67:f4:08:ae:f9:f0:c9:58: 34:70:42:89:88:cb:c6:3e:bb:a2:60:73:5e:13:e5:aa:e7:6b: 25:0b:72:31:06:8b:aa:e1:55:83:34:70:b5:cb:c8:27:65:b1: cc:25:dd:25:d0:8b:b1:dc:90:66:2d:c0:41:33:16:29:e0:eb: 08:0a:ff:62:94:a7:76:62:e4:74:8b:31:c9:ee:7c:5a:dc:56: 59:63:5a:81:1b:ba:a5:0c:e5:54:ec:42:1a:23:e3:18:09:7a: cf:88:8c:27:80:e1:d9:2b:72:2b:6e:5b:ac:07:2e:dd:57:d3: 9e:2f:eb:3e:7a:d2:b4:24:f8:e3:5b:d4:3b:79:20:49:4c:6e: ed:02:b6:1f:d7:4a:b7:0c:61:15:6c:0b:37:c3:64:9f:7c:d3: 28:0e:bf:86:70:87:18:d2:fd:66:df:a9:9d:a9:b4:7f:28:33: 67:25:30:5c:12:af:fb:2b:da:8d:84:05:4b:94:66:1f:be:4e: 93:11:89:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwNjc2OUREMTMyMkI2 NTRGQjk1Q0ZCRTYxRTVFRkQ5MDE0RjQ4QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJke0VBL1jn/5hm53ue421wPbEqk02TniR5ae+vICLgcdEGW+I Fh+7ZsegzXxHfRA8RVe9zzlBKysknL28r2PXrlIOvaLLZ/xBkPmJnR7hbHCE2oT/ 2P/Eu33/SHmYVekUjjtF7M5FBq3e43qy5covRV9QWVPzbwCSPC4adr/DxoQS9MpM XW1p3ABZf2VwjxyLHZS1QTWHI1bBdcQoOBihGqmFvbhLEiH2ZaJ1H859O1TU+oGu 7Xf6cXlactViyCe/rxLIQFNKpIecl9lYnsyQI1oceOdxJQih4TIeHXi2/hGjliEw yd3a1IJ1blz7Fasf8E3UJzetOMgxK5CCtZB9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQGdp3RMitlT7lc++YeXv2QFPSMAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FHZHAzUk1pdGxUN2xjLS1Z ZVh2MlFGUFNNQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2qgwDQYJKoZIhvcNAQELBQADggEBAHcDQ64KI8gdyOZtP4gty4yzVarOaDpRSzHC kyzHMeYntpc8audXZCrS/W2ku7Eq14SCfL1IcHZZPXtRj8xnaqFn9Aiu+fDJWDRw QomIy8Y+u6Jgc14T5arnayULcjEGi6rhVYM0cLXLyCdlscwl3SXQi7HckGYtwEEz Fing6wgK/2KUp3Zi5HSLMcnufFrcVlljWoEbuqUM5VTsQhoj4xgJes+IjCeA4dkr cituW6wHLt1X054v6z560rQk+ONb1Dt5IElMbu0Cth/XSrcMYRVsCzfDZJ980ygO v4ZwhxjS/WbfqZ2ptH8oM2clMFwSr/sr2o2EBUuUZh++TpMRiSg= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org