$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QsJQimqGhgvUGEdJr6CWj5uyYN4.roa File: QsJQimqGhgvUGEdJr6CWj5uyYN4.roa (raw, json) Hash identifier: /SmNmQNRtWeZ/cc7Hc4O5HjIfKZCzKKHjTIovoUk3kI= Subject key identifier: 42:C2:50:8A:6A:86:86:0B:D4:18:47:49:AF:A0:96:8F:9B:B2:60:DE Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E71 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QsJQimqGhgvUGEdJr6CWj5uyYN4.roa Signing time: Fri 01 Sep 2023 10:16:03 +0000 ROA not before: Fri 01 Sep 2023 10:16:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7793 (0x1e71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=42C2508A6A86860BD4184749AFA0968F9BB260DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:25:45:12:18:51:9a:69:a5:52:03:41:e0: 39:1d:a8:8d:70:fe:e1:ff:23:0c:12:e3:ad:e0:64: 26:3f:8b:e9:ef:d5:1b:bb:b9:dc:66:3e:4d:3b:6d: 37:e0:48:ae:ed:7b:0a:d7:cd:21:9e:06:a2:d9:43: ad:f0:c3:72:f8:01:3b:22:a0:13:d9:98:12:8f:41: 23:49:a0:4c:ce:56:d8:3f:31:5b:da:6b:73:6e:9d: ba:85:f7:cc:54:7c:8a:3b:7b:2c:60:33:d1:92:32: 5e:50:21:81:22:e1:c4:6f:7c:97:53:c7:85:2c:a7: 13:5a:9d:a7:c5:54:45:03:b8:fe:f4:2a:75:4e:e4: 4a:9f:d2:a8:2a:a3:23:71:e5:bc:45:d7:fb:b7:7f: 89:32:31:04:98:49:06:e3:cf:d2:93:25:85:ce:0a: 39:03:e8:6f:5d:19:dc:9f:1f:b5:03:bb:a4:33:6e: 62:05:d9:e6:08:3e:b6:0e:a4:6c:08:6a:7e:d1:41: 3d:aa:08:05:a2:fe:25:ae:d0:30:55:bb:8d:26:65: 75:14:d6:18:06:a0:eb:c1:e9:21:46:17:89:f2:61: ed:8d:1c:34:0d:51:81:b8:1a:4a:39:9a:b0:43:48: e2:0f:67:1c:8a:57:37:52:2d:00:76:6f:1c:59:06: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:50:8A:6A:86:86:0B:D4:18:47:49:AF:A0:96:8F:9B:B2:60:DE X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QsJQimqGhgvUGEdJr6CWj5uyYN4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.190.0/23 Signature Algorithm: sha256WithRSAEncryption 25:69:9d:1c:e3:ac:87:63:ef:cc:a4:de:e4:97:f5:40:ae:93: 3a:d5:16:f3:18:3f:92:86:7b:17:5e:61:0b:8c:ac:5b:5b:d6: dd:dd:98:f5:e8:a7:df:53:40:4a:9c:dc:61:9b:f5:19:3f:58: 79:af:90:c9:2d:47:f8:d5:b3:cf:9d:b3:1b:0f:06:d2:dd:56: 21:a4:73:98:04:2c:9d:4c:3c:b0:08:1f:29:8a:38:84:f6:9f: 89:e2:74:6f:a6:37:2b:32:6c:39:26:24:74:30:0c:79:13:b7: 32:c5:04:f8:15:34:2f:86:5d:5e:a2:5f:82:61:b2:9d:1d:cf: 44:3f:fe:82:e2:23:67:a3:65:a3:34:d1:6c:d6:78:28:a6:b6: 2d:c1:4d:be:d0:4f:a2:e0:ef:7b:1e:bc:6c:78:cb:21:29:9d: d4:65:8a:72:cf:17:63:bd:5b:ea:b9:09:89:32:5f:c4:94:0d: 57:8d:88:5f:0d:15:14:d1:de:6e:1c:ac:37:67:86:0b:13:27: 5d:e9:d1:28:cc:ca:3e:3e:96:86:d5:b0:ab:a7:4f:06:14:27: f0:15:1a:80:cc:15:72:98:08:5b:e7:dd:ed:19:46:9d:e6:7b: 92:ae:1f:ca:7c:17:5c:f3:60:54:56:4d:05:ba:60:7f:b1:02: d9:24:20:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyQzI1MDhBNkE4Njg2 MEJENDE4NDc0OUFGQTA5NjhGOUJCMjYwREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwoCVFEhhRmmmlUgNB4DkdqI1w/uH/IwwS463gZCY/i+nv1Ru7 udxmPk07bTfgSK7tewrXzSGeBqLZQ63ww3L4ATsioBPZmBKPQSNJoEzOVtg/MVva a3NunbqF98xUfIo7eyxgM9GSMl5QIYEi4cRvfJdTx4UspxNanafFVEUDuP70KnVO 5Eqf0qgqoyNx5bxF1/u3f4kyMQSYSQbjz9KTJYXOCjkD6G9dGdyfH7UDu6QzbmIF 2eYIPrYOpGwIan7RQT2qCAWi/iWu0DBVu40mZXUU1hgGoOvB6SFGF4nyYe2NHDQN UYG4Gko5mrBDSOIPZxyKVzdSLQB2bxxZBp6hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQsJQimqGhgvUGEdJr6CWj5uyYN4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FzSlFpbXFHaGd2VUdFZEpy NkNXajV1eVlONC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2r4wDQYJKoZIhvcNAQELBQADggEBACVpnRzjrIdj78yk3uSX9UCukzrVFvMYP5KG exdeYQuMrFtb1t3dmPXop99TQEqc3GGb9Rk/WHmvkMktR/jVs8+dsxsPBtLdViGk c5gELJ1MPLAIHymKOIT2n4nidG+mNysybDkmJHQwDHkTtzLFBPgVNC+GXV6iX4Jh sp0dz0Q//oLiI2ejZaM00WzWeCimti3BTb7QT6Lg73sevGx4yyEpndRlinLPF2O9 W+q5CYkyX8SUDVeNiF8NFRTR3m4crDdnhgsTJ13p0SjMyj4+lobVsKunTwYUJ/AV GoDMFXKYCFvn3e0ZRp3me5KuH8p8F1zzYFRWTQW6YH+xAtkkIJ8= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org