$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_FRQZ8WbOe-7OGGDLcWX58E_bbA.roa File: _FRQZ8WbOe-7OGGDLcWX58E_bbA.roa (raw, json) Hash identifier: EJ8BJveIhsVu0OCHr+AtB5GTNBLCASWi/CbW/oSSQCI= Subject key identifier: FC:54:50:67:C5:9B:39:EF:BB:38:61:83:2D:C5:97:E7:C1:3F:6D:B0 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D88 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_FRQZ8WbOe-7OGGDLcWX58E_bbA.roa Signing time: Fri 01 Sep 2023 10:14:59 +0000 ROA not before: Fri 01 Sep 2023 10:14:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 180.218.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7560 (0x1d88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FC545067C59B39EFBB3861832DC597E7C13F6DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:77:2e:b4:54:37:1f:b8:ff:bb:ea:99:7f: 74:63:28:7a:ed:51:7b:73:a0:12:18:78:5e:c0:90: 32:da:d5:15:78:df:2c:35:ce:ac:f2:a2:7d:d2:53: 3c:53:28:05:69:2c:65:60:e7:a1:b7:c7:7a:4e:23: 81:18:17:ab:49:99:83:c4:3c:eb:8d:5d:96:22:0b: c0:95:34:ae:9f:dd:04:3b:99:2f:1f:38:84:75:13: 10:77:b7:b4:ed:a7:2f:47:5b:c0:fb:f3:a1:dd:22: ef:f4:1f:24:13:46:0b:d3:47:f5:34:4b:ad:8a:45: 31:d9:b8:a6:6c:60:10:77:40:6a:31:e1:b7:6f:87: 03:ff:1b:d7:e3:da:39:fb:89:bf:ca:a4:fc:da:1b: 8e:ea:8b:d7:46:ca:46:ff:6e:08:ea:e1:33:c4:bf: 8b:8c:70:98:22:49:d2:ca:17:b7:76:59:ff:98:b9: 37:2f:2c:57:9e:d4:06:bf:58:5c:a3:a0:bb:65:ce: d3:5f:d6:1a:59:1a:bd:7c:d7:46:b0:c0:11:f5:57: 5b:b1:c0:bf:7a:b5:cf:f4:03:24:88:fa:ee:ce:53: c9:c8:c8:74:43:37:90:b9:91:7c:44:90:5d:dd:94: 44:98:fa:02:bb:25:6a:e3:ac:30:7d:19:3f:14:28: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:54:50:67:C5:9B:39:EF:BB:38:61:83:2D:C5:97:E7:C1:3F:6D:B0 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_FRQZ8WbOe-7OGGDLcWX58E_bbA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.80.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:c6:b8:43:44:b5:04:d2:8b:32:6d:6a:0e:39:19:9b:0c:96: b4:c2:82:15:d9:fa:de:32:d5:86:10:56:d2:cd:a0:02:f5:ad: 22:b5:5e:37:ab:7e:0d:bc:78:2b:10:55:13:66:3c:fc:2f:26: 0d:78:56:e4:e5:f0:ff:2f:4d:73:90:e3:4a:9f:81:77:6e:26: 90:aa:3b:2e:0c:ab:12:d6:5a:24:59:f6:92:2d:7d:e2:ad:a9: 22:c0:ab:93:ea:00:6c:c8:e9:ae:bf:d8:f6:8a:01:25:72:c7: 77:75:85:fc:88:72:17:a5:17:04:9d:6e:85:e0:68:ee:d1:68: e9:dd:66:ae:24:ff:68:e4:14:4d:de:5f:5c:87:74:2c:32:5b: 28:30:81:0f:9e:20:ac:88:04:28:d2:38:a7:01:62:d6:d4:0a: 9a:e2:f2:0a:79:5a:09:39:69:30:32:8a:c5:a2:00:40:9c:19: a4:10:80:fd:da:32:19:80:a3:0b:26:e6:23:45:8e:02:c7:d3: 51:df:7a:fb:a6:cd:00:28:d5:7c:23:4d:eb:d9:d0:37:a5:cd: 4b:db:63:b9:2c:62:87:b4:59:26:03:50:e3:36:e4:5e:4c:aa: 6e:43:21:04:8f:4a:e9:78:14:6d:bd:39:c2:42:a1:b8:f9:c7: e3:78:3f:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDNTQ1MDY3QzU5QjM5 RUZCQjM4NjE4MzJEQzU5N0U3QzEzRjZEQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC63cutFQ3H7j/u+qZf3RjKHrtUXtzoBIYeF7AkDLa1RV43yw1 zqzyon3SUzxTKAVpLGVg56G3x3pOI4EYF6tJmYPEPOuNXZYiC8CVNK6f3QQ7mS8f OIR1ExB3t7Ttpy9HW8D786HdIu/0HyQTRgvTR/U0S62KRTHZuKZsYBB3QGox4bdv hwP/G9fj2jn7ib/KpPzaG47qi9dGykb/bgjq4TPEv4uMcJgiSdLKF7d2Wf+YuTcv LFee1Aa/WFyjoLtlztNf1hpZGr1810awwBH1V1uxwL96tc/0AySI+u7OU8nIyHRD N5C5kXxEkF3dlESY+gK7JWrjrDB9GT8UKJKxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/FRQZ8WbOe+7OGGDLcWX58E/bbAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL19GUlFaOFdiT2UtN09HR0RM Y1dYNThFX2JiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2lAwDQYJKoZIhvcNAQELBQADggEBAErGuENEtQTSizJtag45GZsMlrTCghXZ+t4y 1YYQVtLNoAL1rSK1Xjerfg28eCsQVRNmPPwvJg14VuTl8P8vTXOQ40qfgXduJpCq Oy4MqxLWWiRZ9pItfeKtqSLAq5PqAGzI6a6/2PaKASVyx3d1hfyIchelFwSdboXg aO7RaOndZq4k/2jkFE3eX1yHdCwyWygwgQ+eIKyIBCjSOKcBYtbUCpri8gp5Wgk5 aTAyisWiAECcGaQQgP3aMhmAowsm5iNFjgLH01HfevumzQAo1XwjTevZ0DelzUvb Y7ksYoe0WSYDUOM25F5Mqm5DIQSPSul4FG29OcJCobj5x+N4P+o= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org