$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa File: oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa (raw, json) Hash identifier: 07nMDBuxz7udZpoHJUy79PAjJzarZmOroWy/9eOIotY= Subject key identifier: A0:36:22:60:65:E0:D1:95:BF:1C:A8:5B:12:96:83:8E:73:61:C2:84 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E58 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa Signing time: Fri 01 Sep 2023 10:15:55 +0000 ROA not before: Fri 01 Sep 2023 10:15:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7768 (0x1e58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A036226065E0D195BF1CA85B1296838E7361C284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:c8:22:86:85:db:6b:6b:c9:8f:16:c1:96: 9f:09:83:8e:49:cc:33:07:08:e1:0c:4b:02:db:b9: 07:89:d1:f2:5b:1b:d1:66:8c:04:25:9d:5c:df:5a: 6c:26:bc:61:69:6f:ac:87:a9:05:85:5c:c7:c8:35: 21:db:80:5d:95:0b:72:ca:2f:68:81:95:00:68:0a: cf:31:a9:68:58:95:ec:3e:6c:3f:99:74:0b:d5:ae: 81:b7:05:c3:d9:a0:d6:85:db:c5:0b:13:a8:c9:f9: a9:c3:86:5e:71:f4:81:60:1e:4f:c4:74:2b:0e:af: 59:aa:4d:8f:82:99:81:a4:42:a9:61:bd:24:63:9f: 37:01:9e:5d:f2:ff:01:c9:be:c0:17:19:72:56:7f: 63:8f:ef:19:54:79:3a:5c:6e:fb:1e:b9:a7:1c:91: 70:b8:18:45:b9:69:13:44:14:47:c4:39:b2:5d:e8: 01:c1:46:0a:f9:21:12:e6:c0:fb:f9:b4:2e:98:af: 5a:e1:79:df:97:31:8d:1f:8f:d6:0c:15:d6:77:05: f6:f5:44:3d:1c:3b:b5:54:88:62:b7:b1:a0:b9:a1: 49:84:ea:b8:f7:c1:4f:76:a0:11:0b:04:b1:a5:4b: 4a:76:2e:b7:36:4d:0b:20:4e:6b:bd:31:1d:79:1e: 3d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:36:22:60:65:E0:D1:95:BF:1C:A8:5B:12:96:83:8E:73:61:C2:84 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.142.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:b7:80:4d:76:db:9d:90:df:08:d4:05:41:2d:05:d7:90:ab: 0d:45:57:0f:47:9c:3e:1b:f5:f4:e9:26:df:d9:d8:21:34:ba: d3:d8:af:23:ee:a8:00:05:2e:d2:7d:17:e8:ea:c3:4b:1b:f5: 28:2c:e7:1f:b9:a9:2c:1a:d1:5b:ac:82:3e:2f:12:6f:9b:0a: 2b:c3:18:fe:65:e3:e5:59:2b:4e:0c:2b:1c:cb:d6:18:a0:93: bf:a2:1e:cf:cd:7d:ee:1d:c2:93:a4:b8:23:4f:a9:8e:36:7d: b9:f3:da:fe:42:a1:5b:60:32:04:53:d2:a1:51:07:09:38:b4: 54:e0:64:58:fb:d1:06:ca:07:a5:87:28:62:76:0d:2d:e6:7c: 3d:86:ee:09:b9:91:c0:77:c7:e9:e1:5b:4f:92:33:e4:d7:1f: 2f:eb:71:d6:87:77:c8:18:6b:9f:38:2f:c7:fb:f4:93:36:b6: 06:af:1b:3a:69:5d:47:c9:6a:36:3f:88:08:5d:ac:51:c8:5e: 02:b1:ea:ab:18:f2:ec:b3:ac:4d:3b:20:03:b8:93:52:45:00: 66:ff:22:39:e1:bb:ac:17:3c:b5:d5:c3:1c:1e:ac:24:ce:6c: 43:54:75:4d:ea:de:2a:89:55:94:22:77:a7:27:09:d7:32:29: 88:72:86:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEwMzYyMjYwNjVFMEQx OTVCRjFDQTg1QjEyOTY4MzhFNzM2MUMyODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuj8gihoXba2vJjxbBlp8Jg45JzDMHCOEMSwLbuQeJ0fJbG9Fm jAQlnVzfWmwmvGFpb6yHqQWFXMfINSHbgF2VC3LKL2iBlQBoCs8xqWhYlew+bD+Z dAvVroG3BcPZoNaF28ULE6jJ+anDhl5x9IFgHk/EdCsOr1mqTY+CmYGkQqlhvSRj nzcBnl3y/wHJvsAXGXJWf2OP7xlUeTpcbvseuacckXC4GEW5aRNEFEfEObJd6AHB Rgr5IRLmwPv5tC6Yr1rhed+XMY0fj9YMFdZ3Bfb1RD0cO7VUiGK3saC5oUmE6rj3 wU92oBELBLGlS0p2Lrc2TQsgTmu9MR15Hj2xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoDYiYGXg0ZW/HKhbEpaDjnNhwoQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29EWWlZR1hnMFpXX0hLaGJF cGFEam5OaHdvUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 2o4wDQYJKoZIhvcNAQELBQADggEBAC+3gE12252Q3wjUBUEtBdeQqw1FVw9HnD4b 9fTpJt/Z2CE0utPYryPuqAAFLtJ9F+jqw0sb9Sgs5x+5qSwa0Vusgj4vEm+bCivD GP5l4+VZK04MKxzL1higk7+iHs/Nfe4dwpOkuCNPqY42fbnz2v5CoVtgMgRT0qFR Bwk4tFTgZFj70QbKB6WHKGJ2DS3mfD2G7gm5kcB3x+nhW0+SM+TXHy/rcdaHd8gY a584L8f79JM2tgavGzppXUfJajY/iAhdrFHIXgKx6qsY8uyzrE07IAO4k1JFAGb/ Ijnhu6wXPLXVwxwerCTObENUdU3q3iqJVZQid6cnCdcyKYhyhhs= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org