$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-LlSRjkpm-XHRleapnFsRmGn10o.roa File: -LlSRjkpm-XHRleapnFsRmGn10o.roa (raw, json) Hash identifier: 2rEXczXA/C62ikN1XAHsLSJv0Hio5HMuOxE5pkYWNZw= Subject key identifier: F8:B9:52:46:39:29:9B:E5:C7:46:57:9A:A6:71:6C:46:61:A7:D7:4A Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D56 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-LlSRjkpm-XHRleapnFsRmGn10o.roa Signing time: Fri 01 Sep 2023 10:14:42 +0000 ROA not before: Fri 01 Sep 2023 10:14:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7510 (0x1d56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F8B9524639299BE5C746579AA6716C4661A7D74A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:dc:f8:f6:42:22:c0:e8:83:1d:2d:45:34: 0b:d8:e0:4f:d7:99:5e:a2:e3:cc:d0:02:1d:76:e5: 60:8b:cb:3f:63:1b:6d:4e:54:6d:ad:79:69:54:88: 7a:85:66:0a:13:11:e8:7c:2a:85:94:eb:89:77:fc: c4:8f:a0:90:5a:3d:94:37:44:04:f7:05:d1:86:da: 16:3f:4c:d0:85:11:55:e8:0d:42:ae:07:86:19:14: e6:66:47:cc:37:c5:98:cd:6a:10:ae:9a:c2:75:c7: bb:17:f7:d0:cb:6a:19:b1:4c:95:06:e0:0a:d3:d1: 82:58:74:85:94:4f:52:99:53:18:ac:50:07:cd:5d: d8:9b:ee:88:9e:c5:c3:c9:cd:4c:d4:3d:ff:28:51: ab:90:be:82:4f:6f:33:3d:b0:9d:c1:67:aa:5c:4f: 0a:dc:92:0d:c5:af:03:65:36:5e:a8:a0:1d:20:fa: 9b:09:89:93:c2:7a:48:78:9b:94:6a:d1:0a:10:a5: f2:2a:6d:d3:f8:c8:24:6e:3f:09:23:8c:9a:02:47: 67:6a:df:5c:53:28:80:40:4a:9e:e9:f3:1f:6f:30: d3:0a:40:a1:7f:ab:13:51:84:82:09:8a:df:c7:19: 46:46:c5:d9:a3:2d:c0:ba:dc:b8:e7:b5:a4:72:fe: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B9:52:46:39:29:9B:E5:C7:46:57:9A:A6:71:6C:46:61:A7:D7:4A X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-LlSRjkpm-XHRleapnFsRmGn10o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.137.0/24 Signature Algorithm: sha256WithRSAEncryption 55:b3:6e:bd:b6:d7:56:c9:87:6d:99:6d:74:c1:f2:1e:94:f3: 3c:4e:5a:3d:51:f3:4f:ac:52:fc:46:ae:06:d4:7a:a5:a6:23: 40:ea:ec:5d:01:2b:fe:a0:30:cf:68:9e:c0:ca:37:8f:c2:aa: 03:d5:bc:b8:bc:59:ca:c9:00:1e:23:4d:a1:76:41:f6:c8:e4: f9:5a:7a:9b:b8:57:3d:d9:4d:b7:80:b5:8f:57:f1:62:ee:8c: 83:ae:08:d6:2f:83:d3:c6:02:76:0a:64:20:b0:8d:1a:fc:9b: d4:14:d9:22:f6:8e:2f:fa:a1:59:06:0a:8e:7b:8c:58:9d:f4: 0c:19:0e:3f:d2:84:2a:a8:c2:6f:66:65:ea:e0:77:af:9c:dd: 04:6e:9c:84:ce:15:66:8a:bb:e4:f4:fe:40:2c:55:c0:40:1d: 30:5d:76:00:69:34:49:e1:81:9e:81:ac:0c:fc:0b:66:14:7c: 8f:d4:be:b5:34:6c:fb:d4:f9:e5:b6:a4:ef:c0:ce:9d:82:c2: 4a:4b:72:9f:22:40:c1:de:54:1d:f1:da:8c:0f:f8:72:12:a2: 54:d0:bc:75:6c:5b:e1:93:48:a1:e2:e4:b3:a3:24:58:72:80: 29:65:84:dc:74:9f:12:57:22:a8:2c:02:41:54:b8:9b:30:a8: 8a:dc:ab:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY4Qjk1MjQ2MzkyOTlC RTVDNzQ2NTc5QUE2NzE2QzQ2NjFBN0Q3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCT9Nz49kIiwOiDHS1FNAvY4E/XmV6i48zQAh125WCLyz9jG21O VG2teWlUiHqFZgoTEeh8KoWU64l3/MSPoJBaPZQ3RAT3BdGG2hY/TNCFEVXoDUKu B4YZFOZmR8w3xZjNahCumsJ1x7sX99DLahmxTJUG4ArT0YJYdIWUT1KZUxisUAfN Xdib7oiexcPJzUzUPf8oUauQvoJPbzM9sJ3BZ6pcTwrckg3FrwNlNl6ooB0g+psJ iZPCekh4m5Rq0QoQpfIqbdP4yCRuPwkjjJoCR2dq31xTKIBASp7p8x9vMNMKQKF/ qxNRhIIJit/HGUZGxdmjLcC63LjntaRy/qt5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+LlSRjkpm+XHRleapnFsRmGn10owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy1MbFNSamtwbS1YSFJsZWFw bkZzUm1HbjEwby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2okwDQYJKoZIhvcNAQELBQADggEBAFWzbr2211bJh22ZbXTB8h6U8zxOWj1R80+s UvxGrgbUeqWmI0Dq7F0BK/6gMM9onsDKN4/CqgPVvLi8WcrJAB4jTaF2QfbI5Pla epu4Vz3ZTbeAtY9X8WLujIOuCNYvg9PGAnYKZCCwjRr8m9QU2SL2ji/6oVkGCo57 jFid9AwZDj/ShCqowm9mZergd6+c3QRunITOFWaKu+T0/kAsVcBAHTBddgBpNEnh gZ6BrAz8C2YUfI/UvrU0bPvU+eW2pO/Azp2CwkpLcp8iQMHeVB3x2owP+HISolTQ vHVsW+GTSKHi5LOjJFhygCllhNx0nxJXIqgsAkFUuJswqIrcq8k= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org