$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QG1nuXjx4MaggfV-g5ujkZV5R4.roa File: -QG1nuXjx4MaggfV-g5ujkZV5R4.roa (raw, json) Hash identifier: ajfvpp2hUe7+cMRTJUWpK2gLdRs20qoiJAvbFW5S9WE= Subject key identifier: F9:01:B5:9E:E5:E3:C7:83:1A:82:07:D5:FA:0E:6E:8E:46:55:E5:1E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D89 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QG1nuXjx4MaggfV-g5ujkZV5R4.roa Signing time: Fri 01 Sep 2023 10:14:59 +0000 ROA not before: Fri 01 Sep 2023 10:14:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7561 (0x1d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F901B59EE5E3C7831A8207D5FA0E6E8E4655E51E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1d:ca:f2:23:8a:9b:76:1d:e7:b5:3e:2f:fd: ca:ef:d5:ec:2a:af:e1:c6:65:0e:d8:c3:d6:c9:08: b3:8d:0e:07:a2:dc:4f:3f:f1:71:01:26:e5:20:d9: 03:ba:af:8c:df:27:e2:8b:0e:e1:dc:05:a1:88:98: f7:28:be:6c:52:ca:e3:73:f0:13:2f:09:02:30:0a: 86:cd:ab:bf:ba:a0:be:47:24:77:05:3e:0b:69:e3: 00:4c:0e:29:8a:42:18:7a:c4:f2:56:ed:e1:91:51: 9f:d2:06:c6:e9:b9:2b:dd:14:dd:d1:87:d7:30:cc: 36:3d:27:4a:bf:f8:14:db:d3:6c:23:24:37:0e:4e: a1:14:e4:f8:18:57:8c:1e:56:11:05:a2:4c:59:37: 00:dc:7b:ae:b6:3f:c5:0c:05:7f:2f:98:5d:1a:be: c5:bb:57:d4:63:7a:32:49:3f:46:5d:27:d3:6b:e7: 48:01:b1:fb:74:e4:23:8f:48:45:ca:ef:46:de:df: 4f:6f:29:34:f5:ac:f4:f6:82:cc:c8:5f:e8:c1:69: 79:15:b3:69:2f:4a:6a:24:61:81:f6:c0:7f:d7:c8: d9:d9:25:26:7b:30:62:89:1e:c1:33:0f:fb:bc:2c: 7c:6c:dd:15:7b:75:2d:c2:89:d0:e4:46:b5:a7:f2: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:01:B5:9E:E5:E3:C7:83:1A:82:07:D5:FA:0E:6E:8E:46:55:E5:1E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QG1nuXjx4MaggfV-g5ujkZV5R4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.136.0/21 Signature Algorithm: sha256WithRSAEncryption 51:01:a7:61:3f:be:f0:10:a5:7d:78:b2:7c:60:fb:c0:df:44: 04:c1:f8:c4:c2:af:a0:df:2d:c2:e2:93:ba:41:a6:80:dc:41: c0:14:79:b5:1a:09:60:ac:f8:07:11:20:d9:9e:87:7e:b1:d6: b9:62:0e:8c:bc:6f:c0:3e:45:00:d6:b2:fb:a2:5a:a6:32:56: c2:c8:6c:cd:de:2d:e1:ef:5c:db:5a:bc:27:e9:ad:b3:f8:4d: 40:0b:9d:cf:b9:46:81:95:38:12:37:22:4d:85:92:c6:b3:75: 26:22:78:4a:9b:d9:1d:20:fd:37:16:eb:0b:8a:e3:2d:4b:60: 0e:eb:3e:d6:04:b3:43:86:92:ca:10:9e:4e:a1:78:de:86:09: 6d:95:51:4d:44:82:57:f1:3d:5e:8d:8a:a9:48:14:4a:2e:ca: a7:99:2c:67:89:5a:3b:09:a3:03:6b:7a:b9:ce:59:77:1c:b7: 6e:ea:98:76:59:bb:da:b8:7c:f8:c9:40:e3:5e:ef:dd:6a:71: 1f:0a:c3:5f:36:b2:71:3f:63:ee:56:8a:4c:06:cb:90:98:69: 99:90:b1:11:9a:3e:2f:b4:e2:a7:34:03:ba:6c:6b:ec:af:8b: a6:3a:52:4a:84:ca:1f:57:cb:17:23:31:fb:29:e7:af:16:f8: fb:55:d8:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5MDFCNTlFRTVFM0M3 ODMxQTgyMDdENUZBMEU2RThFNDY1NUU1MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpHcryI4qbdh3ntT4v/crv1ewqr+HGZQ7Yw9bJCLONDgei3E8/ 8XEBJuUg2QO6r4zfJ+KLDuHcBaGImPcovmxSyuNz8BMvCQIwCobNq7+6oL5HJHcF Pgtp4wBMDimKQhh6xPJW7eGRUZ/SBsbpuSvdFN3Rh9cwzDY9J0q/+BTb02wjJDcO TqEU5PgYV4weVhEFokxZNwDce662P8UMBX8vmF0avsW7V9RjejJJP0ZdJ9Nr50gB sft05COPSEXK70be309vKTT1rPT2gszIX+jBaXkVs2kvSmokYYH2wH/XyNnZJSZ7 MGKJHsEzD/u8LHxs3RV7dS3CidDkRrWn8mYVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+QG1nuXjx4MaggfV+g5ujkZV5R4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy1RRzFudVhqeDRNYWdnZlYt ZzV1amtaVjVSNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2ogwDQYJKoZIhvcNAQELBQADggEBAFEBp2E/vvAQpX14snxg+8DfRATB+MTCr6Df LcLik7pBpoDcQcAUebUaCWCs+AcRINmeh36x1rliDoy8b8A+RQDWsvuiWqYyVsLI bM3eLeHvXNtavCfprbP4TUALnc+5RoGVOBI3Ik2FksazdSYieEqb2R0g/TcW6wuK 4y1LYA7rPtYEs0OGksoQnk6heN6GCW2VUU1EglfxPV6NiqlIFEouyqeZLGeJWjsJ owNrernOWXcct27qmHZZu9q4fPjJQONe791qcR8Kw182snE/Y+5WikwGy5CYaZmQ sRGaPi+04qc0A7psa+yvi6Y6UkqEyh9XyxcjMfsp568W+PtV2M0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org