$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4NfcrHodMjLzcW4mJQ_TmSISRSI.roa File: 4NfcrHodMjLzcW4mJQ_TmSISRSI.roa (raw, json) Hash identifier: aLSFzgkIwQpm3sZWqUUfTvcsKhIuMZUcRcyQRfmKFCE= Subject key identifier: E0:D7:DC:AC:7A:1D:32:32:F3:71:6E:26:25:0F:D3:99:22:12:45:22 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D82 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4NfcrHodMjLzcW4mJQ_TmSISRSI.roa Signing time: Fri 01 Sep 2023 10:14:55 +0000 ROA not before: Fri 01 Sep 2023 10:14:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7554 (0x1d82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E0D7DCAC7A1D3232F3716E26250FD39922124522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:dd:f9:88:2a:ec:9f:1a:f1:5f:e5:15:13: 48:d8:ab:10:21:93:d1:cf:61:07:13:8c:06:f8:91: 81:38:37:3a:a8:a1:b8:00:d6:7f:b8:79:b3:e6:62: 0f:c1:e7:c3:f0:3d:c5:39:62:24:8b:0c:9a:a6:51: 13:d9:81:98:db:5f:ea:67:8b:81:82:5f:31:eb:3e: ff:39:a7:89:6f:f5:14:cb:e6:83:f6:28:f4:cc:ac: 21:6f:80:cd:f9:99:59:af:d1:b8:42:bb:c3:d8:ee: 95:ad:21:79:e9:af:98:1c:6c:d8:da:68:d6:e0:c0: 57:af:69:5b:d6:bd:26:37:dc:b7:ca:8c:03:94:24: f1:d2:c2:7c:71:5b:53:03:77:bd:d0:1c:fb:7e:4b: 4e:33:bc:99:bd:c4:ff:d8:6e:d0:fd:56:17:f5:c1: 02:fb:df:86:08:cc:d4:cc:89:f6:79:64:62:1f:78: cb:0c:8f:93:55:5d:db:70:4b:47:d5:41:66:35:fd: 6a:69:f6:05:00:73:88:3f:bf:6d:bf:5c:be:2c:07: 7c:90:0d:a7:8d:83:5a:1f:5d:31:72:8d:4e:71:82: bf:fc:f3:ca:fe:6f:d6:fe:00:84:08:10:97:97:83: c8:38:63:1c:ab:4c:4c:57:cd:be:e6:aa:d3:92:74: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D7:DC:AC:7A:1D:32:32:F3:71:6E:26:25:0F:D3:99:22:12:45:22 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4NfcrHodMjLzcW4mJQ_TmSISRSI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.192.0/19 Signature Algorithm: sha256WithRSAEncryption 97:ee:ab:9c:3f:58:cf:1f:98:2b:a6:cc:0f:be:0f:db:2a:de: ad:01:91:61:75:a8:bf:59:de:4d:c7:93:0f:a5:0b:2b:25:25: 10:2d:cd:9a:1c:2b:5d:cd:69:f3:78:de:c4:59:a5:3f:48:cc: c4:35:a2:00:96:b8:09:25:97:be:bb:36:f2:29:2a:48:39:a5: 9b:8d:63:8c:54:56:ee:24:11:f7:41:05:5d:7d:b2:91:a2:33: 0f:75:88:f7:b7:5b:b3:17:05:14:bf:85:cb:b0:d2:88:38:04: fe:f6:c4:73:9b:a2:3a:d9:d6:9b:62:cb:ab:ef:89:05:d6:17: ac:b6:6f:c3:ef:f8:a9:51:ea:4f:f1:1c:df:cd:46:a6:98:7c: 27:c8:7c:20:63:9e:1f:e7:27:a0:df:46:b8:f0:c3:d1:f8:fe: f7:c7:52:5d:93:41:d6:a5:c5:6b:fb:ba:ea:bd:66:b7:b9:1b: e8:0f:f1:3f:6f:9e:0c:5d:73:ce:26:e6:d4:e9:31:1b:b2:93: 07:dc:71:e4:20:1f:c7:ff:d9:a2:f4:e3:18:2d:04:fd:b3:8b: ef:e4:0f:7f:d0:d0:d9:8f:66:8d:9c:83:12:89:89:59:79:52: 62:4d:96:86:63:27:9b:b8:57:83:1c:1d:02:70:84:11:74:55: 4d:4d:32:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUwRDdEQ0FDN0ExRDMy MzJGMzcxNkUyNjI1MEZEMzk5MjIxMjQ1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLRt35iCrsnxrxX+UVE0jYqxAhk9HPYQcTjAb4kYE4NzqoobgA 1n+4ebPmYg/B58PwPcU5YiSLDJqmURPZgZjbX+pni4GCXzHrPv85p4lv9RTL5oP2 KPTMrCFvgM35mVmv0bhCu8PY7pWtIXnpr5gcbNjaaNbgwFevaVvWvSY33LfKjAOU JPHSwnxxW1MDd73QHPt+S04zvJm9xP/YbtD9Vhf1wQL734YIzNTMifZ5ZGIfeMsM j5NVXdtwS0fVQWY1/Wpp9gUAc4g/v22/XL4sB3yQDaeNg1ofXTFyjU5xgr/888r+ b9b+AIQIEJeXg8g4YxyrTExXzb7mqtOSdFw9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4NfcrHodMjLzcW4mJQ/TmSISRSIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzROZmNySG9kTWpMemNXNG1K UV9UbVNJU1JTSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0 2sAwDQYJKoZIhvcNAQELBQADggEBAJfuq5w/WM8fmCumzA++D9sq3q0BkWF1qL9Z 3k3Hkw+lCyslJRAtzZocK13NafN43sRZpT9IzMQ1ogCWuAkll767NvIpKkg5pZuN Y4xUVu4kEfdBBV19spGiMw91iPe3W7MXBRS/hcuw0og4BP72xHObojrZ1ptiy6vv iQXWF6y2b8Pv+KlR6k/xHN/NRqaYfCfIfCBjnh/nJ6DfRrjww9H4/vfHUl2TQdal xWv7uuq9Zre5G+gP8T9vngxdc84m5tTpMRuykwfcceQgH8f/2aL04xgtBP2zi+/k D3/Q0NmPZo2cgxKJiVl5UmJNloZjJ5u4V4McHQJwhBF0VU1NMkE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org