$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa File: AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa (raw, json) Hash identifier: ftaHhWBxGR53QnDfaWdK0zOFj8Km9GQszfplmO4RP34= Subject key identifier: 00:74:07:CB:39:F5:60:40:1A:5F:FD:7F:12:88:B2:E9:00:7B:BA:4C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E73 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa Signing time: Fri 01 Sep 2023 10:16:03 +0000 ROA not before: Fri 01 Sep 2023 10:16:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7795 (0x1e73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=007407CB39F560401A5FFD7F1288B2E9007BBA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:87:08:23:a1:73:03:bf:4d:34:fa:61:5d: 85:d5:3c:d7:68:93:60:a9:c5:a3:14:6a:36:5f:11: f1:b6:84:02:44:40:33:bc:f7:88:dc:a6:06:53:92: fa:46:b1:74:50:0b:18:c1:8a:ba:5b:da:2b:f2:d6: 78:b2:23:15:c3:72:77:82:a6:75:d5:2b:66:92:3d: dc:54:9f:58:59:08:1a:fd:75:2f:ab:6a:6b:86:95: a7:a6:4f:05:89:f5:18:b9:5d:dd:83:88:d0:d1:f5: d9:0a:66:1e:d5:b4:c3:a3:3a:96:ea:11:40:cb:ce: 3f:0b:c1:c0:fb:81:ca:30:7f:da:49:d9:6e:90:82: 20:9d:2e:e8:5c:18:7b:0f:21:de:5b:28:32:03:68: ce:88:6d:1d:5c:3a:34:e7:9c:10:98:7c:f7:6f:9b: 2f:94:ae:7a:f5:39:91:ac:c1:e8:88:3b:de:f0:b9: 33:05:6c:c6:da:4a:92:03:0c:21:01:f5:4b:38:d7: 0e:16:5f:86:f7:ff:44:f8:d9:50:6f:0d:a8:41:92: 00:c7:1f:4e:75:81:4d:cf:3d:ed:bc:89:19:73:80: b0:80:bc:82:c4:d8:5b:77:8c:62:53:1c:bd:c2:56: b8:24:ec:f8:52:17:61:84:9d:65:e5:28:ec:73:f7: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:74:07:CB:39:F5:60:40:1A:5F:FD:7F:12:88:B2:E9:00:7B:BA:4C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.189.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:89:5e:5d:fa:7c:92:85:21:43:da:8c:b5:e5:2b:a8:33:f2: 97:d2:fd:55:92:d3:b8:08:f5:5e:f4:ea:aa:5d:27:21:fd:01: 7b:6e:7c:ca:90:09:23:11:01:76:d2:e7:8f:8b:d9:60:63:3d: 68:73:99:13:d5:75:c3:15:f7:c2:5a:72:10:a6:8e:10:79:6a: d6:c8:8f:cc:47:f2:23:04:d5:26:3a:d3:f0:fb:1d:03:77:ba: 7f:b5:f5:d6:17:22:1b:2f:1e:5b:a7:ba:2a:90:e7:7d:23:c3: c0:87:4e:2d:96:6c:84:ad:40:8f:32:37:92:ba:11:a1:59:b6: 95:c6:57:2c:b0:24:29:41:bf:6f:12:5b:de:da:b0:6b:9c:55: 0d:0e:d8:57:42:72:89:1c:66:ed:24:aa:a0:22:91:49:a6:ac: 8f:6d:df:d6:10:39:3e:1b:56:07:52:b5:60:8a:46:7f:db:eb: 79:14:f8:7f:a6:0e:e8:36:da:d3:0c:91:29:3b:0a:92:06:24: 3c:e7:e3:c8:a1:cc:91:6a:1c:7f:0d:c7:b0:6d:17:37:20:9e: 40:b9:3d:1e:54:ac:f7:c7:06:bb:76:2c:e0:44:3b:0d:e6:fc: 6e:88:95:48:59:fe:25:1b:ac:b5:24:e8:0b:99:b2:15:37:1a: 55:53:dc:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwNzQwN0NCMzlGNTYw NDAxQTVGRkQ3RjEyODhCMkU5MDA3QkJBNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzl4cII6FzA79NNPphXYXVPNdok2CpxaMUajZfEfG2hAJEQDO8 94jcpgZTkvpGsXRQCxjBirpb2ivy1niyIxXDcneCpnXVK2aSPdxUn1hZCBr9dS+r amuGlaemTwWJ9Ri5Xd2DiNDR9dkKZh7VtMOjOpbqEUDLzj8LwcD7gcowf9pJ2W6Q giCdLuhcGHsPId5bKDIDaM6IbR1cOjTnnBCYfPdvmy+Urnr1OZGsweiIO97wuTMF bMbaSpIDDCEB9Us41w4WX4b3/0T42VBvDahBkgDHH051gU3PPe28iRlzgLCAvILE 2Ft3jGJTHL3CVrgk7PhSF2GEnWXlKOxz9/hnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAHQHyzn1YEAaX/1/Eoiy6QB7ukwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FIUUh5em4xWUVBYVhfMV9F b2l5NlFCN3Vrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2r0wDQYJKoZIhvcNAQELBQADggEBAGyJXl36fJKFIUPajLXlK6gz8pfS/VWS07gI 9V706qpdJyH9AXtufMqQCSMRAXbS54+L2WBjPWhzmRPVdcMV98JachCmjhB5atbI j8xH8iME1SY60/D7HQN3un+19dYXIhsvHlunuiqQ530jw8CHTi2WbIStQI8yN5K6 EaFZtpXGVyywJClBv28SW97asGucVQ0O2FdCcokcZu0kqqAikUmmrI9t39YQOT4b VgdStWCKRn/b63kU+H+mDug22tMMkSk7CpIGJDzn48ihzJFqHH8Nx7BtFzcgnkC5 PR5UrPfHBrt2LOBEOw3m/G6IlUhZ/iUbrLUk6AuZshU3GlVT3Gk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org