$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bx7JFyPeRdtJBKohVV8y_92wo0A.roa File: Bx7JFyPeRdtJBKohVV8y_92wo0A.roa (raw, json) Hash identifier: F256WD/9WoSKnEcZ0kkLxnSxQQsGmakAgE2XLELLqBg= Subject key identifier: 07:1E:C9:17:23:DE:45:DB:49:04:AA:21:55:5F:32:FF:DD:B0:A3:40 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E04 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bx7JFyPeRdtJBKohVV8y_92wo0A.roa Signing time: Fri 01 Sep 2023 10:15:34 +0000 ROA not before: Fri 01 Sep 2023 10:15:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 180.218.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7684 (0x1e04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=071EC91723DE45DB4904AA21555F32FFDDB0A340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:ce:62:bb:22:e4:9d:c0:7c:48:fe:2c:76: 69:99:3e:66:73:1c:9d:c4:cf:bd:98:6d:a6:fe:c6: 70:c7:71:19:dd:60:a3:4e:51:d4:51:e5:7b:b1:40: 23:03:1d:c5:ba:d2:ab:d6:5a:f0:8a:9b:eb:5d:8f: e4:00:73:bf:33:0a:8b:8f:84:e1:2c:e4:66:f3:be: 93:50:f7:fb:3d:5a:fe:68:e2:7f:fa:34:d4:b9:01: d5:49:37:0e:1f:fa:df:3c:f8:0d:b8:6a:ec:20:b7: 80:1d:44:73:47:3f:cf:a2:8a:f4:36:ef:df:58:ca: 4d:be:a6:f3:a1:0b:ae:c1:4b:28:32:3b:b1:56:70: 57:c3:09:39:0e:1b:66:33:61:56:4a:6d:b2:44:ed: d4:da:4b:af:65:63:c4:fc:cb:cd:c3:c4:f9:25:df: cf:02:ff:07:32:4e:6a:d8:c4:bd:1e:c1:a7:6f:1a: b3:2a:d2:88:be:8f:d1:e9:07:33:86:ce:db:92:11: 4d:56:de:c0:47:08:79:75:d5:55:3f:ae:61:0c:f7: 44:5f:79:4b:5b:66:89:ae:1d:bc:e8:0e:4a:09:7c: c7:11:b9:70:6d:0e:5a:8d:a7:64:61:c6:90:0d:9f: d5:1e:a8:a4:77:03:b9:11:5b:0f:40:b2:40:3c:6c: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1E:C9:17:23:DE:45:DB:49:04:AA:21:55:5F:32:FF:DD:B0:A3:40 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bx7JFyPeRdtJBKohVV8y_92wo0A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.104.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:62:dd:c9:68:d3:71:68:48:02:10:8d:14:08:15:44:82:8b: 9f:17:f6:bc:9f:ae:d7:97:26:2f:e5:22:2d:e3:fe:31:bc:11: c0:4f:a0:9e:bb:3d:7a:c0:ff:ce:97:f2:e1:46:b8:56:b8:0e: 58:00:6c:ec:fb:f4:83:d4:b8:a3:d0:80:1f:fe:1b:46:f0:be: 28:3b:8e:0b:6c:79:02:51:57:d5:96:98:a2:8e:07:b1:58:9f: 1c:9f:3c:13:42:aa:b6:a0:fd:e5:0b:b9:4b:ed:af:6e:43:39: 43:29:61:12:2c:fa:4b:e6:bf:bd:65:02:dc:58:74:4f:27:8e: 78:83:29:40:9d:15:ed:cb:61:04:9d:a1:64:b3:cc:74:7e:4c: 55:64:71:04:b6:a8:3f:42:7e:de:05:9a:30:d5:22:8d:1f:b5: 94:af:3c:ac:00:53:c1:64:d4:73:a5:ae:96:db:c8:27:19:0c: d5:f5:33:0b:ee:20:ec:41:74:8b:be:57:0c:5c:64:09:66:e6: 6b:3f:49:51:f1:2d:16:45:cb:70:8a:a4:91:0c:a1:20:19:0f: 81:88:66:cc:d2:fd:64:04:0c:ba:f5:2a:70:7e:3a:22:1a:f6: 08:35:28:89:b7:33:7a:71:b1:64:3a:e9:41:3c:ea:f2:33:23: 68:74:f4:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA3MUVDOTE3MjNERTQ1 REI0OTA0QUEyMTU1NUYzMkZGRERCMEEzNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4/85iuyLkncB8SP4sdmmZPmZzHJ3Ez72Ybab+xnDHcRndYKNO UdRR5XuxQCMDHcW60qvWWvCKm+tdj+QAc78zCouPhOEs5GbzvpNQ9/s9Wv5o4n/6 NNS5AdVJNw4f+t88+A24auwgt4AdRHNHP8+iivQ2799Yyk2+pvOhC67BSygyO7FW cFfDCTkOG2YzYVZKbbJE7dTaS69lY8T8y83DxPkl388C/wcyTmrYxL0ewadvGrMq 0oi+j9HpBzOGztuSEU1W3sBHCHl11VU/rmEM90RfeUtbZomuHbzoDkoJfMcRuXBt DlqNp2RhxpANn9UeqKR3A7kRWw9AskA8bOYPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBx7JFyPeRdtJBKohVV8y/92wo0AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0J4N0pGeVBlUmR0SkJLb2hW Vjh5Xzkyd28wQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2mgwDQYJKoZIhvcNAQELBQADggEBAH5i3clo03FoSAIQjRQIFUSCi58X9ryfrteX Ji/lIi3j/jG8EcBPoJ67PXrA/86X8uFGuFa4DlgAbOz79IPUuKPQgB/+G0bwvig7 jgtseQJRV9WWmKKOB7FYnxyfPBNCqrag/eULuUvtr25DOUMpYRIs+kvmv71lAtxY dE8njniDKUCdFe3LYQSdoWSzzHR+TFVkcQS2qD9Cft4FmjDVIo0ftZSvPKwAU8Fk 1HOlrpbbyCcZDNX1MwvuIOxBdIu+VwxcZAlm5ms/SVHxLRZFy3CKpJEMoSAZD4GI ZszS/WQEDLr1KnB+OiIa9gg1KIm3M3pxsWQ66UE86vIzI2h09H4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org