$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gp1nE02j-ygIULhL0vao-jLe2WY.roa File: Gp1nE02j-ygIULhL0vao-jLe2WY.roa (raw, json) Hash identifier: 4oVtxf1LILlrJKp4xZmqyp8WJohU0MEldtbzhr6fBNY= Subject key identifier: 1A:9D:67:13:4D:A3:FB:28:08:50:B8:4B:D2:F6:A8:FA:32:DE:D9:66 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 228A Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gp1nE02j-ygIULhL0vao-jLe2WY.roa Signing time: Mon 26 Aug 2024 05:34:07 +0000 ROA not before: Mon 26 Aug 2024 05:34:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8842 (0x228a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:34:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1A9D67134DA3FB280850B84BD2F6A8FA32DED966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:a7:3e:d1:0d:0f:45:19:5a:25:90:56:60: 38:3c:b8:94:c8:ed:39:72:d5:99:e5:34:c5:eb:6d: b8:9a:08:ed:ca:b6:c7:b9:05:01:3e:a0:b4:f7:47: cd:f4:9e:49:3b:96:43:01:bd:91:9a:a5:06:4e:a7: d3:b9:95:fb:ec:e0:9b:8c:49:4f:66:fe:81:1c:2e: dd:7d:ea:2c:c9:ea:ce:1a:51:ee:9b:fe:47:41:23: 9d:94:d0:95:ad:b5:74:67:4d:d6:86:26:46:04:ac: 43:ab:54:8a:af:3d:93:fc:1f:f9:e4:e4:e5:ff:2b: 34:7e:d2:59:9f:fc:2d:22:73:23:86:45:8b:55:32: 52:23:0c:2d:91:ed:99:ce:cb:2f:92:65:95:21:2a: 61:cd:6a:30:2d:df:76:50:23:ed:da:cd:6e:f3:ae: 5f:09:c6:e0:2e:1b:ad:ea:c6:48:a1:f1:d0:de:44: fa:45:2f:74:6a:36:db:1f:36:ee:56:ec:13:7f:d3: 96:c1:53:32:45:22:39:aa:80:73:08:7e:ac:4e:d9: ba:51:68:98:9f:c2:83:b3:e5:b8:d0:c9:5f:3f:ab: d2:65:2a:4e:96:c3:76:53:80:6d:55:ab:e4:4d:20: 8b:2c:ab:31:d3:5c:ee:2d:e5:0a:3b:e5:81:2b:89: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9D:67:13:4D:A3:FB:28:08:50:B8:4B:D2:F6:A8:FA:32:DE:D9:66 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gp1nE02j-ygIULhL0vao-jLe2WY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.216.0/22 Signature Algorithm: sha256WithRSAEncryption 59:77:c3:b3:26:41:4b:3d:67:0f:38:72:a5:c4:21:45:31:37: bb:0a:d8:d5:64:cf:49:3b:f5:8e:92:cc:75:6a:58:90:cb:38: 1e:d1:51:ba:e8:1c:73:71:e7:99:94:d1:6a:4a:1d:47:b0:24: fd:f0:ad:0f:e6:88:d3:c2:eb:ab:cb:ac:c9:34:8c:65:57:2d: 8f:52:9b:ab:3d:af:e2:ec:96:0d:99:6b:eb:14:af:a7:48:01: 6a:ea:80:90:b2:ca:07:95:7b:5b:f2:37:43:c6:0b:c2:59:16: d5:7b:31:c4:a7:32:91:5e:96:5b:dc:45:53:96:68:7f:9c:94: c2:65:ca:e5:cd:d4:74:67:20:78:60:d4:68:34:f7:43:7a:74: 85:ba:a0:9d:a6:70:02:d5:e6:ae:b5:27:55:4c:31:cf:4b:cf: 12:be:7d:ad:dd:87:38:50:d3:d0:aa:31:11:75:0a:28:90:cc: 01:a6:b5:27:19:c5:8b:ce:ed:5e:62:da:a8:f9:21:79:84:aa: 9e:8b:69:ab:85:70:56:c0:d9:39:d6:3c:7a:9f:7c:2a:42:23: 2b:bb:2c:c3:aa:92:bc:18:01:e6:f6:94:bc:66:cd:46:d3:31: 8d:c1:77:a4:12:94:c8:d7:d0:0b:4f:96:b3:58:a0:af:4e:bf: bf:67:c5:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTM0MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBOUQ2NzEzNERBM0ZC MjgwODUwQjg0QkQyRjZBOEZBMzJERUQ5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbOKc+0Q0PRRlaJZBWYDg8uJTI7Tly1ZnlNMXrbbiaCO3Ktse5 BQE+oLT3R830nkk7lkMBvZGapQZOp9O5lfvs4JuMSU9m/oEcLt196izJ6s4aUe6b /kdBI52U0JWttXRnTdaGJkYErEOrVIqvPZP8H/nk5OX/KzR+0lmf/C0icyOGRYtV MlIjDC2R7ZnOyy+SZZUhKmHNajAt33ZQI+3azW7zrl8JxuAuG63qxkih8dDeRPpF L3RqNtsfNu5W7BN/05bBUzJFIjmqgHMIfqxO2bpRaJifwoOz5bjQyV8/q9JlKk6W w3ZTgG1Vq+RNIIssqzHTXO4t5Qo75YErieKDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGp1nE02j+ygIULhL0vao+jLe2WYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0dwMW5FMDJqLXlnSVVMaEww dmFvLWpMZTJXWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2tgwDQYJKoZIhvcNAQELBQADggEBAFl3w7MmQUs9Zw84cqXEIUUxN7sK2NVkz0k7 9Y6SzHVqWJDLOB7RUbroHHNx55mU0WpKHUewJP3wrQ/miNPC66vLrMk0jGVXLY9S m6s9r+Lslg2Za+sUr6dIAWrqgJCyygeVe1vyN0PGC8JZFtV7McSnMpFellvcRVOW aH+clMJlyuXN1HRnIHhg1Gg090N6dIW6oJ2mcALV5q61J1VMMc9LzxK+fa3dhzhQ 09CqMRF1CiiQzAGmtScZxYvO7V5i2qj5IXmEqp6LaauFcFbA2TnWPHqffCpCIyu7 LMOqkrwYAeb2lLxmzUbTMY3Bd6QSlMjX0AtPlrNYoK9Ov79nxek= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org