$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LeW7LYns-BE51-6pTXn7nMGf4dg.roa File: LeW7LYns-BE51-6pTXn7nMGf4dg.roa (raw, json) Hash identifier: lYB7M19aRPy5y9YCWYTeuKShTPi5AcPVXODeROWCelA= Subject key identifier: 2D:E5:BB:2D:89:EC:F8:11:39:D7:EE:A9:4D:79:FB:9C:C1:9F:E1:D8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D63 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LeW7LYns-BE51-6pTXn7nMGf4dg.roa Signing time: Fri 01 Sep 2023 10:14:45 +0000 ROA not before: Fri 01 Sep 2023 10:14:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 180.218.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7523 (0x1d63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2DE5BB2D89ECF81139D7EEA94D79FB9CC19FE1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:44:2e:b8:b8:d5:22:df:e2:18:4b:a1:a4:75: 32:e5:9b:ce:da:b5:69:6d:24:3a:1f:7d:7d:90:20: 69:93:27:f0:47:d8:26:f0:67:8b:68:92:de:8b:15: 3e:4a:f5:fe:ba:f0:a3:c3:e4:bc:d0:57:bb:be:47: e3:a0:0c:7d:90:0d:86:49:79:fe:0d:7f:6f:18:eb: c6:d1:0b:49:7e:c4:54:be:dd:94:48:20:b1:31:45: b9:66:2c:13:81:ff:1b:3a:0f:98:b1:22:d1:d5:a1: e1:95:49:45:db:71:63:8f:91:66:31:c4:f2:a8:88: 8b:16:ba:d2:73:b6:c6:ae:07:68:9e:3c:19:ac:e7: 11:85:e1:c6:1e:0b:6f:1b:68:df:44:c1:01:86:a4: 52:c4:59:ae:70:85:8c:e4:18:d7:97:44:b9:02:40: e9:40:77:58:a6:a6:c4:7b:cb:2c:85:06:f5:a9:cf: 3d:d5:63:0b:f6:b8:9f:47:11:f1:c4:eb:6b:13:21: 7f:64:8d:3a:0e:6c:a8:56:02:85:18:f1:fc:d7:e2: 17:a7:93:d9:82:04:bc:32:a4:ad:fd:ef:7a:92:35: 0b:cc:a0:04:b0:50:ec:8f:92:05:fc:2b:b1:28:04: 9c:78:d2:01:88:3f:97:a4:9f:37:3c:f6:bd:28:7c: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:BB:2D:89:EC:F8:11:39:D7:EE:A9:4D:79:FB:9C:C1:9F:E1:D8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LeW7LYns-BE51-6pTXn7nMGf4dg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.240.0/21 Signature Algorithm: sha256WithRSAEncryption 91:bf:a9:15:32:0a:ee:1a:1f:e5:4a:12:cd:20:68:a0:b3:cf: 4c:ea:10:d1:65:66:ee:72:f2:75:18:00:8a:e2:9d:2f:cc:5d: a4:b4:78:f1:40:90:91:9e:9e:53:2c:4a:80:a2:35:78:65:2d: 4a:83:83:d2:da:e4:7c:b4:36:18:9f:17:aa:af:41:06:0f:74: d6:c4:08:a1:11:ce:45:a7:ff:1d:39:80:a0:cb:7a:7d:4e:16: 34:67:9e:8c:c5:1b:de:9a:6e:92:fc:f9:22:17:be:1c:23:32: b8:25:27:29:b1:6d:e4:63:cb:ac:74:c6:27:9d:7b:2a:38:be: fa:11:91:c1:54:4b:c7:e7:c7:44:89:7d:73:44:d8:64:99:3c: 1c:c5:72:15:35:28:d7:55:ac:20:3c:6a:df:1c:5c:54:35:73: 8d:0e:05:ff:59:e7:70:05:30:11:eb:37:55:8b:7a:eb:8f:1f: 2e:85:ed:89:b3:6a:c0:d1:a9:22:c9:68:9c:e7:d6:88:93:0e: 25:6c:e4:2a:25:39:8f:ed:9b:0d:4f:2d:5f:68:1a:79:c9:bf: c9:ef:a3:1a:6d:3f:20:4c:c2:77:5f:d0:ed:56:5b:48:f7:d4: 0f:d1:59:08:85:32:e6:74:8b:e0:d7:1a:9b:8b:fe:fe:e9:15: 02:65:07:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJERTVCQjJEODlFQ0Y4 MTEzOUQ3RUVBOTRENzlGQjlDQzE5RkUxRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhRC64uNUi3+IYS6GkdTLlm87atWltJDoffX2QIGmTJ/BH2Cbw Z4tokt6LFT5K9f668KPD5LzQV7u+R+OgDH2QDYZJef4Nf28Y68bRC0l+xFS+3ZRI ILExRblmLBOB/xs6D5ixItHVoeGVSUXbcWOPkWYxxPKoiIsWutJztsauB2iePBms 5xGF4cYeC28baN9EwQGGpFLEWa5whYzkGNeXRLkCQOlAd1impsR7yyyFBvWpzz3V Ywv2uJ9HEfHE62sTIX9kjToObKhWAoUY8fzX4henk9mCBLwypK3973qSNQvMoASw UOyPkgX8K7EoBJx40gGIP5eknzc89r0ofFFxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULeW7LYns+BE51+6pTXn7nMGf4dgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xlVzdMWW5zLUJFNTEtNnBU WG43bk1HZjRkZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2vAwDQYJKoZIhvcNAQELBQADggEBAJG/qRUyCu4aH+VKEs0gaKCzz0zqENFlZu5y 8nUYAIrinS/MXaS0ePFAkJGenlMsSoCiNXhlLUqDg9La5Hy0NhifF6qvQQYPdNbE CKERzkWn/x05gKDLen1OFjRnnozFG96abpL8+SIXvhwjMrglJymxbeRjy6x0xied eyo4vvoRkcFUS8fnx0SJfXNE2GSZPBzFchU1KNdVrCA8at8cXFQ1c40OBf9Z53AF MBHrN1WLeuuPHy6F7YmzasDRqSLJaJzn1oiTDiVs5ColOY/tmw1PLV9oGnnJv8nv oxptPyBMwndf0O1WW0j31A/RWQiFMuZ0i+DXGpuL/v7pFQJlB7M= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org