$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwYnlM7M0VodFAuNGWa-6kb4vXU.roa File: MwYnlM7M0VodFAuNGWa-6kb4vXU.roa (raw, json) Hash identifier: xEQUQtxfwKEwXpkmxr3G7PLu0RP8Ox4PueYOH1C0/os= Subject key identifier: 33:06:27:94:CE:CC:D1:5A:1D:14:0B:8D:19:66:BE:EA:46:F8:BD:75 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D8E Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwYnlM7M0VodFAuNGWa-6kb4vXU.roa Signing time: Fri 01 Sep 2023 10:15:00 +0000 ROA not before: Fri 01 Sep 2023 10:15:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 180.218.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7566 (0x1d8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=33062794CECCD15A1D140B8D1966BEEA46F8BD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:f1:da:b5:d7:c8:10:84:0f:d0:76:14:3d: d8:d4:21:0f:84:b7:03:4f:57:f7:73:26:9b:59:bb: 0e:59:de:43:3b:b1:b0:bf:76:1d:b2:2a:68:52:1e: e9:93:86:ec:f1:e3:34:8f:6b:f1:44:9a:7d:ee:72: b2:d4:3b:d7:52:50:24:18:83:ab:38:0a:64:29:2f: 11:50:1b:a4:1b:08:e5:02:ff:36:a7:f2:5d:60:dd: 29:ba:8e:17:05:2f:1c:68:d1:75:4b:4c:a1:7b:3c: 7a:33:e4:dd:12:81:e7:63:92:a1:25:32:c5:2c:d5: dc:8d:1e:94:dc:70:3d:83:09:5d:55:6a:a2:7b:f9: 43:8c:d8:9a:19:30:57:30:f0:d7:78:12:18:f8:38: cf:96:b6:25:54:e9:32:d4:0a:e4:6f:68:f1:cc:be: e2:55:1f:bf:9f:37:6b:e4:d3:d4:d2:03:48:cc:07: d4:b5:bf:e0:17:a0:cd:1a:73:e1:b0:a0:d5:4d:46: 53:93:6b:64:08:58:b0:53:96:9a:98:4f:0b:72:05: 5f:68:f3:23:7c:26:80:fb:60:fc:49:38:dd:0f:7a: f8:12:69:c6:7e:92:a5:7a:04:dc:95:55:f8:5b:3c: bb:df:8e:43:6d:a0:d5:71:3b:87:21:ac:c0:a0:9c: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:06:27:94:CE:CC:D1:5A:1D:14:0B:8D:19:66:BE:EA:46:F8:BD:75 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwYnlM7M0VodFAuNGWa-6kb4vXU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.112.0/21 Signature Algorithm: sha256WithRSAEncryption 83:fa:c0:8c:6d:28:28:c4:e6:fd:9a:59:c5:62:1f:07:54:45: 0f:85:dd:37:71:a6:37:6d:24:bd:65:67:18:47:9c:de:55:ef: de:fd:82:c7:a4:da:c3:60:1b:4c:32:b9:e8:84:2c:83:1c:ea: cc:7a:68:a0:75:fe:0d:a4:19:8c:48:5f:75:d4:d9:bf:29:39: bf:ef:f0:29:10:6b:0c:b5:30:a6:3e:c3:df:bd:61:3a:4f:1a: 9d:75:7b:b8:8e:9d:0c:d6:46:bf:c3:a2:1d:8c:3f:0e:98:e6: cb:d1:1d:53:b3:81:34:e7:4a:f1:da:21:32:c5:54:ca:f9:d6: 25:b0:1a:84:68:04:6e:9f:4b:43:b0:b4:cd:26:5f:30:72:e7: b6:38:b9:10:f5:f3:e5:22:5e:68:cb:a5:f3:c9:92:f9:df:75: 41:16:37:d5:6c:2c:a0:bb:b8:70:8e:9d:f0:a1:85:95:7f:e3: a4:09:0f:df:ce:95:03:26:2d:de:5b:7b:dc:d2:46:3b:d9:bd: 3d:00:c3:3a:ad:50:91:2e:95:8b:b8:d4:55:8f:10:41:00:56: d1:8b:a7:c9:0b:38:14:36:ee:e1:3e:e6:cd:aa:f0:0b:00:4f: 6c:1d:68:96:81:77:3d:f1:37:30:86:38:28:ed:ed:9c:25:c5: 8e:4b:70:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMzMDYyNzk0Q0VDQ0Qx NUExRDE0MEI4RDE5NjZCRUVBNDZGOEJENzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+OvHatdfIEIQP0HYUPdjUIQ+EtwNPV/dzJptZuw5Z3kM7sbC/ dh2yKmhSHumThuzx4zSPa/FEmn3ucrLUO9dSUCQYg6s4CmQpLxFQG6QbCOUC/zan 8l1g3Sm6jhcFLxxo0XVLTKF7PHoz5N0SgedjkqElMsUs1dyNHpTccD2DCV1VaqJ7 +UOM2JoZMFcw8Nd4Ehj4OM+WtiVU6TLUCuRvaPHMvuJVH7+fN2vk09TSA0jMB9S1 v+AXoM0ac+GwoNVNRlOTa2QIWLBTlpqYTwtyBV9o8yN8JoD7YPxJON0PevgSacZ+ kqV6BNyVVfhbPLvfjkNtoNVxO4chrMCgnCCFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMwYnlM7M0VodFAuNGWa+6kb4vXUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL013WW5sTTdNMFZvZEZBdU5H V2EtNmtiNHZYVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2nAwDQYJKoZIhvcNAQELBQADggEBAIP6wIxtKCjE5v2aWcViHwdURQ+F3Tdxpjdt JL1lZxhHnN5V7979gsek2sNgG0wyueiELIMc6sx6aKB1/g2kGYxIX3XU2b8pOb/v 8CkQawy1MKY+w9+9YTpPGp11e7iOnQzWRr/Doh2MPw6Y5svRHVOzgTTnSvHaITLF VMr51iWwGoRoBG6fS0OwtM0mXzBy57Y4uRD18+UiXmjLpfPJkvnfdUEWN9VsLKC7 uHCOnfChhZV/46QJD9/OlQMmLd5be9zSRjvZvT0AwzqtUJEulYu41FWPEEEAVtGL p8kLOBQ27uE+5s2q8AsAT2wdaJaBdz3xNzCGOCjt7ZwlxY5LcGk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org