$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa File: Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa (raw, json) Hash identifier: 497FSDltTmGFCz0pfRJhf3igxUSlb6jPMiB+GJ6Xous= Subject key identifier: 3E:6D:E3:BC:32:E7:5B:79:B9:BD:8E:E8:0B:2F:51:42:E5:F1:25:6D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EB0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa Signing time: Fri 01 Sep 2023 10:16:21 +0000 ROA not before: Fri 01 Sep 2023 10:16:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7856 (0x1eb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3E6DE3BC32E75B79B9BD8EE80B2F5142E5F1256D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:03:e7:37:cc:79:25:07:13:29:f2:6d:9e: 23:b7:c5:a1:a3:75:ef:63:99:3f:2e:68:8c:ce:fd: 91:7b:f3:be:a3:b4:8f:64:5d:f8:55:3f:4e:97:a4: 3f:01:81:25:d4:04:73:cd:f3:38:3d:3d:69:77:bf: 2c:f3:18:22:a8:5c:5b:f1:ca:4c:25:78:99:3d:52: e5:69:f9:34:a0:d8:af:e9:69:80:dd:a8:e1:da:9a: b9:0f:db:b1:33:78:56:19:87:dd:60:89:19:d2:fb: 64:26:46:48:0e:fc:1b:88:8f:94:53:5d:92:9f:13: 59:1e:e8:61:52:97:7d:62:0a:f4:6e:94:12:3e:2e: be:46:97:95:18:7b:ff:72:2c:45:98:11:0f:97:1d: bb:44:9d:f3:f1:d3:50:dd:f8:58:6f:49:85:39:c6: c0:39:c7:84:2d:bf:1b:f8:8e:cc:e4:90:ab:c6:3e: 2f:3b:7d:c3:92:41:c9:c6:2f:9a:81:00:b0:7f:9d: de:2b:25:cb:10:e4:ee:74:11:54:16:f2:f5:23:33: 0c:9e:93:ec:6a:d2:a0:14:45:c9:a0:88:25:27:cd: ff:0f:82:47:f0:3e:f4:e8:72:31:df:b7:7a:06:11: e1:68:4c:66:86:f6:0c:49:cb:ce:5c:48:55:96:f6: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:E3:BC:32:E7:5B:79:B9:BD:8E:E8:0B:2F:51:42:E5:F1:25:6D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.168.0/21 Signature Algorithm: sha256WithRSAEncryption 23:59:6c:3c:18:13:a6:d3:09:49:6f:5e:a7:17:80:83:1c:28: 37:46:84:72:6c:d3:b7:34:c4:93:84:43:46:42:85:28:78:37: a9:93:4b:0a:0f:a1:70:ef:1c:e9:f5:47:3d:14:0e:9f:33:46: 43:00:46:94:c1:63:f7:bf:b4:d1:24:b4:58:c8:12:20:56:09: 05:54:75:41:21:48:72:3f:66:7e:51:f7:aa:ec:cd:87:f3:91: 5b:fb:ec:f2:fc:38:84:c7:42:1d:0b:2d:ff:2d:01:fc:10:45: 62:71:68:4f:7b:b4:77:2c:4d:a1:b1:7f:89:33:88:ac:85:c1: 9e:8d:c1:bc:4d:87:d0:15:0e:d4:9b:d1:16:88:2a:67:a1:43: fb:e5:cf:f0:20:83:c8:85:2b:ba:97:d2:4e:e8:ee:45:47:6d: 3a:7a:b7:ea:b3:0b:46:62:ab:c4:14:15:d6:f5:9a:57:5e:2a: 25:74:c8:de:10:40:e8:50:cc:27:0c:29:f6:a9:0f:76:1a:f1: 1d:54:d7:d5:65:49:11:2d:6d:b9:2a:c0:1f:57:52:b9:5f:ee: 89:e1:17:9b:a4:25:ff:d8:07:39:d9:02:15:08:27:1d:1e:b9: 88:b0:94:2f:49:82:73:a4:48:9d:80:b3:93:20:19:b9:ab:b0: 61:36:5e:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNFNkRFM0JDMzJFNzVC NzlCOUJEOEVFODBCMkY1MTQyRTVGMTI1NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWRQPnN8x5JQcTKfJtniO3xaGjde9jmT8uaIzO/ZF7876jtI9k XfhVP06XpD8BgSXUBHPN8zg9PWl3vyzzGCKoXFvxykwleJk9UuVp+TSg2K/paYDd qOHamrkP27EzeFYZh91giRnS+2QmRkgO/BuIj5RTXZKfE1ke6GFSl31iCvRulBI+ Lr5Gl5UYe/9yLEWYEQ+XHbtEnfPx01Dd+FhvSYU5xsA5x4Qtvxv4jszkkKvGPi87 fcOSQcnGL5qBALB/nd4rJcsQ5O50EVQW8vUjMwyek+xq0qAURcmgiCUnzf8Pgkfw PvTocjHft3oGEeFoTGaG9gxJy85cSFWW9lprAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPm3jvDLnW3m5vY7oCy9RQuXxJW0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BtM2p2RExuVzNtNXZZN29D eTlSUXVYeEpXMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2qgwDQYJKoZIhvcNAQELBQADggEBACNZbDwYE6bTCUlvXqcXgIMcKDdGhHJs07c0 xJOEQ0ZChSh4N6mTSwoPoXDvHOn1Rz0UDp8zRkMARpTBY/e/tNEktFjIEiBWCQVU dUEhSHI/Zn5R96rszYfzkVv77PL8OITHQh0LLf8tAfwQRWJxaE97tHcsTaGxf4kz iKyFwZ6NwbxNh9AVDtSb0RaIKmehQ/vlz/Agg8iFK7qX0k7o7kVHbTp6t+qzC0Zi q8QUFdb1mldeKiV0yN4QQOhQzCcMKfapD3Ya8R1U19VlSREtbbkqwB9XUrlf7onh F5ukJf/YBznZAhUIJx0euYiwlC9JgnOkSJ2As5MgGbmrsGE2Xoc= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org