$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QAAMM8phnZCkARcaB06giFA3ExU.roa File: QAAMM8phnZCkARcaB06giFA3ExU.roa (raw, json) Hash identifier: 9SeZTIL79W3TcAmMfIsT2sIlbUYNwDnm8dzjOYbJcaE= Subject key identifier: 40:00:0C:33:CA:61:9D:90:A4:01:17:1A:07:4E:A0:88:50:37:13:15 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E3D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QAAMM8phnZCkARcaB06giFA3ExU.roa Signing time: Fri 01 Sep 2023 10:15:49 +0000 ROA not before: Fri 01 Sep 2023 10:15:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24165 IP address blocks: 180.218.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7741 (0x1e3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=40000C33CA619D90A401171A074EA08850371315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:12:85:07:86:33:a4:d1:b4:e5:df:40:ad: 30:fd:16:4b:ad:f1:18:34:b9:35:11:ca:f8:21:41: f7:ea:10:90:2e:7c:e8:8c:d2:43:f3:ae:cd:7f:f7: f6:dd:c6:d2:ce:c9:f9:09:27:77:5c:6b:6f:34:51: c5:87:b8:62:a6:07:b7:9d:18:79:d8:06:8a:ae:87: a3:ba:05:71:03:50:c3:c2:78:ad:d9:4e:54:94:f8: 1b:94:40:6c:56:9f:13:62:13:33:70:46:72:de:cd: 38:eb:b9:71:77:df:99:68:27:eb:c7:26:77:23:7a: da:5a:c4:2e:fe:c2:6c:40:43:a7:c4:8a:1d:a1:57: a5:42:9d:1e:97:ac:4f:54:e8:dc:6c:97:37:34:6f: d0:e8:b9:11:dd:78:76:33:65:02:44:71:32:6c:6e: 2e:79:3a:b7:6f:d3:b3:5f:7e:ba:4c:47:55:4a:78: 55:cf:ab:c7:73:df:1e:62:59:57:8d:0f:7d:12:14: 52:c6:c3:66:18:22:d8:7b:8e:ce:cc:16:1d:af:11: 28:4f:c8:2c:4b:15:6d:29:39:bd:bb:84:ff:b6:66: b8:b3:ec:b6:c6:ef:9d:a8:8f:8a:71:93:2e:b3:17: 56:86:c0:9b:b8:3b:98:43:b6:7a:1f:22:97:f4:29: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:00:0C:33:CA:61:9D:90:A4:01:17:1A:07:4E:A0:88:50:37:13:15 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QAAMM8phnZCkARcaB06giFA3ExU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.88.0/22 Signature Algorithm: sha256WithRSAEncryption 00:4b:be:5b:c1:95:27:ab:96:c4:fe:ff:af:0b:a1:38:2c:d4: c6:1e:d2:3c:b6:44:c0:a0:62:40:02:29:d9:fb:6c:db:98:ee: 12:8a:36:6e:94:a2:8f:b5:fe:d3:b0:11:0a:1a:11:f1:41:0c: 03:4d:59:ec:f0:20:41:b6:47:56:50:d0:50:6e:a6:18:05:d8: 63:67:12:9b:74:9e:4f:ce:53:3d:c6:53:ba:e6:b0:cc:e0:32: e7:8f:25:50:dd:32:fc:e1:a8:85:b8:47:a4:8c:f1:59:7b:59: e4:cb:51:a4:91:f5:23:9c:77:17:15:b8:34:7f:0e:cb:e6:52: cc:10:d5:e7:88:4e:8b:b5:2f:1a:9a:4f:c8:39:d4:34:79:77: d6:ef:db:55:62:ef:2f:3a:94:9d:0d:b0:c6:57:19:3c:7b:5b: 13:fa:8d:76:55:3b:60:63:18:fe:93:e8:f9:bf:40:ce:9c:00: 08:39:55:db:89:b0:95:2d:e0:42:7c:f0:9a:47:b6:20:af:58: cd:d2:d8:5c:43:58:a9:50:9f:35:8d:9d:58:85:75:2c:d6:28: f9:ce:8f:f2:ae:81:0f:d5:a4:b7:e0:2b:27:67:6e:84:12:8e: 21:e6:b8:8e:91:7a:0d:6e:44:03:0e:6f:66:d7:e4:c6:b5:64: dd:be:2a:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwMDAwQzMzQ0E2MTlE OTBBNDAxMTcxQTA3NEVBMDg4NTAzNzEzMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3EBKFB4YzpNG05d9ArTD9Fkut8Rg0uTURyvghQffqEJAufOiM 0kPzrs1/9/bdxtLOyfkJJ3dca280UcWHuGKmB7edGHnYBoquh6O6BXEDUMPCeK3Z TlSU+BuUQGxWnxNiEzNwRnLezTjruXF335loJ+vHJncjetpaxC7+wmxAQ6fEih2h V6VCnR6XrE9U6Nxslzc0b9DouRHdeHYzZQJEcTJsbi55Ordv07NffrpMR1VKeFXP q8dz3x5iWVeND30SFFLGw2YYIth7js7MFh2vEShPyCxLFW0pOb27hP+2Zriz7LbG 752oj4pxky6zF1aGwJu4O5hDtnofIpf0KTJPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQAAMM8phnZCkARcaB06giFA3ExUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FBQU1NOHBoblpDa0FSY2FC MDZnaUZBM0V4VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2lgwDQYJKoZIhvcNAQELBQADggEBAABLvlvBlSerlsT+/68LoTgs1MYe0jy2RMCg YkACKdn7bNuY7hKKNm6Uoo+1/tOwEQoaEfFBDANNWezwIEG2R1ZQ0FBuphgF2GNn Ept0nk/OUz3GU7rmsMzgMuePJVDdMvzhqIW4R6SM8Vl7WeTLUaSR9SOcdxcVuDR/ DsvmUswQ1eeITou1LxqaT8g51DR5d9bv21Vi7y86lJ0NsMZXGTx7WxP6jXZVO2Bj GP6T6Pm/QM6cAAg5VduJsJUt4EJ88JpHtiCvWM3S2FxDWKlQnzWNnViFdSzWKPnO j/KugQ/VpLfgKydnboQSjiHmuI6Reg1uRAMOb2bX5Ma1ZN2+KoA= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org