$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Qq_mRg7Jc3IR8RxhbsO3QQd2qXE.roa File: Qq_mRg7Jc3IR8RxhbsO3QQd2qXE.roa (raw, json) Hash identifier: wYIovL4xjOjLj3JutOBmZxUkrOvbE37uMQYaRkQyHKc= Subject key identifier: 42:AF:E6:46:0E:C9:73:72:11:F1:1C:61:6E:C3:B7:41:07:76:A9:71 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2243 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Qq_mRg7Jc3IR8RxhbsO3QQd2qXE.roa Signing time: Mon 26 Aug 2024 05:33:49 +0000 ROA not before: Mon 26 Aug 2024 05:33:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 180.218.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8771 (0x2243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=42AFE6460EC9737211F11C616EC3B7410776A971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:a7:d9:dd:31:6c:56:90:e7:b8:e3:75:0d: e9:5b:8c:be:f0:99:02:4f:3e:78:e1:ab:cf:ae:93: c6:33:4c:11:fb:5d:64:a7:aa:1d:11:b4:4e:c4:fa: 4b:6d:58:8c:b3:3a:27:db:fb:0f:e7:a2:dd:ed:19: 16:9a:8a:e7:de:46:c1:8b:63:99:23:a5:07:14:77: 7b:33:3b:ec:07:a5:d5:e5:ec:9c:3a:3d:38:53:20: d8:7f:24:50:69:35:3b:60:b3:52:26:d4:48:b7:7a: 87:60:99:5d:08:17:33:76:1f:20:aa:cf:92:1b:6d: 8f:7b:a5:24:3c:52:1f:a7:e2:33:76:ce:b5:3e:4f: 1a:26:85:72:14:37:5a:81:69:b9:18:8d:a5:dd:e6: 2e:19:10:54:ee:37:b0:39:13:1f:b0:ce:d6:10:e5: fd:3e:d0:12:81:37:90:0a:17:bd:c2:20:5b:47:e6: 72:4b:bc:a8:24:3b:e4:a2:92:ef:c5:51:bc:4a:85: c8:06:41:59:32:36:bf:6b:98:4d:0f:2d:4c:17:61: ad:6f:0f:6a:4d:d8:83:4d:55:43:f0:f1:17:ae:a6: 30:28:46:31:1e:7d:da:19:74:ff:4f:27:c3:ec:66: 42:4b:cb:1d:21:9a:dd:2c:94:9c:95:39:bd:95:5b: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:E6:46:0E:C9:73:72:11:F1:1C:61:6E:C3:B7:41:07:76:A9:71 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Qq_mRg7Jc3IR8RxhbsO3QQd2qXE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.128.0/18 Signature Algorithm: sha256WithRSAEncryption 54:38:e1:44:bb:d3:c4:80:80:65:c0:f3:55:d3:e4:41:a1:30: 3a:0a:b5:d2:70:fe:39:87:52:af:8b:49:25:60:23:50:43:43: 2a:ac:80:7f:cc:50:63:64:31:42:38:a3:40:46:38:61:68:3f: 97:a9:e5:1c:93:6a:0a:44:d9:f2:bc:33:68:a7:91:6e:aa:90: 80:6a:59:55:49:56:02:ba:aa:0c:1f:4c:5b:8c:ce:97:48:87: df:ab:13:4d:2d:24:ac:34:5d:58:9d:7b:b8:b9:97:6a:11:5a: 18:78:da:1a:25:7b:7a:cc:46:04:4a:cf:78:2e:5b:14:03:bf: 8a:fe:ad:4c:4f:52:f4:12:a1:91:c9:70:53:ad:a3:00:86:8f: d4:f7:1a:f0:5e:b0:28:90:86:b6:99:b6:8f:e1:97:6b:47:b9: af:de:05:82:cf:a9:51:63:80:1e:42:44:18:c8:09:2d:08:82: 94:f9:2c:8e:78:14:de:28:86:5e:82:29:f9:52:1c:67:35:be: 7e:84:25:a5:02:09:70:c9:ea:e3:7f:35:5f:bf:b0:8f:6b:ee: ea:89:1c:f1:2d:59:0b:d1:8d:d5:0f:35:99:f9:b9:60:88:30: d4:c5:d4:f0:df:52:60:7b:a2:d4:53:60:86:aa:e8:c8:67:c6: eb:00:6a:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyQUZFNjQ2MEVDOTcz NzIxMUYxMUM2MTZFQzNCNzQxMDc3NkE5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMxqfZ3TFsVpDnuON1DelbjL7wmQJPPnjhq8+uk8YzTBH7XWSn qh0RtE7E+kttWIyzOifb+w/not3tGRaaiufeRsGLY5kjpQcUd3szO+wHpdXl7Jw6 PThTINh/JFBpNTtgs1Im1Ei3eodgmV0IFzN2HyCqz5IbbY97pSQ8Uh+n4jN2zrU+ TxomhXIUN1qBabkYjaXd5i4ZEFTuN7A5Ex+wztYQ5f0+0BKBN5AKF73CIFtH5nJL vKgkO+Siku/FUbxKhcgGQVkyNr9rmE0PLUwXYa1vD2pN2INNVUPw8ReupjAoRjEe fdoZdP9PJ8PsZkJLyx0hmt0slJyVOb2VW0jhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQq/mRg7Jc3IR8RxhbsO3QQd2qXEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FxX21SZzdKYzNJUjhSeGhi c08zUVFkMnFYRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0 2oAwDQYJKoZIhvcNAQELBQADggEBAFQ44US708SAgGXA81XT5EGhMDoKtdJw/jmH Uq+LSSVgI1BDQyqsgH/MUGNkMUI4o0BGOGFoP5ep5RyTagpE2fK8M2inkW6qkIBq WVVJVgK6qgwfTFuMzpdIh9+rE00tJKw0XVide7i5l2oRWhh42hole3rMRgRKz3gu WxQDv4r+rUxPUvQSoZHJcFOtowCGj9T3GvBesCiQhraZto/hl2tHua/eBYLPqVFj gB5CRBjICS0IgpT5LI54FN4ohl6CKflSHGc1vn6EJaUCCXDJ6uN/NV+/sI9r7uqJ HPEtWQvRjdUPNZn5uWCIMNTF1PDfUmB7otRTYIaq6MhnxusAar8= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org