$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XY1ju39j-qP27Kybck3lCmqafZw.roa File: XY1ju39j-qP27Kybck3lCmqafZw.roa (raw, json) Hash identifier: CyTd4fvl1mviCHB2ZleeC3mYqBLRcKfEgOSr5gSG7Zs= Subject key identifier: 5D:8D:63:BB:7F:63:FA:A3:F6:EC:AC:9B:72:4D:E5:0A:6A:9A:7D:9C Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E19 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XY1ju39j-qP27Kybck3lCmqafZw.roa Signing time: Fri 01 Sep 2023 10:15:40 +0000 ROA not before: Fri 01 Sep 2023 10:15:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 180.218.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7705 (0x1e19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:40 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5D8D63BB7F63FAA3F6ECAC9B724DE50A6A9A7D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:3d:5f:34:fa:66:24:97:d2:0e:c0:6b:2b: 03:f1:63:f9:9e:68:69:33:29:75:d8:44:1c:53:4a: d9:1f:02:62:76:9c:fd:9e:8a:d4:0b:3b:9c:f1:00: f1:6b:34:8f:80:e0:cb:14:2b:55:6c:03:af:2c:d5: ab:81:9f:74:90:85:07:47:c1:66:92:8f:7e:12:08: 73:22:13:64:cd:04:24:c4:70:8e:4d:3e:62:af:1e: c0:ac:05:6a:5b:3d:35:af:79:6e:f7:0b:01:d8:27: 3a:8e:eb:01:c7:01:72:62:8f:f3:37:4b:2e:b1:91: f5:d0:d1:de:7e:d9:13:7d:79:42:83:8f:f1:74:58: ec:2a:fa:fb:9a:1d:bd:0a:77:ca:1d:d0:dd:0a:6f: 80:57:42:45:78:2d:9a:d1:70:9c:0e:04:ee:39:60: 43:1f:88:fc:18:e8:7f:b8:d4:ad:7f:53:2d:2e:cc: 95:3b:16:a2:a1:f4:35:33:d3:b1:fa:c0:6b:7c:ca: dd:52:23:ed:77:60:dc:81:6f:76:ed:fe:9e:be:04: 0a:6e:f5:57:ef:fa:4a:be:c0:cf:51:a1:66:e4:c9: c5:af:c4:b9:d1:d8:75:d8:c9:5b:fb:c5:42:94:e5: 6e:4f:cc:cd:1d:c8:b2:a7:1d:87:09:a1:28:df:c9: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8D:63:BB:7F:63:FA:A3:F6:EC:AC:9B:72:4D:E5:0A:6A:9A:7D:9C X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XY1ju39j-qP27Kybck3lCmqafZw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.248.0/21 Signature Algorithm: sha256WithRSAEncryption 99:2d:90:6f:fe:5d:79:2a:e6:06:1a:f2:94:cb:9f:e3:f3:44: 33:3b:55:4e:68:9c:f8:b7:99:69:7e:4f:58:88:63:87:db:39: 45:21:0c:bf:80:f9:52:d1:49:c8:1d:8a:a0:9d:b0:13:43:da: 0f:21:8a:e3:49:75:6e:f0:53:8e:7c:c6:59:5a:de:74:a0:f4: fb:89:b5:d4:e2:e5:84:69:00:a6:15:d0:d4:a2:ac:56:c2:30: a3:62:bf:d7:d2:7a:87:6b:63:b8:d9:d4:09:b2:b5:3e:05:2e: 47:22:bd:36:59:02:a3:74:a5:93:01:38:40:89:19:66:10:c1: 62:82:f9:66:aa:04:bd:da:09:f5:d8:f9:99:42:d8:5a:21:68: be:27:22:91:86:0c:e8:bb:c6:8d:3d:61:21:ed:09:61:56:04: 75:ee:67:a5:7c:d3:2f:92:fb:51:67:a4:b9:62:9a:ee:e7:63: 58:2a:d2:12:b3:47:8d:34:f3:fd:47:3c:0c:a8:17:fb:dc:9e: 03:d3:d6:fd:8a:d0:84:67:25:35:68:b8:d8:ad:da:32:47:06: b1:3c:0e:69:ea:42:f2:85:eb:35:49:f8:5d:b5:47:27:2d:5c: 30:43:3b:a0:4b:c8:60:63:e7:32:50:14:36:5a:cc:66:2a:31: fd:3e:e8:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVEOEQ2M0JCN0Y2M0ZB QTNGNkVDQUM5QjcyNERFNTBBNkE5QTdEOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFuT1fNPpmJJfSDsBrKwPxY/meaGkzKXXYRBxTStkfAmJ2nP2e itQLO5zxAPFrNI+A4MsUK1VsA68s1auBn3SQhQdHwWaSj34SCHMiE2TNBCTEcI5N PmKvHsCsBWpbPTWveW73CwHYJzqO6wHHAXJij/M3Sy6xkfXQ0d5+2RN9eUKDj/F0 WOwq+vuaHb0Kd8od0N0Kb4BXQkV4LZrRcJwOBO45YEMfiPwY6H+41K1/Uy0uzJU7 FqKh9DUz07H6wGt8yt1SI+13YNyBb3bt/p6+BApu9Vfv+kq+wM9RoWbkycWvxLnR 2HXYyVv7xUKU5W5PzM0dyLKnHYcJoSjfyWDnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXY1ju39j+qP27Kybck3lCmqafZwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1hZMWp1MzlqLXFQMjdLeWJj azNsQ21xYWZady5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2vgwDQYJKoZIhvcNAQELBQADggEBAJktkG/+XXkq5gYa8pTLn+PzRDM7VU5onPi3 mWl+T1iIY4fbOUUhDL+A+VLRScgdiqCdsBND2g8hiuNJdW7wU458xlla3nSg9PuJ tdTi5YRpAKYV0NSirFbCMKNiv9fSeodrY7jZ1AmytT4FLkcivTZZAqN0pZMBOECJ GWYQwWKC+WaqBL3aCfXY+ZlC2FohaL4nIpGGDOi7xo09YSHtCWFWBHXuZ6V80y+S +1FnpLlimu7nY1gq0hKzR4008/1HPAyoF/vcngPT1v2K0IRnJTVouNit2jJHBrE8 DmnqQvKF6zVJ+F21RyctXDBDO6BLyGBj5zJQFDZazGYqMf0+6DA= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org