$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aHqD1b3GZgVe-E3kt1TsqomYvds.roa File: aHqD1b3GZgVe-E3kt1TsqomYvds.roa (raw, json) Hash identifier: BYML0WadhrxfGRJj0JcxvGiR1WJHRV00qEhzawL8jxU= Subject key identifier: 68:7A:83:D5:BD:C6:66:05:5E:F8:4D:E4:B7:54:EC:AA:89:98:BD:DB Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DD0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aHqD1b3GZgVe-E3kt1TsqomYvds.roa Signing time: Fri 01 Sep 2023 10:15:19 +0000 ROA not before: Fri 01 Sep 2023 10:15:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7632 (0x1dd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=687A83D5BDC666055EF84DE4B754ECAA8998BDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:10:a6:fa:03:03:f4:3c:60:30:37:82:58: fe:a8:4a:e3:af:e3:c0:fe:6e:e0:c9:0b:ad:c6:72: 7d:27:e3:52:29:0f:c4:f9:74:9e:52:92:26:97:af: ea:72:0c:10:be:24:79:2c:8b:3b:ca:56:d7:cb:b1: 21:03:8f:8b:49:f3:1a:a7:dd:3d:ee:ee:c0:c9:98: 9b:9b:f1:5b:9c:ee:66:5c:c9:cc:7f:b5:19:b1:21: 81:cd:81:9e:0d:45:dd:b7:e4:ab:b7:19:5b:fd:a1: 46:92:95:60:0e:8c:4b:66:1b:a1:fa:9b:b5:0d:fc: 92:b1:55:8d:c5:59:94:cd:42:50:ab:88:82:b2:46: 92:70:23:95:2e:3f:fb:b3:68:4a:a3:76:11:ce:54: b7:71:d6:62:22:1f:60:5d:62:42:8a:32:57:a3:09: da:24:5c:4e:f0:ad:17:09:9f:b2:fa:af:ec:d2:70: 93:59:7e:f6:b6:f5:6a:f6:11:a3:6d:06:6e:c9:aa: b6:6d:6e:09:b4:68:d3:62:b1:fe:f3:9a:87:2f:79: 8d:d6:03:16:4d:62:1c:fe:6e:0a:39:c2:19:af:db: 1c:ec:f0:bc:20:a8:0f:18:dc:56:e8:c6:50:aa:93: 6f:be:2d:49:09:43:b7:56:f4:35:ee:60:0c:77:6a: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7A:83:D5:BD:C6:66:05:5E:F8:4D:E4:B7:54:EC:AA:89:98:BD:DB X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aHqD1b3GZgVe-E3kt1TsqomYvds.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.188.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:cf:4e:39:15:cf:4d:79:e3:70:a0:91:f2:3c:70:f3:c8:b2: 4c:a0:58:b9:08:49:61:72:9d:6c:74:57:f3:f9:f6:0f:25:9f: 27:6e:5a:22:68:6d:06:15:b6:f7:7d:0b:db:d1:70:b0:c9:07: 0b:86:7e:28:1b:c9:ae:d8:44:c2:b7:1c:b0:43:2e:d3:91:1e: b5:d2:80:e5:2b:ba:fe:4d:07:63:74:f8:3a:c2:21:71:64:cd: 99:b6:d2:3e:b0:b9:f5:54:01:12:25:89:58:ac:98:ad:79:31: dd:49:53:8f:aa:aa:cb:be:c7:6d:23:ed:12:81:dd:41:cb:de: 4b:dd:51:da:05:08:b5:07:ff:b2:b0:52:15:1a:fa:0d:f0:28: b8:1f:ae:78:4b:bc:3a:0f:04:62:bd:c1:d4:fa:36:1e:cf:0f: 20:36:d2:5d:6c:d0:7f:e6:c7:0c:74:1f:da:c1:b7:0b:a1:cc: 72:81:68:48:a8:ac:dd:47:65:70:e5:94:b3:db:5d:51:2a:dc: db:88:aa:df:88:15:f3:78:f9:b7:93:a7:7c:fd:b7:c9:0f:64: b0:21:e1:46:44:a5:b9:35:56:2d:fc:eb:2e:0b:5b:7a:6c:fd: f1:ce:3c:ef:05:5c:40:60:d7:5b:79:ab:62:31:64:a6:fc:37: 0c:64:8e:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY4N0E4M0Q1QkRDNjY2 MDU1RUY4NERFNEI3NTRFQ0FBODk5OEJEREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMTBCm+gMD9DxgMDeCWP6oSuOv48D+buDJC63Gcn0n41IpD8T5 dJ5SkiaXr+pyDBC+JHksizvKVtfLsSEDj4tJ8xqn3T3u7sDJmJub8Vuc7mZcycx/ tRmxIYHNgZ4NRd235Ku3GVv9oUaSlWAOjEtmG6H6m7UN/JKxVY3FWZTNQlCriIKy RpJwI5UuP/uzaEqjdhHOVLdx1mIiH2BdYkKKMlejCdokXE7wrRcJn7L6r+zScJNZ fva29Wr2EaNtBm7JqrZtbgm0aNNisf7zmocveY3WAxZNYhz+bgo5whmv2xzs8Lwg qA8Y3FboxlCqk2++LUkJQ7dW9DXuYAx3ajYZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaHqD1b3GZgVe+E3kt1TsqomYvdswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2FIcUQxYjNHWmdWZS1FM2t0 MVRzcW9tWXZkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2rwwDQYJKoZIhvcNAQELBQADggEBAB/PTjkVz01543CgkfI8cPPIskygWLkISWFy nWx0V/P59g8lnyduWiJobQYVtvd9C9vRcLDJBwuGfigbya7YRMK3HLBDLtORHrXS gOUruv5NB2N0+DrCIXFkzZm20j6wufVUARIliVismK15Md1JU4+qqsu+x20j7RKB 3UHL3kvdUdoFCLUH/7KwUhUa+g3wKLgfrnhLvDoPBGK9wdT6Nh7PDyA20l1s0H/m xwx0H9rBtwuhzHKBaEiorN1HZXDllLPbXVEq3NuIqt+IFfN4+beTp3z9t8kPZLAh 4UZEpbk1Vi386y4LW3ps/fHOPO8FXEBg11t5q2IxZKb8NwxkjjQ= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:49 2024 by rpki-client on console-fra.rpki-client.org