$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6IDRAnVyMv3peke6UBuYf0z0sU.roa File: d6IDRAnVyMv3peke6UBuYf0z0sU.roa (raw, json) Hash identifier: 0B995CjgDdqyP5gtwQ4Dhv0Lyy+Dsj5gYBYD/ZrzV84= Subject key identifier: 77:A2:03:44:09:D5:C8:CB:F7:A5:E9:1E:E9:40:6E:61:FD:33:D2:C5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DD1 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6IDRAnVyMv3peke6UBuYf0z0sU.roa Signing time: Fri 01 Sep 2023 10:15:19 +0000 ROA not before: Fri 01 Sep 2023 10:15:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7633 (0x1dd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=77A2034409D5C8CBF7A5E91EE9406E61FD33D2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:5c:97:91:c7:0a:f2:2c:2e:19:cb:35:f9: 5c:5a:85:19:db:c9:f4:2c:4c:b2:22:4c:70:f6:37: ab:3f:67:b4:50:06:f7:56:28:5e:13:51:a4:4d:94: 9a:08:2a:61:d5:46:57:c3:fd:c4:b7:46:83:7c:ae: 6c:0d:95:99:dc:89:fd:a1:41:22:86:88:e2:96:10: eb:77:3c:50:8e:2b:3d:1b:f7:a0:9c:0b:63:40:82: 7a:6b:f4:ff:31:82:1b:a1:f1:00:de:eb:dc:22:51: 1e:f8:85:eb:79:d3:c6:6c:20:9a:1e:aa:79:e8:dc: 0f:66:9e:c8:86:a6:2b:a8:db:4c:d6:3e:d7:0b:81: 76:9f:6c:44:46:20:c1:0d:4b:cf:8d:75:8d:39:f9: 59:73:46:a7:7c:b7:e6:20:41:e5:6b:03:db:d8:76: 00:41:eb:65:8f:32:a3:5e:58:62:1a:56:45:de:79: 3e:08:35:9d:29:43:9f:62:67:50:43:15:f5:bc:d0: be:a5:9b:0c:59:d1:a2:ff:4f:1c:be:d8:b3:2c:01: fb:e0:92:c0:78:25:b0:7d:9b:00:cf:61:12:59:4f: f3:b8:33:3a:b1:58:8e:67:20:2b:13:f9:b1:e3:5b: 3a:84:c8:73:ad:41:88:eb:80:bb:c6:7f:f7:47:21: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A2:03:44:09:D5:C8:CB:F7:A5:E9:1E:E9:40:6E:61:FD:33:D2:C5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6IDRAnVyMv3peke6UBuYf0z0sU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.172.0/22 Signature Algorithm: sha256WithRSAEncryption 66:29:2c:eb:e6:24:7c:bf:a3:d5:7e:36:5b:89:5a:ee:2e:65: 4b:09:da:2a:5a:0e:ad:35:b1:c6:b1:e8:5a:b5:a5:05:76:00: 69:db:bb:e6:48:99:49:38:35:5e:7b:63:93:e4:5e:73:bb:3d: fb:4f:91:f9:37:cd:5a:6a:4f:e4:77:ce:4e:1e:27:f6:59:01: 1e:96:56:2d:30:46:f9:85:74:94:2c:dd:eb:43:3a:99:c9:44: 9f:2e:74:33:7b:70:33:06:2b:e0:ab:69:38:b5:d8:5b:09:8b: 3c:86:79:2e:3e:00:ac:bd:cc:76:3c:f5:ba:7f:35:b8:eb:1c: 89:7b:3d:92:38:66:ab:27:f4:fe:79:9a:52:2b:d1:2f:15:4c: db:df:ef:d6:89:b8:45:32:96:35:78:6f:05:ae:0d:04:6e:93: 17:d2:23:b9:fa:b5:ef:4b:ec:ec:87:3b:72:0b:91:2f:3c:22: 29:71:37:46:dd:c7:5a:8d:d3:8b:1f:56:1f:70:53:a7:17:94: 35:bf:43:b5:08:64:94:06:cc:11:59:64:61:22:70:b2:81:98: e3:28:e9:09:d9:2b:64:ce:37:12:bf:19:4c:83:b3:49:01:fc: a7:b2:94:bb:34:51:d0:17:67:05:d1:ba:13:1c:0e:38:a0:cb: 93:ac:53:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3QTIwMzQ0MDlENUM4 Q0JGN0E1RTkxRUU5NDA2RTYxRkQzM0QyQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEH1yXkccK8iwuGcs1+VxahRnbyfQsTLIiTHD2N6s/Z7RQBvdW KF4TUaRNlJoIKmHVRlfD/cS3RoN8rmwNlZncif2hQSKGiOKWEOt3PFCOKz0b96Cc C2NAgnpr9P8xghuh8QDe69wiUR74het508ZsIJoeqnno3A9mnsiGpiuo20zWPtcL gXafbERGIMENS8+NdY05+VlzRqd8t+YgQeVrA9vYdgBB62WPMqNeWGIaVkXeeT4I NZ0pQ59iZ1BDFfW80L6lmwxZ0aL/Txy+2LMsAfvgksB4JbB9mwDPYRJZT/O4Mzqx WI5nICsT+bHjWzqEyHOtQYjrgLvGf/dHIcPVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd6IDRAnVyMv3peke6UBuYf0z0sUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2Q2SURSQW5WeU12M3Bla2U2 VUJ1WWYwejBzVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 2qwwDQYJKoZIhvcNAQELBQADggEBAGYpLOvmJHy/o9V+NluJWu4uZUsJ2ipaDq01 scax6Fq1pQV2AGnbu+ZImUk4NV57Y5PkXnO7PftPkfk3zVpqT+R3zk4eJ/ZZAR6W Vi0wRvmFdJQs3etDOpnJRJ8udDN7cDMGK+CraTi12FsJizyGeS4+AKy9zHY89bp/ NbjrHIl7PZI4Zqsn9P55mlIr0S8VTNvf79aJuEUyljV4bwWuDQRukxfSI7n6te9L 7OyHO3ILkS88IilxN0bdx1qN04sfVh9wU6cXlDW/Q7UIZJQGzBFZZGEicLKBmOMo 6QnZK2TONxK/GUyDs0kB/KeylLs0UdAXZwXRuhMcDjigy5OsU4k= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org