$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gc7Qy5HWX8Wxpeli9x1zTiu-xo4.roa File: gc7Qy5HWX8Wxpeli9x1zTiu-xo4.roa (raw, json) Hash identifier: NoNFlnylWKs8NGHoABgKSx+kvySh2n+ChFki2Zsl25Q= Subject key identifier: 81:CE:D0:CB:91:D6:5F:C5:B1:A5:E9:62:F7:1D:73:4E:2B:BE:C6:8E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D5D Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gc7Qy5HWX8Wxpeli9x1zTiu-xo4.roa Signing time: Fri 01 Sep 2023 10:14:43 +0000 ROA not before: Fri 01 Sep 2023 10:14:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7517 (0x1d5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=81CED0CB91D65FC5B1A5E962F71D734E2BBEC68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:44:66:af:49:53:34:a9:7a:3c:78:f0:45: ab:78:11:9e:17:11:49:78:c5:da:91:e7:51:6b:63: 00:f7:e6:db:af:04:04:ac:8b:cf:04:97:f7:d7:e3: c0:7f:20:a3:39:e3:54:25:71:4a:cb:4a:7b:7d:cc: 83:be:4e:4b:e8:de:5a:a3:67:a5:bb:2c:97:fe:4d: a5:d9:93:7f:32:95:1a:05:22:50:cd:21:80:00:03: 9e:39:6e:56:4f:e9:dc:1a:f6:e2:bf:ac:f7:30:38: 14:e8:5b:ce:a0:4e:ed:a3:3f:22:3f:03:b9:bb:8b: 1a:f0:89:08:1e:f1:f6:90:15:16:f6:f8:63:9a:b8: f3:d1:07:b0:e8:1d:8a:b0:fd:ff:c5:76:ab:6a:62: 74:12:19:23:db:94:52:38:e9:da:d0:47:22:6f:b9: 82:62:f5:25:3c:45:f8:49:3a:1b:45:7e:51:57:0d: fd:cd:6f:a5:f9:6e:91:ef:cb:a2:8b:2c:85:28:eb: 75:22:c7:b4:e8:32:74:41:3c:60:0d:0a:cf:c2:1f: 6a:14:35:d2:2b:44:9f:6a:dc:f0:f1:40:72:5a:f8: dc:b0:a8:6d:d7:87:c3:d5:53:89:0e:d1:58:5f:43: bf:10:56:c1:ba:4d:c8:68:04:c6:2a:f3:46:b0:fa: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CE:D0:CB:91:D6:5F:C5:B1:A5:E9:62:F7:1D:73:4E:2B:BE:C6:8E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gc7Qy5HWX8Wxpeli9x1zTiu-xo4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.140.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:64:c0:dc:12:de:ca:18:fe:3f:b7:84:6c:05:22:d7:fc:99: 8a:eb:66:e7:16:c8:76:48:5b:b4:23:1e:f7:cd:49:64:5f:e9: a5:39:10:9d:c3:df:4c:b6:3d:09:ce:f9:89:9c:24:22:5b:76: 41:10:92:c1:f4:8d:d1:9e:17:8d:17:80:b9:e7:ac:44:1a:70: 01:65:d1:2f:3d:79:c5:74:8a:46:7b:9a:53:73:69:1b:1c:1a: 18:9a:a6:87:25:95:94:d2:ea:2f:62:88:6a:fc:d6:a1:a3:71: 9c:3e:0c:ff:34:86:12:e7:89:06:91:f8:13:67:eb:44:64:37: 93:12:3b:7c:b2:06:16:d3:ff:88:fb:64:d9:1b:8a:2f:8c:74: fd:ca:06:81:4e:70:03:02:cc:89:58:e0:74:15:75:b8:63:38: 6f:9c:27:1c:01:ff:7d:ae:90:72:86:09:13:11:57:ed:db:e1: a8:cc:28:f6:d6:f5:ad:b3:e2:82:77:e3:d7:83:51:7e:38:85: d6:6d:c0:10:51:01:69:5e:63:ed:8d:ad:27:8d:dc:df:73:1c: 29:de:8a:c1:f1:e6:56:c5:31:6c:fc:aa:5d:4b:c7:71:ab:c6: a5:b4:5d:a3:ff:24:0f:9e:ef:bd:4a:36:ad:d8:e9:c4:69:78: 43:b5:bc:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgxQ0VEMENCOTFENjVG QzVCMUE1RTk2MkY3MUQ3MzRFMkJCRUM2OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVZkRmr0lTNKl6PHjwRat4EZ4XEUl4xdqR51FrYwD35tuvBASs i88El/fX48B/IKM541QlcUrLSnt9zIO+Tkvo3lqjZ6W7LJf+TaXZk38ylRoFIlDN IYAAA545blZP6dwa9uK/rPcwOBToW86gTu2jPyI/A7m7ixrwiQge8faQFRb2+GOa uPPRB7DoHYqw/f/FdqtqYnQSGSPblFI46drQRyJvuYJi9SU8RfhJOhtFflFXDf3N b6X5bpHvy6KLLIUo63Uix7ToMnRBPGANCs/CH2oUNdIrRJ9q3PDxQHJa+NywqG3X h8PVU4kO0VhfQ78QVsG6TchoBMYq80aw+jQNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgc7Qy5HWX8Wxpeli9x1zTiu+xo4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2djN1F5NUhXWDhXeHBlbGk5 eDF6VGl1LXhvNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 2owwDQYJKoZIhvcNAQELBQADggEBACtkwNwS3soY/j+3hGwFItf8mYrrZucWyHZI W7QjHvfNSWRf6aU5EJ3D30y2PQnO+YmcJCJbdkEQksH0jdGeF40XgLnnrEQacAFl 0S89ecV0ikZ7mlNzaRscGhiapocllZTS6i9iiGr81qGjcZw+DP80hhLniQaR+BNn 60RkN5MSO3yyBhbT/4j7ZNkbii+MdP3KBoFOcAMCzIlY4HQVdbhjOG+cJxwB/32u kHKGCRMRV+3b4ajMKPbW9a2z4oJ349eDUX44hdZtwBBRAWleY+2NrSeN3N9zHCne isHx5lbFMWz8ql1Lx3GrxqW0XaP/JA+e771KNq3Y6cRpeEO1vN0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org