$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgdgCShwtTGQdHwGeu5f7wyniKg.roa File: sgdgCShwtTGQdHwGeu5f7wyniKg.roa (raw, json) Hash identifier: DCU+cobesjLteZa7UxKek8tiCxbgNnrZtW/U6ak/+2s= Subject key identifier: B2:07:60:09:28:70:B5:31:90:74:7C:06:7A:EE:5F:EF:0C:A7:88:A8 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1E8C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgdgCShwtTGQdHwGeu5f7wyniKg.roa Signing time: Fri 01 Sep 2023 10:16:11 +0000 ROA not before: Fri 01 Sep 2023 10:16:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7820 (0x1e8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B20760092870B53190747C067AEE5FEF0CA788A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:de:f2:21:4f:17:a4:49:b3:f5:35:9b:0c: 88:d7:d6:51:85:d2:96:00:95:18:18:79:53:4e:2c: f7:58:05:4d:3f:1d:08:9b:a8:09:44:ad:ed:bb:bd: ec:d2:7f:a8:c1:6b:5c:b1:7a:15:11:5f:59:b1:3a: 3b:f0:31:58:65:2b:b1:1b:3f:12:5b:be:0e:a3:e5: bc:91:8d:25:a1:69:c8:0f:be:2f:89:ba:69:77:10: 68:9f:2f:b4:a2:5a:85:7a:4f:b0:f1:15:eb:8c:b1: 28:f0:87:21:f1:01:76:21:97:b9:35:34:af:46:7e: 93:5d:d0:91:ff:93:d1:7b:e7:52:77:59:4f:a9:3d: 57:58:28:2f:68:e7:93:a1:25:15:8c:35:ce:a0:70: 6a:86:48:ea:af:39:b9:e1:b6:53:55:1e:18:03:f9: 6d:b4:18:5a:e2:5f:ec:82:9a:68:aa:84:57:54:40: 9b:c2:21:94:33:32:77:b8:3f:bd:ad:cf:b7:f7:fe: 8c:36:df:fc:5d:3f:01:08:5d:39:ef:bd:36:8f:00: f6:03:3d:f7:40:37:44:9a:ca:5e:b4:21:42:d3:50: bc:f4:8f:34:7e:6e:78:bc:e1:83:a4:19:87:3f:7a: c8:08:19:ad:a9:c0:3f:17:89:44:ab:e7:2d:bd:1a: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:07:60:09:28:70:B5:31:90:74:7C:06:7A:EE:5F:EF:0C:A7:88:A8 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgdgCShwtTGQdHwGeu5f7wyniKg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.144.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:2a:3c:2a:fb:5f:f4:0e:e3:8b:a3:67:8e:31:d3:75:19:58: b0:19:a3:71:41:e4:fa:1a:0a:00:0e:c8:a6:35:72:40:5f:0d: e2:25:9b:36:25:6c:fc:7e:49:9a:12:66:db:97:ef:63:5b:89: 8a:0d:39:3b:a9:31:a1:4c:8c:72:f7:86:fd:50:6f:5c:c8:31: b2:7b:15:0f:69:ec:1b:d6:71:bb:52:35:02:ce:4b:ab:89:bf: fb:d7:dd:43:86:4b:70:32:65:e5:e1:12:d8:59:ca:0e:42:e3: 20:89:19:24:c0:ef:8c:ed:30:12:bf:b2:8c:82:e5:34:92:77: 7c:fc:11:d6:ee:db:65:23:ac:1e:fc:06:e7:94:89:81:6f:5c: f9:7f:89:7a:0a:29:d7:2e:71:a9:80:e9:3a:f5:a3:a1:4a:91: 13:1b:a1:97:82:cc:80:4d:1c:a5:a8:48:89:92:c1:bf:64:9e: 63:4f:f2:7d:fb:f3:05:5c:ef:d4:ca:b7:ca:61:62:fd:61:7b: 38:af:50:b9:e2:4f:52:73:c1:52:a4:5e:a8:4c:69:18:fd:d4: 7b:38:08:6c:24:3f:9a:82:62:4c:d4:0a:01:84:5d:ad:bb:14: 70:c0:47:26:35:ea:5b:9f:70:7d:ef:37:c0:7c:07:ef:90:68: ef:9b:44:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIyMDc2MDA5Mjg3MEI1 MzE5MDc0N0MwNjdBRUU1RkVGMENBNzg4QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClzN7yIU8XpEmz9TWbDIjX1lGF0pYAlRgYeVNOLPdYBU0/HQib qAlEre27vezSf6jBa1yxehURX1mxOjvwMVhlK7EbPxJbvg6j5byRjSWhacgPvi+J uml3EGifL7SiWoV6T7DxFeuMsSjwhyHxAXYhl7k1NK9GfpNd0JH/k9F751J3WU+p PVdYKC9o55OhJRWMNc6gcGqGSOqvObnhtlNVHhgD+W20GFriX+yCmmiqhFdUQJvC IZQzMne4P72tz7f3/ow23/xdPwEIXTnvvTaPAPYDPfdAN0Sayl60IULTULz0jzR+ bni84YOkGYc/esgIGa2pwD8XiUSr5y29GslVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsgdgCShwtTGQdHwGeu5f7wyniKgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NnZGdDU2h3dFRHUWRId0dl dTVmN3d5bmlLZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2pAwDQYJKoZIhvcNAQELBQADggEBAI8qPCr7X/QO44ujZ44x03UZWLAZo3FB5Poa CgAOyKY1ckBfDeIlmzYlbPx+SZoSZtuX72NbiYoNOTupMaFMjHL3hv1Qb1zIMbJ7 FQ9p7BvWcbtSNQLOS6uJv/vX3UOGS3AyZeXhEthZyg5C4yCJGSTA74ztMBK/soyC 5TSSd3z8Edbu22UjrB78BueUiYFvXPl/iXoKKdcucamA6Tr1o6FKkRMboZeCzIBN HKWoSImSwb9knmNP8n378wVc79TKt8phYv1hezivULniT1JzwVKkXqhMaRj91Hs4 CGwkP5qCYkzUCgGEXa27FHDARyY16lufcH3vN8B8B++QaO+bRKQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org