$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/siPYvxGrVTvB2yzxTVkRt7qm9bw.roa File: siPYvxGrVTvB2yzxTVkRt7qm9bw.roa (raw, json) Hash identifier: NzYkjhypHsxM9h8yXKq1cUekYG+zDe510SMmfyUCPwA= Subject key identifier: B2:23:D8:BF:11:AB:55:3B:C1:DB:2C:F1:4D:59:11:B7:BA:A6:F5:BC Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1D64 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/siPYvxGrVTvB2yzxTVkRt7qm9bw.roa Signing time: Fri 01 Sep 2023 10:14:45 +0000 ROA not before: Fri 01 Sep 2023 10:14:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7524 (0x1d64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:14:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B223D8BF11AB553BC1DB2CF14D5911B7BAA6F5BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:e5:28:9f:5f:3d:85:84:58:22:ab:9f:0d: e5:3e:67:df:0d:0e:17:28:04:88:ac:7a:ac:4a:7d: 01:29:65:3b:4a:d2:04:81:00:75:f0:cc:30:bb:a7: b5:e5:a2:d0:90:2e:e8:97:00:a6:62:bd:47:38:f7: d0:10:7d:03:38:d2:2f:37:6f:7f:ac:6e:de:ec:5d: 89:7a:cc:4b:0b:4e:16:71:9e:eb:bb:c5:0c:89:d2: ee:e7:6a:86:38:09:33:50:51:36:6e:b1:d6:3a:37: 2e:98:de:c6:ed:70:5c:1f:03:d2:fc:3e:14:aa:14: b7:92:63:83:51:99:40:23:1f:f9:e9:90:9c:fb:97: fb:de:8e:d6:62:b2:ac:5c:94:47:9e:bb:39:81:a1: e0:ef:8e:c2:f5:db:68:45:0e:05:58:40:a8:dc:ca: 9a:29:d0:aa:9e:5b:e0:cb:96:8d:5b:77:a0:03:ea: 4b:66:92:ec:0f:ab:a6:90:e8:cc:78:8f:7a:ea:4b: db:88:72:74:31:25:2c:f5:ac:93:8f:76:52:f7:c3: ab:df:02:a6:25:cd:a5:7e:7f:fd:7f:d8:57:ee:31: 9e:55:e8:1a:b3:6e:70:19:ab:f9:1f:5c:41:c1:be: 04:bd:82:3f:23:64:43:ca:74:7b:32:79:17:37:a5: e4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:23:D8:BF:11:AB:55:3B:C1:DB:2C:F1:4D:59:11:B7:BA:A6:F5:BC X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/siPYvxGrVTvB2yzxTVkRt7qm9bw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.208.0/21 Signature Algorithm: sha256WithRSAEncryption 01:22:f6:02:ae:1f:dc:9d:ba:ec:33:b5:68:4f:0f:24:56:ac: 7b:a6:17:17:06:02:7b:9b:c8:52:34:d0:f4:8e:0d:c2:bc:cf: ed:61:8b:16:05:23:45:82:c0:78:58:c9:12:75:79:fe:f9:83: d2:fb:2b:aa:b9:9d:9f:29:46:2b:f4:8f:d0:b2:df:01:f4:3b: c9:64:99:02:96:0c:a8:41:27:94:5f:b8:66:68:64:62:a9:8f: f2:59:5a:90:51:97:4e:73:d5:3e:c2:91:96:e5:20:9e:e0:f7: 81:8f:d4:94:33:dd:64:2d:5c:a7:43:e4:33:bd:89:bc:61:e4: 66:a5:d9:94:62:10:19:11:3d:6a:43:65:5b:c1:f5:a7:dc:a6: 78:a0:ed:96:d6:96:b9:84:bb:f9:b5:ec:c7:42:53:26:25:84: 8d:9a:79:89:41:a7:70:7f:4f:2b:93:47:65:4e:6d:f3:00:3b: 4d:67:15:29:20:dc:74:3f:42:6c:d0:d9:b4:80:0b:ec:b8:65: f5:3a:a6:59:ea:81:a4:c1:81:6e:37:68:f8:99:0d:a1:c9:ce: 8b:0b:d6:7f:15:76:91:2f:b1:f2:5d:97:55:63:1c:95:6b:7d: f6:41:cb:76:a0:56:c7:71:de:00:68:56:69:c2:b3:92:f0:8b: c2:90:a8:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIyMjNEOEJGMTFBQjU1 M0JDMURCMkNGMTRENTkxMUI3QkFBNkY1QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvjOUon189hYRYIqufDeU+Z98NDhcoBIiseqxKfQEpZTtK0gSB AHXwzDC7p7XlotCQLuiXAKZivUc499AQfQM40i83b3+sbt7sXYl6zEsLThZxnuu7 xQyJ0u7naoY4CTNQUTZusdY6Ny6Y3sbtcFwfA9L8PhSqFLeSY4NRmUAjH/npkJz7 l/vejtZisqxclEeeuzmBoeDvjsL122hFDgVYQKjcypop0KqeW+DLlo1bd6AD6ktm kuwPq6aQ6Mx4j3rqS9uIcnQxJSz1rJOPdlL3w6vfAqYlzaV+f/1/2FfuMZ5V6Bqz bnAZq/kfXEHBvgS9gj8jZEPKdHsyeRc3peQFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsiPYvxGrVTvB2yzxTVkRt7qm9bwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NpUFl2eEdyVlR2QjJ5enhU VmtSdDdxbTlidy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 2tAwDQYJKoZIhvcNAQELBQADggEBAAEi9gKuH9yduuwztWhPDyRWrHumFxcGAnub yFI00PSODcK8z+1hixYFI0WCwHhYyRJ1ef75g9L7K6q5nZ8pRiv0j9Cy3wH0O8lk mQKWDKhBJ5RfuGZoZGKpj/JZWpBRl05z1T7CkZblIJ7g94GP1JQz3WQtXKdD5DO9 ibxh5Gal2ZRiEBkRPWpDZVvB9afcpnig7ZbWlrmEu/m17MdCUyYlhI2aeYlBp3B/ TyuTR2VObfMAO01nFSkg3HQ/QmzQ2bSAC+y4ZfU6plnqgaTBgW43aPiZDaHJzosL 1n8VdpEvsfJdl1VjHJVrffZBy3agVsdx3gBoVmnCs5Lwi8KQqPs= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org