$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zcmMtQOWvSeWxjEptPw0Isv_Pz4.roa File: zcmMtQOWvSeWxjEptPw0Isv_Pz4.roa (raw, json) Hash identifier: y8UM2BGeWayO1/OR1/3ISs0R8PaLfObvBgtOurS1t5E= Subject key identifier: CD:C9:8C:B5:03:96:BD:27:96:C6:31:29:B4:FC:34:22:CB:FF:3F:3E Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DD4 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zcmMtQOWvSeWxjEptPw0Isv_Pz4.roa Signing time: Fri 01 Sep 2023 10:15:20 +0000 ROA not before: Fri 01 Sep 2023 10:15:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 180.218.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7636 (0x1dd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CDC98CB50396BD2796C63129B4FC3422CBFF3F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:b1:63:fc:34:b2:0b:d1:1e:f1:ff:b8:ce: 87:28:06:1a:14:9b:b2:fe:d9:9c:f8:a5:36:3a:cd: 26:5a:46:ae:f5:99:eb:1e:f3:f1:e5:b2:c7:ce:1d: 18:16:ca:dd:e3:2c:1f:2a:df:44:a9:fe:9d:dd:1f: 89:e3:7c:f4:45:17:7c:cd:b5:f8:70:a5:de:e5:11: 06:18:5f:37:11:8c:c7:f7:ab:28:d9:ba:9d:7b:82: 5c:ea:71:22:52:98:1d:86:d9:9b:53:6a:00:dc:be: 39:8f:ce:f9:82:5b:37:44:62:1e:87:b6:8e:9e:d8: 5b:7e:b2:c2:d2:af:83:34:d7:00:0a:d3:42:44:13: af:1f:c6:08:f9:cb:31:27:69:b5:cb:d9:0d:dd:32: 1f:c9:38:67:03:06:96:e3:c7:67:3a:c1:b2:82:61: 06:5c:a5:ca:84:9c:2e:4a:4a:1a:6b:71:67:56:2e: 8c:ea:b9:5a:86:4e:5e:76:6c:47:bf:a4:c9:19:c4: 65:70:50:7d:ad:30:fc:7f:6c:69:83:24:13:d1:91: fb:8d:ca:7a:81:0f:48:69:3f:1b:b5:e0:ec:29:1f: 9c:48:4a:58:b5:f0:43:09:b0:7d:cd:03:d0:88:0e: 3a:74:94:a3:18:cc:2f:39:cf:ad:20:8a:50:89:3e: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C9:8C:B5:03:96:BD:27:96:C6:31:29:B4:FC:34:22:CB:FF:3F:3E X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zcmMtQOWvSeWxjEptPw0Isv_Pz4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.218.192.0/18 Signature Algorithm: sha256WithRSAEncryption 90:b2:ea:67:07:2e:d3:f6:e4:ac:91:b8:45:cd:10:14:6f:2c: e6:af:ff:f0:49:0f:10:57:de:f8:66:c5:d0:bb:3f:d0:2a:9e: 80:22:f2:2c:27:8e:82:01:3d:8c:ef:bd:11:ff:a0:ea:32:70: 17:b7:1c:a8:64:d1:04:17:c8:57:5d:12:6c:0b:01:2e:a4:e9: f5:cd:0a:9e:51:90:de:a8:ab:e7:fc:c5:82:be:84:01:ad:9c: d6:e0:bf:24:7e:05:a7:ff:47:e1:7c:d2:9c:d7:c4:ae:29:fd: 82:e5:00:30:bd:0e:aa:22:bd:a1:a5:71:70:af:c4:f5:cb:ca: ed:6c:94:26:2d:24:77:df:4d:50:5d:da:d1:88:df:6c:ee:35: 57:c2:3f:ab:0c:31:d3:5b:ad:da:a2:4e:4e:7d:79:63:8e:4a: 3e:78:90:90:e3:4d:e0:20:fe:ca:a2:f3:8e:21:7f:25:a9:b4: cc:be:f3:4c:02:63:48:41:97:cc:3a:3f:40:8e:32:49:63:19: 82:ca:ba:a2:0d:97:74:0c:61:75:29:33:ec:61:59:e2:25:0e: 98:ee:da:4e:7a:d6:8c:5d:69:f0:ee:83:f5:c5:a5:df:17:d7: 89:75:09:a3:00:b9:01:1e:28:e0:5f:c9:01:b8:e1:ed:10:d5: 45:11:e2:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENEQzk4Q0I1MDM5NkJE Mjc5NkM2MzEyOUI0RkMzNDIyQ0JGRjNGM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDm7Fj/DSyC9Ee8f+4zocoBhoUm7L+2Zz4pTY6zSZaRq71mese 8/HlssfOHRgWyt3jLB8q30Sp/p3dH4njfPRFF3zNtfhwpd7lEQYYXzcRjMf3qyjZ up17glzqcSJSmB2G2ZtTagDcvjmPzvmCWzdEYh6Hto6e2Ft+ssLSr4M01wAK00JE E68fxgj5yzEnabXL2Q3dMh/JOGcDBpbjx2c6wbKCYQZcpcqEnC5KShprcWdWLozq uVqGTl52bEe/pMkZxGVwUH2tMPx/bGmDJBPRkfuNynqBD0hpPxu14OwpH5xISli1 8EMJsH3NA9CIDjp0lKMYzC85z60gilCJPkGPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzcmMtQOWvSeWxjEptPw0Isv/Pz4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3pjbU10UU9XdlNlV3hqRXB0 UHcwSXN2X1B6NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0 2sAwDQYJKoZIhvcNAQELBQADggEBAJCy6mcHLtP25KyRuEXNEBRvLOav//BJDxBX 3vhmxdC7P9AqnoAi8iwnjoIBPYzvvRH/oOoycBe3HKhk0QQXyFddEmwLAS6k6fXN Cp5RkN6oq+f8xYK+hAGtnNbgvyR+Baf/R+F80pzXxK4p/YLlADC9DqoivaGlcXCv xPXLyu1slCYtJHffTVBd2tGI32zuNVfCP6sMMdNbrdqiTk59eWOOSj54kJDjTeAg /sqi844hfyWptMy+80wCY0hBl8w6P0COMkljGYLKuqINl3QMYXUpM+xhWeIlDpju 2k561oxdafDug/XFpd8X14l1CaMAuQEeKOBfyQG44e0Q1UUR4sI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org