$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/84EEaopxe2__hG7wvuURocZrHOM.roa File: 84EEaopxe2__hG7wvuURocZrHOM.roa (raw, json) Hash identifier: YGQ2MdLbohHVwQdd576HacuJ28cU77qHgOUMKrC/HzY= Subject key identifier: F3:81:04:6A:8A:71:7B:6F:FF:84:6E:F0:BE:E5:11:A1:C6:6B:1C:E3 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 0441 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/84EEaopxe2__hG7wvuURocZrHOM.roa Signing time: Fri 01 Sep 2023 08:03:46 +0000 ROA not before: Fri 01 Sep 2023 08:03:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 60614 IP address blocks: 103.156.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 11:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Sep 1 08:03:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F381046A8A717B6FFF846EF0BEE511A1C66B1CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:47:da:a0:3c:0a:4d:92:76:50:68:ec:1b: 3b:9e:89:f1:21:56:d5:e4:9e:65:e3:7e:a2:04:52: d3:5f:26:a8:ca:80:e3:39:d4:93:36:1e:3c:18:b6: 2b:2e:2a:9a:aa:fa:79:13:cf:49:be:c8:3d:d3:d9: 5b:1c:fa:21:97:11:96:48:dc:ee:e6:d7:c7:0e:6e: 64:85:c8:79:7a:dd:13:c5:4c:e2:1d:dd:8f:84:e1: d3:a5:56:47:8f:d7:3f:d0:03:02:23:dc:f6:b6:92: 38:6e:45:f0:0f:a2:4a:b9:3d:f3:97:83:9c:b9:96: 68:e8:a1:89:3f:8f:62:5e:0c:1e:27:28:a5:a6:53: 00:77:31:f5:05:45:0b:ff:67:2f:ad:db:c0:34:07: 65:a9:cb:37:6e:76:db:cf:d5:a1:96:54:d0:13:31: ca:84:1d:cd:17:26:17:e0:65:ee:aa:78:0d:76:0e: 2d:aa:f6:f3:04:eb:e6:b6:1c:36:4c:d7:d5:d7:b8: 88:78:b9:25:6d:96:59:96:cc:d7:03:4f:84:34:66: b6:ab:5d:b1:56:46:68:21:01:f4:65:2f:2f:c6:44: 5d:b4:ef:2d:09:59:8a:da:57:4a:f0:66:57:fc:37: ec:76:84:ba:d2:ea:26:6c:ce:8e:20:27:79:cb:0f: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:04:6A:8A:71:7B:6F:FF:84:6E:F0:BE:E5:11:A1:C6:6B:1C:E3 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/84EEaopxe2__hG7wvuURocZrHOM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.185.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:15:bf:4a:8b:ad:06:3f:e3:ce:7e:ec:ad:dd:11:5d:56:ce: 38:b5:57:1f:94:2d:ed:4c:7e:a3:1d:62:2f:8c:30:54:de:82: a0:61:3d:46:b4:99:84:62:fe:05:d7:12:8e:6f:a1:1a:3f:86: 76:36:01:d9:f6:d9:c8:1c:fa:ec:2e:0c:c6:1f:fe:51:68:dc: de:80:23:e8:27:0e:25:d4:7c:53:34:7e:0b:14:72:73:42:26: 13:59:5c:03:cf:d4:dd:45:49:c2:7d:16:76:4a:a4:f5:84:cf: f8:da:24:c7:a6:c6:a9:68:5d:9d:48:2b:d7:4a:c0:6b:b7:8b: 44:d5:10:25:9f:65:6c:ef:eb:86:61:dd:b4:b5:a4:61:f3:00: 4b:ee:a6:93:01:77:00:4b:1a:5d:34:d2:ec:d1:58:2f:d0:b9: 92:ed:83:db:ef:0c:9a:19:d9:1f:a0:d7:4e:15:7e:be:d6:b5: c6:25:20:6c:03:f2:f3:4c:dd:c8:7b:68:82:70:39:33:3c:e5: e7:9e:9a:9e:8c:16:02:c5:a0:0d:ed:e2:78:87:18:67:7f:55: 8e:2e:8d:e4:2e:50:40:49:c8:11:8e:22:8a:6e:fc:43:ac:0f: c5:fc:50:08:d5:cb:77:aa:b1:42:b5:13:69:34:1c:b1:bb:0b: 46:14:e8:3e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw ODAzNDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYzODEwNDZBOEE3MTdC NkZGRjg0NkVGMEJFRTUxMUExQzY2QjFDRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7BEfaoDwKTZJ2UGjsGzueifEhVtXknmXjfqIEUtNfJqjKgOM5 1JM2HjwYtisuKpqq+nkTz0m+yD3T2Vsc+iGXEZZI3O7m18cObmSFyHl63RPFTOId 3Y+E4dOlVkeP1z/QAwIj3Pa2kjhuRfAPokq5PfOXg5y5lmjooYk/j2JeDB4nKKWm UwB3MfUFRQv/Zy+t28A0B2WpyzdudtvP1aGWVNATMcqEHc0XJhfgZe6qeA12Di2q 9vME6+a2HDZM19XXuIh4uSVtllmWzNcDT4Q0ZrarXbFWRmghAfRlLy/GRF207y0J WYraV0rwZlf8N+x2hLrS6iZszo4gJ3nLDwyvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU84EEaopxe2//hG7wvuURocZrHOMwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvODRFRWFvcHhlMl9faEc3 d3Z1VVJvY1pySE9NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuTANBgkqhkiG9w0BAQsFAAOCAQEAmhW/SoutBj/jzn7srd0RXVbOOLVXH5Qt 7Ux+ox1iL4wwVN6CoGE9RrSZhGL+BdcSjm+hGj+GdjYB2fbZyBz67C4Mxh/+UWjc 3oAj6CcOJdR8UzR+CxRyc0ImE1lcA8/U3UVJwn0Wdkqk9YTP+Nokx6bGqWhdnUgr 10rAa7eLRNUQJZ9lbO/rhmHdtLWkYfMAS+6mkwF3AEsaXTTS7NFYL9C5ku2D2+8M mhnZH6DXThV+vta1xiUgbAPy80zdyHtognA5Mzzl556anowWAsWgDe3ieIcYZ39V ji6N5C5QQEnIEY4iim78Q6wPxfxQCNXLd6qxQrUTaTQcsbsLRhToPg== -----END CERTIFICATE-----Generated at Sun May 5 04:44:55 2024 by rpki-client on console-ams.rpki-client.org