$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa File: HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa (raw, json) Hash identifier: Ioiz4UMq+GMcrxazBGtooUBntgDcRdONkmSj3U8lsLE= Subject key identifier: 1D:A1:03:21:07:F1:DF:45:A4:E8:10:7E:1C:4E:E0:B5:CF:9E:EF:F7 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 0442 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa Signing time: Fri 01 Sep 2023 08:03:47 +0000 ROA not before: Fri 01 Sep 2023 08:03:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 41255 IP address blocks: 103.156.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 03:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Sep 1 08:03:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1DA1032107F1DF45A4E8107E1C4EE0B5CF9EEFF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5b:1c:bc:36:2a:42:52:ec:48:ee:50:8e:53: fa:99:83:89:c8:76:16:59:8c:fa:19:58:47:99:e4: 0e:a3:04:51:a5:9b:3f:db:16:c5:e0:ad:b2:40:d2: 6f:be:a2:fb:e8:00:a0:47:20:df:d1:22:96:04:10: ff:c4:66:1e:e2:01:a4:ba:c0:57:f4:9b:40:23:88: 16:9b:f7:50:7b:11:b5:1a:c9:15:e2:66:0a:06:47: 2b:4e:ac:32:50:8a:65:5c:0f:e0:6e:a3:5c:b3:47: b4:80:c6:7a:64:50:b8:5d:4a:c0:ae:c0:7e:5a:d0: ad:d4:8a:26:dc:b0:09:f3:df:21:38:bb:4d:ac:01: ff:f9:da:bf:64:18:ee:26:d7:98:bc:18:f2:ae:36: f8:b6:72:c9:6d:db:83:fe:ec:47:69:54:96:0d:58: 42:26:1f:3c:b2:20:91:a3:d2:3c:11:a5:a5:61:99: e8:1a:84:8a:ff:0b:a3:83:0d:ab:b4:10:5b:c3:a7: cd:ae:f4:e4:72:f5:26:a7:5b:2a:9a:3e:fc:38:12: 31:7f:04:0b:d2:c1:40:ca:33:ff:2d:18:8f:38:ce: 63:e3:9c:7d:a4:9a:cd:6c:dd:a4:5c:b4:5c:6c:20: 77:5a:8e:d9:2f:36:22:aa:62:55:36:e2:32:60:29: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A1:03:21:07:F1:DF:45:A4:E8:10:7E:1C:4E:E0:B5:CF:9E:EF:F7 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.184.0/24 Signature Algorithm: sha256WithRSAEncryption 87:23:d1:d9:63:0b:78:eb:d3:d3:59:10:86:eb:e3:0f:24:08: 03:b4:04:ae:a0:8b:9f:2f:af:0c:cc:04:a4:23:65:f7:c5:b0: e8:2b:60:e1:67:0a:b4:0c:86:7f:f6:7b:f3:bf:97:71:90:82: d5:78:6e:7b:8c:fa:1b:d9:2d:5c:88:36:a5:ca:f0:11:d5:82: 7d:29:54:f8:08:b9:37:19:4b:cf:b6:67:c6:eb:a2:61:df:81: 5b:83:02:bb:b8:69:24:38:2a:9c:aa:76:55:9c:ca:ca:64:58: 02:d1:e4:1b:58:c1:98:9b:45:8b:c9:2a:c4:66:b7:d7:6e:c1: d5:fb:b1:b0:fd:a6:b3:72:c6:b2:d8:f4:64:1f:51:0a:ba:2f: e1:01:d5:19:33:04:6e:10:a6:9c:27:79:ea:66:89:78:71:f1: 2a:6e:c6:a7:ba:1d:90:a5:2d:ab:7c:ba:25:0e:e2:c5:65:ba: 67:85:5e:40:0e:59:ee:0d:fc:08:89:21:55:26:93:47:28:a4: f9:2f:9c:14:b3:10:6c:f2:8f:63:cf:27:84:c3:6c:2f:f2:83: e4:d4:3c:3a:d7:d5:22:a4:e9:01:2f:f6:b2:6a:1f:ff:a7:da: 6d:b5:b6:f8:ae:96:45:0d:ff:a9:80:3b:9d:c7:dd:2f:97:3b: ff:40:a8:98 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw ODAzNDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFEQTEwMzIxMDdGMURG NDVBNEU4MTA3RTFDNEVFMEI1Q0Y5RUVGRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhWxy8NipCUuxI7lCOU/qZg4nIdhZZjPoZWEeZ5A6jBFGlmz/b FsXgrbJA0m++ovvoAKBHIN/RIpYEEP/EZh7iAaS6wFf0m0AjiBab91B7EbUayRXi ZgoGRytOrDJQimVcD+Buo1yzR7SAxnpkULhdSsCuwH5a0K3UiibcsAnz3yE4u02s Af/52r9kGO4m15i8GPKuNvi2cslt24P+7EdpVJYNWEImHzyyIJGj0jwRpaVhmega hIr/C6ODDau0EFvDp82u9ORy9SanWyqaPvw4EjF/BAvSwUDKM/8tGI84zmPjnH2k ms1s3aRctFxsIHdajtkvNiKqYlU24jJgKYZfAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUHaEDIQfx30Wk6BB+HE7gtc+e7/cwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvSGFFRElRZngzMFdrNkJC LUhFN2d0Yy1lN19jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuDANBgkqhkiG9w0BAQsFAAOCAQEAhyPR2WMLeOvT01kQhuvjDyQIA7QErqCL ny+vDMwEpCNl98Ww6Ctg4WcKtAyGf/Z787+XcZCC1Xhue4z6G9ktXIg2pcrwEdWC fSlU+Ai5NxlLz7ZnxuuiYd+BW4MCu7hpJDgqnKp2VZzKymRYAtHkG1jBmJtFi8kq xGa3127B1fuxsP2ms3LGstj0ZB9RCrov4QHVGTMEbhCmnCd56maJeHHxKm7Gp7od kKUtq3y6JQ7ixWW6Z4VeQA5Z7g38CIkhVSaTRyik+S+cFLMQbPKPY88nhMNsL/KD 5NQ8OtfVIqTpAS/2smof/6fabbW2+K6WRQ3/qYA7ncfdL5c7/0ComA== -----END CERTIFICATE-----Generated at Fri May 17 10:15:26 2024 by rpki-client on console-ams.rpki-client.org