$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/nZTE6Ta97wirsPlGA51UuvYYYwg.roa File: nZTE6Ta97wirsPlGA51UuvYYYwg.roa (raw, json) Hash identifier: K8N7wbAXRmAscy0AeK5fiKVas7w53Djg4qnacDbSxzU= Subject key identifier: 9D:94:C4:E9:36:BD:EF:08:AB:B0:F9:46:03:9D:54:BA:F6:18:63:08 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 0438 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/nZTE6Ta97wirsPlGA51UuvYYYwg.roa Signing time: Fri 01 Sep 2023 08:03:43 +0000 ROA not before: Fri 01 Sep 2023 08:03:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 205329 IP address blocks: 103.156.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 03:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Sep 1 08:03:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9D94C4E936BDEF08ABB0F946039D54BAF6186308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:e9:16:75:9f:8c:90:ff:5f:9c:98:78:c4: 52:09:d6:27:bd:b4:3a:df:db:af:fd:cf:f8:e3:b4: 72:08:d5:c5:e3:5b:0b:de:92:08:b9:98:b8:e6:de: 47:4a:c0:19:48:0d:9a:4f:92:33:12:9b:a1:53:6a: 05:48:88:5a:45:ae:20:4d:c1:f2:be:6d:5b:80:1a: 96:5f:2f:b9:00:d0:2e:49:1d:20:14:a0:47:eb:da: 84:40:c2:a9:e1:55:82:eb:10:5f:76:95:82:a6:0c: a6:f9:68:ce:10:2f:2b:2f:ab:2c:2c:97:fb:07:b7: c6:14:f6:af:b9:2a:28:3f:6e:33:2f:bc:1f:18:a4: 54:d2:78:59:e7:d9:2e:9e:38:dd:1d:df:ca:9d:e1: c5:a6:dd:d1:29:ed:98:2a:22:d0:95:79:bb:1e:d8: 09:67:68:eb:cc:10:74:b3:10:46:5d:41:26:ba:64: 84:a6:c0:3b:47:80:a6:ce:e8:76:6b:c6:53:f7:b4: 0a:95:fb:7e:10:f8:9c:7d:88:1f:d8:04:ee:ae:02: 8c:8f:db:5b:64:95:76:18:ea:e5:b0:54:80:84:52: 8f:9e:f0:da:23:b6:77:73:11:ba:6a:46:e8:0e:5b: 33:cf:05:cf:0a:d2:fb:3f:21:7c:5d:97:a6:51:26: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:C4:E9:36:BD:EF:08:AB:B0:F9:46:03:9D:54:BA:F6:18:63:08 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/nZTE6Ta97wirsPlGA51UuvYYYwg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.185.0/24 Signature Algorithm: sha256WithRSAEncryption 64:c1:c2:c6:73:59:fa:01:db:74:95:34:a3:45:2f:81:c4:1f: c6:29:37:c4:e4:59:07:9c:22:cc:ec:e4:d8:54:91:0c:b4:2c: 3b:04:82:34:cd:1e:41:b6:8d:a5:2f:64:3b:2a:1e:6a:33:de: 6a:37:7e:7b:28:59:63:52:db:88:db:92:dd:ab:6f:50:25:4e: 43:4d:f9:d6:39:30:1e:d4:11:42:92:d7:da:c4:b7:54:aa:ce: dc:67:1a:4a:93:d9:2f:82:b7:2c:e8:40:d2:54:5d:9b:6c:17: 69:f3:2d:ca:f1:39:f1:0e:90:42:49:4a:02:96:3d:da:21:47: 46:b9:77:ea:57:fa:8b:27:7f:03:23:0a:16:f4:55:6f:c0:45: 3f:9e:f0:e3:ee:26:63:aa:cc:d0:45:53:0e:2b:e2:28:8c:9f: cc:26:79:b9:cb:70:bc:12:05:d0:d8:62:1b:13:44:c1:f0:8f: ba:28:55:c8:99:2a:4f:c0:19:97:f4:b2:b5:a4:df:f5:a3:bb: 3f:7f:97:e8:80:7d:8a:fa:d1:36:79:3e:c7:7b:2f:d3:25:3a: 61:e4:c0:90:12:8f:37:b1:4b:b2:a6:cd:42:a8:3e:15:93:5a: e3:91:0a:67:a3:fb:1b:1c:ed:58:0e:df:2f:d2:08:3a:c4:24: 24:e8:59:ea -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw ODAzNDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlEOTRDNEU5MzZCREVG MDhBQkIwRjk0NjAzOUQ1NEJBRjYxODYzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpo+kWdZ+MkP9fnJh4xFIJ1ie9tDrf26/9z/jjtHII1cXjWwve kgi5mLjm3kdKwBlIDZpPkjMSm6FTagVIiFpFriBNwfK+bVuAGpZfL7kA0C5JHSAU oEfr2oRAwqnhVYLrEF92lYKmDKb5aM4QLysvqywsl/sHt8YU9q+5Kig/bjMvvB8Y pFTSeFnn2S6eON0d38qd4cWm3dEp7ZgqItCVebse2AlnaOvMEHSzEEZdQSa6ZISm wDtHgKbO6HZrxlP3tAqV+34Q+Jx9iB/YBO6uAoyP21tklXYY6uWwVICEUo+e8Noj tndzEbpqRugOWzPPBc8K0vs/IXxdl6ZRJvTzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUnZTE6Ta97wirsPlGA51UuvYYYwgwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvblpURTZUYTk3d2lyc1Bs R0E1MVV1dllZWXdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuTANBgkqhkiG9w0BAQsFAAOCAQEAZMHCxnNZ+gHbdJU0o0UvgcQfxik3xORZ B5wizOzk2FSRDLQsOwSCNM0eQbaNpS9kOyoeajPeajd+eyhZY1LbiNuS3atvUCVO Q0351jkwHtQRQpLX2sS3VKrO3GcaSpPZL4K3LOhA0lRdm2wXafMtyvE58Q6QQklK ApY92iFHRrl36lf6iyd/AyMKFvRVb8BFP57w4+4mY6rM0EVTDiviKIyfzCZ5uctw vBIF0NhiGxNEwfCPuihVyJkqT8AZl/SytaTf9aO7P3+X6IB9ivrRNnk+x3sv0yU6 YeTAkBKPN7FLsqbNQqg+FZNa45EKZ6P7GxztWA7fL9IIOsQkJOhZ6g== -----END CERTIFICATE-----Generated at Fri May 17 22:07:42 2024 by rpki-client on console-ams.rpki-client.org