$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Gb-7MAxPVGknpMCThNHeSJ9vdwI.roa File: Gb-7MAxPVGknpMCThNHeSJ9vdwI.roa (raw, json) Hash identifier: O2YSg6pFYVsKK+wCNopeEAgXNIJ5G8ob7GEuCHyy2gk= Subject key identifier: 19:BF:BB:30:0C:4F:54:69:27:A4:C0:93:84:D1:DE:48:9F:6F:77:02 Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Certificate serial: 0AFC Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Gb-7MAxPVGknpMCThNHeSJ9vdwI.roa Signing time: Fri 01 Sep 2023 08:30:45 +0000 ROA not before: Fri 01 Sep 2023 08:30:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 133747 IP address blocks: 103.119.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Validity Not Before: Sep 1 08:30:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=19BFBB300C4F546927A4C09384D1DE489F6F7702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:2f:9a:30:84:90:76:ec:e5:42:f9:cb:e4: d5:e1:0c:18:b9:7d:78:0d:d5:a1:7a:13:18:d2:0c: 37:26:74:16:61:9e:63:07:79:f3:78:c4:b4:40:d7: 35:b7:a9:5d:43:76:bf:1d:c6:f1:2d:79:4d:24:85: f3:eb:71:b9:42:3f:21:1c:54:46:5c:ed:51:32:2a: 3a:db:66:67:14:43:08:66:61:f5:5f:1c:37:6a:bd: 39:6d:52:f2:49:81:5e:7e:79:42:5c:ef:38:65:fb: 22:4a:ce:8c:45:23:33:12:a6:59:fc:1b:bd:c7:ea: aa:9f:37:98:2d:99:e6:d6:65:2d:c2:64:91:cb:ea: f5:1c:82:83:f9:c1:7d:1f:21:d4:ee:1b:4a:86:c7: 97:ea:6f:fe:f5:45:2c:9c:18:9e:69:16:5c:f9:a3: 23:ad:76:b9:aa:02:ab:dd:c1:0e:57:f3:e0:51:39: 10:10:0c:0e:6e:d9:a8:8a:b0:87:c2:fe:32:e9:eb: a7:ea:67:94:7a:dc:be:f6:de:7b:86:2e:bd:34:d0: 69:b3:03:8f:95:43:ef:fd:0f:b2:b2:ff:e6:4f:d6: 9d:29:8f:a9:06:93:ec:69:d6:0c:0b:2e:59:e9:40: ba:eb:11:77:14:2f:ea:18:f9:0d:e3:55:e7:de:44: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BF:BB:30:0C:4F:54:69:27:A4:C0:93:84:D1:DE:48:9F:6F:77:02 X509v3 Authority Key Identifier: keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Gb-7MAxPVGknpMCThNHeSJ9vdwI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.212.0/22 Signature Algorithm: sha256WithRSAEncryption 48:5b:16:6c:eb:26:38:3a:63:47:68:e9:3a:11:88:ea:5f:2a: a0:90:60:c9:a9:41:4d:d6:d1:af:c9:dc:d6:e0:01:c1:7d:ac: 09:cc:55:c6:a8:32:ce:19:04:5e:60:b4:62:5e:9a:27:d3:d3: 67:30:d8:7a:59:da:fc:35:22:fb:91:2f:ab:23:b9:a2:f3:61: 6a:0b:92:20:7c:4f:a8:97:79:38:c5:89:da:fc:99:27:a3:a1: 59:84:e6:6e:e6:fe:ae:34:7e:38:c6:01:7a:10:11:f2:70:5b: 79:2e:13:9d:c3:78:ee:d1:5e:b3:9e:e4:ee:fe:76:ac:52:5e: c8:2f:5e:cc:68:04:c2:89:e7:d0:58:3b:23:38:b7:12:84:09: 8c:78:93:ee:73:89:ff:cc:7a:5a:72:72:b7:14:9e:80:4d:4a: fa:10:1a:3b:fa:7a:f2:a3:b3:cf:bc:2f:17:5b:e1:8a:f0:37: c4:1e:7d:ae:de:21:dc:21:cd:aa:8c:6a:67:c1:b8:68:bf:30: 21:a4:07:3d:b8:56:36:9e:ca:2a:2b:3b:2c:be:d7:db:3e:e0: b2:73:e8:4b:f0:a1:7b:b8:3c:8d:d0:0c:dc:e4:ea:f6:11:3d: a0:18:5e:8f:5f:24:dd:c9:37:0a:e2:6e:09:b1:44:d2:12:5f: a6:89:46:95 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yMzA5MDEw ODMwNDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE5QkZCQjMwMEM0RjU0 NjkyN0E0QzA5Mzg0RDFERTQ4OUY2Rjc3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUpi+aMISQduzlQvnL5NXhDBi5fXgN1aF6ExjSDDcmdBZhnmMH efN4xLRA1zW3qV1Ddr8dxvEteU0khfPrcblCPyEcVEZc7VEyKjrbZmcUQwhmYfVf HDdqvTltUvJJgV5+eUJc7zhl+yJKzoxFIzMSpln8G73H6qqfN5gtmebWZS3CZJHL 6vUcgoP5wX0fIdTuG0qGx5fqb/71RSycGJ5pFlz5oyOtdrmqAqvdwQ5X8+BRORAQ DA5u2aiKsIfC/jLp66fqZ5R63L723nuGLr000GmzA4+VQ+/9D7Ky/+ZP1p0pj6kG k+xp1gwLLlnpQLrrEXcUL+oY+Q3jVefeRF01AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUGb+7MAxPVGknpMCThNHeSJ9vdwIwHwYDVR0jBBgwFoAUXNEK1bakd108UE1m EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvR2ItN01BeFBWR2tucE1D VGhOSGVTSjl2ZHdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amd31DANBgkqhkiG9w0BAQsFAAOCAQEASFsWbOsmODpjR2jpOhGI6l8qoJBgyalB TdbRr8nc1uABwX2sCcxVxqgyzhkEXmC0Yl6aJ9PTZzDYelna/DUi+5EvqyO5ovNh aguSIHxPqJd5OMWJ2vyZJ6OhWYTmbub+rjR+OMYBehAR8nBbeS4TncN47tFes57k 7v52rFJeyC9ezGgEwonn0Fg7Izi3EoQJjHiT7nOJ/8x6WnJytxSegE1K+hAaO/p6 8qOzz7wvF1vhivA3xB59rt4h3CHNqoxqZ8G4aL8wIaQHPbhWNp7KKis7LL7X2z7g snPoS/Che7g8jdAM3OTq9hE9oBhej18k3ck3CuJuCbFE0hJfpolGlQ== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:05 2024 by rpki-client on console-ams.rpki-client.org