$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/2VyQVSdDSdqSVP9LUkdZHiTaVNw.roa File: 2VyQVSdDSdqSVP9LUkdZHiTaVNw.roa (raw, json) Hash identifier: k2dhOTsMZQsngffVIPou0ajCVWzg7gOUk9W4VUNSRkw= Subject key identifier: D9:5C:90:55:27:43:49:DA:92:54:FF:4B:52:47:59:1E:24:DA:54:DC Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3 Certificate serial: 02B0 Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/2VyQVSdDSdqSVP9LUkdZHiTaVNw.roa Signing time: Fri 01 Sep 2023 08:31:38 +0000 ROA not before: Fri 01 Sep 2023 08:31:38 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38839 IP address blocks: 103.159.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3 Validity Not Before: Sep 1 08:31:38 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D95C9055274349DA9254FF4B5247591E24DA54DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:6c:35:58:d3:6e:3b:b9:c5:b4:1a:fe:c4: 12:7a:68:d3:4a:dc:c8:b6:0d:97:45:31:12:44:21: 4c:25:90:1a:31:e6:29:4f:a1:60:2c:8c:7c:95:d2: 74:f5:ae:c8:de:ae:98:02:7f:a8:22:47:5d:cd:bd: 12:34:94:7f:6f:3b:2e:68:b5:2f:49:3d:6d:73:c5: e1:9b:6e:f9:3a:86:2c:a2:67:2b:74:0f:d0:e8:82: 33:02:c8:9c:fb:95:3f:90:de:51:91:23:c8:f3:ea: f7:ec:b5:9b:11:1b:08:fd:d6:c3:05:ef:8e:97:ef: ea:ee:62:57:00:45:05:ae:c8:12:cb:05:d2:44:9d: 7d:f9:6f:d4:b8:2f:a2:eb:a0:f9:7e:30:82:ba:88: aa:83:4d:da:0b:f5:7a:be:5f:49:4e:55:97:b8:3b: 11:ff:fb:10:3c:13:0a:81:85:17:71:b4:ff:32:11: c9:70:0e:2a:c9:7c:e1:61:02:34:05:9e:31:19:7a: 85:64:41:15:71:e5:36:8d:44:e7:07:da:eb:16:d8: 8f:90:da:89:da:06:ac:c5:b2:03:44:26:09:d5:c9: d4:f4:70:bb:35:64:3c:eb:ed:5f:4f:33:54:2f:4b: fe:f3:4c:8c:c7:de:eb:8a:b1:fd:5a:99:6f:8b:5e: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5C:90:55:27:43:49:DA:92:54:FF:4B:52:47:59:1E:24:DA:54:DC X509v3 Authority Key Identifier: keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/2VyQVSdDSdqSVP9LUkdZHiTaVNw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.176.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:c1:e1:52:f7:48:59:90:7d:d0:5f:8f:2e:a2:51:16:cb:5c: 37:75:43:d7:40:c8:5c:05:40:9e:2a:e7:c1:f8:1a:74:4a:f2: 73:b0:b4:a4:57:82:b3:7d:53:dd:f4:65:0e:55:8d:fe:dc:d2: 69:ae:71:cb:c1:87:38:2b:62:ab:5e:cd:7c:98:3c:fb:52:89: 5b:9d:ab:be:1b:9e:f1:6a:fd:51:23:cf:42:ed:28:32:19:2d: ad:a1:03:b9:4c:50:f3:da:76:67:59:4d:14:8f:57:b1:69:59: 6a:63:d5:89:3e:7f:40:54:3f:d7:ee:b6:43:03:6f:03:c9:4e: cf:bc:a7:32:c4:d3:d7:f1:60:32:9f:43:2f:5d:ae:0e:46:70: f0:1b:4f:ea:57:82:f5:cf:56:b4:7d:03:a0:bf:3a:17:58:f4: 49:76:9d:0a:ce:ec:cf:73:8f:b7:7b:e1:d6:c1:a5:6f:b8:ab: f3:de:73:db:34:0d:e5:54:df:8c:ad:3a:0e:6b:e6:52:55:0c: 2d:2a:0a:2f:3c:9c:c9:7d:72:7c:c0:36:c9:d7:ff:f5:9e:cb: 3f:53:9c:25:68:a1:8e:9b:4f:76:2e:84:cb:9e:2b:5a:fe:df: d3:d9:f8:60:d0:65:f5:cb:b2:19:7f:7e:d3:08:a6:ee:0b:7d: 54:76:34:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICArAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA4 MkY1RDk5MkU2QkMyNUUwODk5NzUzODYxNjE4MDcwMkU4NTdDMzAeFw0yMzA5MDEw ODMxMzhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ5NUM5MDU1Mjc0MzQ5 REE5MjU0RkY0QjUyNDc1OTFFMjREQTU0REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV6Gw1WNNuO7nFtBr+xBJ6aNNK3Mi2DZdFMRJEIUwlkBox5ilP oWAsjHyV0nT1rsjerpgCf6giR13NvRI0lH9vOy5otS9JPW1zxeGbbvk6hiyiZyt0 D9DogjMCyJz7lT+Q3lGRI8jz6vfstZsRGwj91sMF746X7+ruYlcARQWuyBLLBdJE nX35b9S4L6LroPl+MIK6iKqDTdoL9Xq+X0lOVZe4OxH/+xA8EwqBhRdxtP8yEclw DirJfOFhAjQFnjEZeoVkQRVx5TaNROcH2usW2I+Q2onaBqzFsgNEJgnVydT0cLs1 ZDzr7V9PM1QvS/7zTIzH3uuKsf1amW+LXnYHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2VyQVSdDSdqSVP9LUkdZHiTaVNwwHwYDVR0jBBgwFoAUoIL12ZLmvCXgiZdT hhYYBwLoV8MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVL L29JTDEyWkxtdkNYZ2laZFRoaFlZQndMb1Y4TS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0lMMTJaTG12Q1hnaVpkVGhoWVlCd0xvVjhNLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVLLzJWeVFWU2REU2RxU1ZQOUxV a2RaSGlUYVZOdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn n7AwDQYJKoZIhvcNAQELBQADggEBAIzB4VL3SFmQfdBfjy6iURbLXDd1Q9dAyFwF QJ4q58H4GnRK8nOwtKRXgrN9U930ZQ5Vjf7c0mmuccvBhzgrYqtezXyYPPtSiVud q74bnvFq/VEjz0LtKDIZLa2hA7lMUPPadmdZTRSPV7FpWWpj1Yk+f0BUP9futkMD bwPJTs+8pzLE09fxYDKfQy9drg5GcPAbT+pXgvXPVrR9A6C/OhdY9El2nQrO7M9z j7d74dbBpW+4q/Pec9s0DeVU34ytOg5r5lJVDC0qCi88nMl9cnzANsnX//Weyz9T nCVooY6bT3YuhMueK1r+39PZ+GDQZfXLshl/ftMIpu4LfVR2NAw= -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:29 2024 by rpki-client on console-ams.rpki-client.org