$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa File: IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa (raw, json) Hash identifier: ayDZ1Bzl8bKjeV2VVfrj/ACa48hMyn7w2oOvD7jU1O4= Subject key identifier: 21:9A:6A:37:0C:21:15:9F:D4:BF:31:1B:EA:BE:BB:1C:41:F4:16:28 Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D Certificate serial: 0210 Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa Signing time: Fri 01 Sep 2023 08:55:54 +0000 ROA not before: Fri 01 Sep 2023 08:55:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 396982 IP address blocks: 103.169.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D Validity Not Before: Sep 1 08:55:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=219A6A370C21159FD4BF311BEABEBB1C41F41628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:f4:ee:93:4c:bc:97:d4:4e:ce:a2:61:90: e7:67:ab:44:56:be:52:76:bf:93:f1:d2:6e:13:ca: 8b:c9:a8:87:b5:b8:e6:5f:ff:39:49:22:c0:f3:63: 18:f8:76:ac:ff:99:17:06:2c:2c:1a:4f:fe:1e:e6: 4a:a0:c4:bc:3b:a0:34:b8:b6:95:61:c5:ee:ca:46: 31:78:ff:1a:35:59:53:e0:4b:57:6f:79:9f:d9:d1: 64:33:69:98:a5:78:73:17:cc:31:bc:7c:f9:59:ef: 3c:e1:77:61:ff:9a:27:5c:30:b0:10:b4:0b:f6:96: f4:e3:6f:2e:83:56:e8:62:df:15:8e:fe:e0:09:ff: ee:34:01:f5:d1:ba:21:d6:b1:5b:2b:a5:3d:25:50: 1a:3b:49:b3:00:61:d3:8a:92:40:06:83:64:ea:82: 6e:07:93:0f:4b:2a:95:df:71:e5:25:91:04:45:bd: f0:f0:5c:11:f0:9d:02:a5:c7:95:e4:47:da:9d:90: ef:24:20:29:43:9b:88:16:22:a2:41:68:f1:17:2b: 66:4a:19:36:8f:3a:1d:20:c5:9b:84:10:f4:a0:15: 61:54:78:2d:67:5c:93:63:a9:e6:a0:8e:0d:60:f4: c3:59:51:e6:41:2a:92:6a:82:8e:c8:82:65:63:00: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9A:6A:37:0C:21:15:9F:D4:BF:31:1B:EA:BE:BB:1C:41:F4:16:28 X509v3 Authority Key Identifier: keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.169.213.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:fd:9c:34:0c:62:b5:2e:ed:b9:62:a4:88:72:f8:5b:c3:e0: 7c:27:97:4c:52:4e:8a:c0:24:ce:da:f8:3b:8d:bc:8b:47:41: 68:1d:16:96:76:51:ff:6b:df:f9:c1:88:a7:26:9d:b2:11:e5: ff:6e:6f:64:11:b4:7c:f9:31:c9:26:b1:5b:75:54:42:bb:bf: cb:ab:aa:80:38:6d:f7:68:a0:5d:0c:79:76:b0:aa:c7:ce:29: 16:2e:70:4e:d0:f0:dd:7a:f6:56:25:3f:08:8d:39:dc:5c:32: 77:49:09:17:f7:74:0a:53:79:ad:03:36:80:1d:e5:49:0d:96: fc:a3:e6:4c:19:bd:0f:2e:aa:09:1e:01:fe:48:9e:eb:ad:1b: 25:b3:ff:8a:09:cf:27:c8:40:af:7d:90:61:b4:cd:0f:70:ac: 08:29:dd:d6:4d:c9:76:6d:77:c8:34:87:a9:7b:17:45:d3:ae: 39:3d:21:87:21:29:8c:43:fc:0f:2d:a7:da:df:f2:f5:d9:74: 5f:af:d3:7e:25:b5:6c:02:d1:8e:1c:4a:a2:b5:46:8e:6c:4a: ea:a3:ee:af:ba:12:7f:87:33:54:36:43:42:58:91:70:1e:a0: 33:74:45:70:16:d8:de:84:52:97:e2:b7:83:89:b5:5e:5c:7d: ea:32:c4:5f -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDBE Q0YwNTBDNENFQUU1MDIxQUE4RDMxMTk1M0YwMkQ2MTIxRkQ4RDAeFw0yMzA5MDEw ODU1NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIxOUE2QTM3MEMyMTE1 OUZENEJGMzExQkVBQkVCQjFDNDFGNDE2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS6/Tuk0y8l9ROzqJhkOdnq0RWvlJ2v5Px0m4TyovJqIe1uOZf /zlJIsDzYxj4dqz/mRcGLCwaT/4e5kqgxLw7oDS4tpVhxe7KRjF4/xo1WVPgS1dv eZ/Z0WQzaZileHMXzDG8fPlZ7zzhd2H/midcMLAQtAv2lvTjby6DVuhi3xWO/uAJ /+40AfXRuiHWsVsrpT0lUBo7SbMAYdOKkkAGg2Tqgm4Hkw9LKpXfceUlkQRFvfDw XBHwnQKlx5XkR9qdkO8kIClDm4gWIqJBaPEXK2ZKGTaPOh0gxZuEEPSgFWFUeC1n XJNjqeagjg1g9MNZUeZBKpJqgo7IgmVjADcPAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUIZpqNwwhFZ/UvzEb6r67HEH0FigwHwYDVR0jBBgwFoAUANzwUMTOrlAhqo0x GVPwLWEh/Y0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFQUFlN T05FWS9BTnp3VU1UT3JsQWhxbzB4R1ZQd0xXRWhfWTAuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0FOendVTVRPcmxBaHFvMHhHVlB3TFdFaF9ZMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hBUFBZTU9ORVkvSVpwcU53d2hG Wl9VdnpFYjZyNjdIRUgwRmlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGep1TANBgkqhkiG9w0BAQsFAAOCAQEAP/2cNAxitS7tuWKkiHL4W8Pg fCeXTFJOisAkztr4O428i0dBaB0WlnZR/2vf+cGIpyadshHl/25vZBG0fPkxySax W3VUQru/y6uqgDht92igXQx5drCqx84pFi5wTtDw3Xr2ViU/CI053Fwyd0kJF/d0 ClN5rQM2gB3lSQ2W/KPmTBm9Dy6qCR4B/kie660bJbP/ignPJ8hAr32QYbTND3Cs CCnd1k3Jdm13yDSHqXsXRdOuOT0hhyEpjEP8Dy2n2t/y9dl0X6/TfiW1bALRjhxK orVGjmxK6qPur7oSf4czVDZDQliRcB6gM3RFcBbY3oRSl+K3g4m1Xlx96jLEXw== -----END CERTIFICATE-----Generated at Mon May 6 05:46:22 2024 by rpki-client on console-fra.rpki-client.org