$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/NNSY5rQ6vinXiSRO6GxApI03oU4.roa File: NNSY5rQ6vinXiSRO6GxApI03oU4.roa (raw, json) Hash identifier: 8FFvpZY7NbqKzaoEk8pio9eMkm7sqFlrAXaJr32c6II= Subject key identifier: 34:D4:98:E6:B4:3A:BE:29:D7:89:24:4E:E8:6C:40:A4:8D:37:A1:4E Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Certificate serial: 0182 Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/NNSY5rQ6vinXiSRO6GxApI03oU4.roa Signing time: Fri 01 Sep 2023 09:04:19 +0000 ROA not before: Fri 01 Sep 2023 09:04:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 103.182.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 04:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Validity Not Before: Sep 1 09:04:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=34D498E6B43ABE29D789244EE86C40A48D37A14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:1e:ac:97:4d:83:90:2d:f7:90:fe:b3:88: 2f:69:7f:b9:a2:db:ce:29:67:d9:56:69:84:89:4a: 73:26:31:23:f8:5b:33:80:87:4e:5c:be:39:99:3c: 51:d0:ec:18:0e:36:bd:04:f9:d3:cb:47:5e:79:00: b6:3d:86:da:62:ea:2b:86:ab:2d:79:2b:27:2a:9a: 0b:43:8f:e3:75:a7:2e:47:28:29:e1:b4:9f:38:d2: cf:73:70:09:42:9d:4e:6f:bf:06:04:fc:b8:86:3b: 51:7e:54:a5:2d:23:11:d6:f5:43:eb:57:de:0c:35: 56:69:95:86:dd:bb:1c:55:9b:17:36:b4:ea:ff:a6: 21:37:ee:52:5c:3b:40:0a:27:74:51:f2:a0:36:71: a4:7a:87:ef:4a:e6:3f:76:92:75:85:31:99:92:e3: 09:99:d6:c2:ad:81:ca:81:00:56:c0:47:e8:0f:6b: 50:2a:d2:bc:f3:ed:f8:ed:8d:71:28:b3:91:f8:e7: b0:5c:cf:46:da:7e:3e:bd:19:76:3f:4f:b4:15:6a: 3b:2c:e0:fd:67:2f:a4:5f:a5:a9:f1:d3:a1:f9:71: 8f:9b:d1:b5:58:d7:ba:16:ae:fa:d3:08:1b:03:af: bf:3b:50:8e:b9:f8:22:66:66:3d:af:38:91:4e:09: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D4:98:E6:B4:3A:BE:29:D7:89:24:4E:E8:6C:40:A4:8D:37:A1:4E X509v3 Authority Key Identifier: keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/NNSY5rQ6vinXiSRO6GxApI03oU4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.182.227.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:ab:60:09:35:a3:ab:1c:c8:41:09:d5:1f:bb:17:09:21:c1: 5a:03:c8:ef:7f:cd:30:fd:35:d0:1a:04:b7:fc:0e:b9:7c:13: 16:6d:38:af:6d:3e:c8:24:a3:34:60:54:43:e8:cb:ca:02:7d: 5d:9a:14:8b:64:4b:b0:a2:62:a9:20:c3:04:15:2e:20:c6:22: 19:8b:9c:82:c5:e3:e5:e4:9a:e1:46:34:e7:dd:bd:a8:a4:3d: b5:b9:70:a8:b4:0f:f1:cc:70:38:56:c9:75:4b:ca:45:68:bf: c9:b2:a7:35:ea:2b:17:40:81:20:a0:cb:2c:34:a8:be:2b:28: 00:22:c2:68:da:a8:cd:64:50:e8:41:26:20:9d:bb:50:28:14: 14:52:a0:05:97:2d:9a:0a:f8:fe:df:d1:16:c0:9c:e7:c0:e2: 1d:24:99:a8:9a:ca:48:ee:bc:3f:3c:51:34:56:17:be:69:23: 01:61:2e:44:1d:b4:df:a5:eb:a2:8f:c1:54:5b:28:3e:62:6a: 41:26:28:81:8f:2e:fc:15:64:29:ee:b6:74:28:6a:ca:55:03: e3:c4:5f:18:15:82:4b:66:8b:d0:78:15:04:8d:6c:f2:8b:7a: 2b:07:35:c4:88:1c:99:05:1d:b5:8f:c9:56:cb:dc:02:18:23: 06:8b:db:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ux N0Q5MjNBQTBCQzZCMEEwOEI1QTE4N0JFRTlDQURFOEQ1MEVBRjAeFw0yMzA5MDEw OTA0MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0RDQ5OEU2QjQzQUJF MjlENzg5MjQ0RUU4NkM0MEE0OEQzN0ExNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC95x6sl02DkC33kP6ziC9pf7mi284pZ9lWaYSJSnMmMSP4WzOA h05cvjmZPFHQ7BgONr0E+dPLR155ALY9htpi6iuGqy15KycqmgtDj+N1py5HKCnh tJ840s9zcAlCnU5vvwYE/LiGO1F+VKUtIxHW9UPrV94MNVZplYbduxxVmxc2tOr/ piE37lJcO0AKJ3RR8qA2caR6h+9K5j92knWFMZmS4wmZ1sKtgcqBAFbAR+gPa1Aq 0rzz7fjtjXEos5H457Bcz0bafj69GXY/T7QVajss4P1nL6Rfpanx06H5cY+b0bVY 17oWrvrTCBsDr787UI65+CJmZj2vOJFOCUfXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNNSY5rQ6vinXiSRO6GxApI03oU4wHwYDVR0jBBgwFoAUfhfZI6oLxrCgi1oY e+6crejVDq8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNI L2ZoZlpJNm9MeHJDZ2kxb1llLTZjcmVqVkRxOC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZmhmWkk2b0x4ckNnaTFvWWUtNmNyZWpWRHE4LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNIL05OU1k1clE2dmluWGlTUk82 R3hBcEkwM29VNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn tuMwDQYJKoZIhvcNAQELBQADggEBAEqrYAk1o6scyEEJ1R+7FwkhwVoDyO9/zTD9 NdAaBLf8Drl8ExZtOK9tPsgkozRgVEPoy8oCfV2aFItkS7CiYqkgwwQVLiDGIhmL nILF4+XkmuFGNOfdvaikPbW5cKi0D/HMcDhWyXVLykVov8mypzXqKxdAgSCgyyw0 qL4rKAAiwmjaqM1kUOhBJiCdu1AoFBRSoAWXLZoK+P7f0RbAnOfA4h0kmaiaykju vD88UTRWF75pIwFhLkQdtN+l66KPwVRbKD5iakEmKIGPLvwVZCnutnQoaspVA+PE XxgVgktmi9B4FQSNbPKLeisHNcSIHJkFHbWPyVbL3AIYIwaL24w= -----END CERTIFICATE-----Generated at Sun Jun 23 15:32:02 2024 by rpki-client on console-ams.rpki-client.org