$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/iJQ-Qa_1kej9JOF79iyvvjRnDkE.roa File: iJQ-Qa_1kej9JOF79iyvvjRnDkE.roa (raw, json) Hash identifier: CI2PacseFib9PKvcPlNRuISA308aN4ul/lEnK2sYXww= Subject key identifier: 88:94:3E:41:AF:F5:91:E8:FD:24:E1:7B:F6:2C:AF:BE:34:67:0E:41 Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Certificate serial: 0281 Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/iJQ-Qa_1kej9JOF79iyvvjRnDkE.roa Signing time: Mon 26 Aug 2024 05:19:08 +0000 ROA not before: Mon 26 Aug 2024 05:19:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 103.182.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Validity Not Before: Aug 26 05:19:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=88943E41AFF591E8FD24E17BF62CAFBE34670E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8f:b3:9b:3a:6c:f0:3f:bd:35:87:49:87:f1: 92:3a:48:6b:99:5b:2d:a5:7d:e8:7f:3b:89:f7:e8: e2:1c:54:f2:4b:da:4a:d5:c9:ad:c7:d8:56:b8:3e: 87:ae:3a:fd:35:9c:80:65:68:13:20:11:f5:2d:de: c9:cb:69:6f:1b:38:05:6b:40:6a:06:d3:23:08:b7: 49:3c:ca:f3:10:d5:ed:58:f6:04:fe:7e:04:64:3d: 2e:91:c6:8d:13:ac:b3:78:bf:eb:d6:79:b1:54:26: d2:66:fa:bd:5d:53:3c:8d:4f:47:64:49:9d:22:ce: 1e:8f:00:3a:1e:b4:97:1d:de:07:36:64:80:fd:76: 8e:0c:1b:d8:89:ee:af:5f:fc:cc:bf:1f:6f:9c:50: e3:cc:36:a2:d4:1a:22:c8:ba:1d:c9:ca:93:46:94: 58:b0:ec:4c:e4:06:05:c8:69:6f:c0:92:5d:47:b5: c1:7c:22:64:58:92:26:59:bb:e8:12:f9:c5:a0:53: 30:d1:f1:70:bc:10:cc:24:24:b2:cb:b8:6f:2f:da: 8e:8a:fd:27:9f:4a:e3:63:77:ef:89:7b:28:a1:c9: 13:9a:e0:0e:c0:f3:3b:e9:cf:e8:5e:01:ca:73:5c: 20:7a:e1:af:0b:48:b8:22:8c:68:03:e8:09:99:8a: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:94:3E:41:AF:F5:91:E8:FD:24:E1:7B:F6:2C:AF:BE:34:67:0E:41 X509v3 Authority Key Identifier: keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/iJQ-Qa_1kej9JOF79iyvvjRnDkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.182.226.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:4e:5c:4a:45:02:8f:bb:5f:bc:31:69:7c:0a:3e:d2:2a:a0: e4:1e:d2:f3:1f:95:39:9f:65:c8:eb:53:be:e5:d0:38:80:ea: 6c:22:71:1a:6d:e6:a2:3d:08:48:d7:74:60:74:5d:21:e8:ff: 26:2d:ba:b6:3d:15:1c:41:bf:22:0c:05:4b:9b:47:b4:ca:5d: 9b:94:66:fc:cf:a1:06:07:26:56:3b:d0:41:b6:99:50:09:ba: 63:fa:f6:f2:ab:d4:ce:4c:99:e0:1e:18:37:68:98:a7:28:e1: d8:4e:5d:46:67:ae:4f:91:72:32:83:7c:31:ae:db:8e:0e:be: e7:2f:91:8d:07:a3:75:02:cc:6e:2c:ec:de:9b:30:95:fb:2e: 1d:e5:76:0d:13:85:cd:6a:37:46:17:af:ed:f0:a4:36:3c:ff: 4b:f5:4f:e5:fe:4f:c6:e1:27:5a:3a:36:58:9f:0c:07:91:2b: 06:e5:b7:2e:00:18:d9:e4:08:47:d8:3f:bb:b4:70:8b:34:b2: c1:4f:5b:6a:7d:27:25:80:8c:4d:bf:b6:b2:65:fb:7d:24:cb: 6c:4a:26:75:32:ae:8d:8b:af:5b:e7:e6:d6:8d:81:08:2b:32: 2c:63:52:52:4c:a6:80:64:8e:00:e1:8b:82:95:9f:12:06:a1: 4d:ce:90:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ux N0Q5MjNBQTBCQzZCMEEwOEI1QTE4N0JFRTlDQURFOEQ1MEVBRjAeFw0yNDA4MjYw NTE5MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4OTQzRTQxQUZGNTkx RThGRDI0RTE3QkY2MkNBRkJFMzQ2NzBFNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDij7ObOmzwP701h0mH8ZI6SGuZWy2lfeh/O4n36OIcVPJL2krV ya3H2Fa4PoeuOv01nIBlaBMgEfUt3snLaW8bOAVrQGoG0yMIt0k8yvMQ1e1Y9gT+ fgRkPS6Rxo0TrLN4v+vWebFUJtJm+r1dUzyNT0dkSZ0izh6PADoetJcd3gc2ZID9 do4MG9iJ7q9f/My/H2+cUOPMNqLUGiLIuh3JypNGlFiw7EzkBgXIaW/Akl1HtcF8 ImRYkiZZu+gS+cWgUzDR8XC8EMwkJLLLuG8v2o6K/SefSuNjd++JeyihyROa4A7A 8zvpz+heAcpzXCB64a8LSLgijGgD6AmZigwBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiJQ+Qa/1kej9JOF79iyvvjRnDkEwHwYDVR0jBBgwFoAUfhfZI6oLxrCgi1oY e+6crejVDq8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNI L2ZoZlpJNm9MeHJDZ2kxb1llLTZjcmVqVkRxOC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZmhmWkk2b0x4ckNnaTFvWWUtNmNyZWpWRHE4LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNIL2lKUS1RYV8xa2VqOUpPRjc5 aXl2dmpSbkRrRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn tuIwDQYJKoZIhvcNAQELBQADggEBAHxOXEpFAo+7X7wxaXwKPtIqoOQe0vMflTmf ZcjrU77l0DiA6mwicRpt5qI9CEjXdGB0XSHo/yYturY9FRxBvyIMBUubR7TKXZuU ZvzPoQYHJlY70EG2mVAJumP69vKr1M5MmeAeGDdomKco4dhOXUZnrk+RcjKDfDGu 244OvucvkY0Ho3UCzG4s7N6bMJX7Lh3ldg0Thc1qN0YXr+3wpDY8/0v1T+X+T8bh J1o6NlifDAeRKwblty4AGNnkCEfYP7u0cIs0ssFPW2p9JyWAjE2/trJl+30ky2xK JnUyro2Lr1vn5taNgQgrMixjUlJMpoBkjgDhi4KVnxIGoU3OkOI= -----END CERTIFICATE-----Generated at Sat Sep 28 12:03:26 2024 by rpki-client on console-fra.rpki-client.org