$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/oWOPw0oQqxZo3F7zZ-cKONZTDwM.roa File: oWOPw0oQqxZo3F7zZ-cKONZTDwM.roa (raw, json) Hash identifier: Oeo8Ds/ELRjGNqkyjsgK3iIwv4PBsHPSnWmKNzXA/xo= Subject key identifier: A1:63:8F:C3:4A:10:AB:16:68:DC:5E:F3:67:E7:0A:38:D6:53:0F:03 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0BA6 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/oWOPw0oQqxZo3F7zZ-cKONZTDwM.roa Signing time: Fri 01 Sep 2023 09:44:05 +0000 ROA not before: Fri 01 Sep 2023 09:44:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 103.106.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Sep 1 09:44:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A1638FC34A10AB1668DC5EF367E70A38D6530F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:a0:79:69:53:26:f7:e5:b9:18:02:c8:5c: 54:a8:7e:d3:ef:ee:7f:d3:af:87:8f:cb:59:3c:cb: 29:b4:b0:c3:8a:0b:30:5a:65:90:6d:28:81:9a:92: 39:c2:f8:87:e1:d0:07:10:c1:88:2a:ac:7b:3d:a4: 76:70:a5:56:f2:22:9e:87:cf:25:af:ed:08:88:b0: d0:12:c3:b5:2b:89:39:23:72:df:dd:3d:ad:cd:fd: 87:20:48:3d:a6:bb:3e:ca:cc:56:44:ae:59:fe:21: d4:4b:6b:4d:4f:79:b3:2f:f8:c5:93:f3:63:7e:ab: b6:b6:d3:52:b5:ca:7f:06:49:64:b5:51:8a:f1:0e: 3c:d1:25:58:e5:15:a8:89:09:6b:94:2b:a5:59:6c: 2d:d1:63:d1:76:4d:40:fb:77:53:fa:7f:a9:3f:80: 95:0d:cd:51:d2:a8:af:69:76:fa:fd:61:7f:92:d1: ee:94:67:b3:dd:1e:88:9b:b0:39:56:19:e5:04:a6: b3:25:23:ee:bb:49:e1:8a:b8:b3:87:59:d4:0d:9d: f1:50:e0:11:65:4d:75:f9:b4:45:17:fd:37:2d:01: 4b:0d:a9:05:e2:ad:24:31:36:5b:c1:d3:8b:c4:02: a8:29:fc:97:37:6c:54:14:9b:11:b8:27:b9:c4:0b: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:63:8F:C3:4A:10:AB:16:68:DC:5E:F3:67:E7:0A:38:D6:53:0F:03 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/oWOPw0oQqxZo3F7zZ-cKONZTDwM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.106.55.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:fd:58:3d:ed:e7:ff:74:a3:52:aa:9f:ab:c8:40:80:5c:d5: a2:76:4d:ce:9c:ba:39:53:e6:6f:75:03:4b:06:8c:88:f8:de: b7:71:7c:14:52:db:6b:54:62:87:f8:57:54:8d:46:97:20:ca: 62:dd:29:99:a6:79:0d:d3:94:cf:f3:a4:21:b2:ca:df:0c:94: a6:ad:4e:c5:7a:1f:7a:b0:a9:25:fb:91:40:51:6a:8e:d2:41: db:6f:bc:31:40:3b:3b:30:f7:bc:48:96:66:a5:79:b2:68:54: a7:5e:60:ec:4c:ff:94:9b:a6:06:a0:c0:12:98:a2:e2:11:03: 37:e1:f1:cb:01:a0:dd:31:24:44:8a:4e:41:f0:81:49:2a:34: 8c:1a:98:62:cc:b1:30:75:c9:0a:f1:72:ee:24:6d:a1:6a:b1: 14:20:53:86:0e:4c:99:c4:36:2e:a3:d4:5c:ff:db:39:f7:ab: 0f:b4:d0:a7:51:13:76:9c:3f:0d:4c:08:54:cc:9e:8f:d1:87: b3:ae:5d:72:fd:b1:35:fd:03:c6:a6:e5:54:f7:c0:ac:fe:4d: dc:3a:d2:fe:5f:b2:06:0d:c2:a5:68:d5:ba:2c:40:ef:4f:ca: 37:61:4c:46:24:7f:7d:e1:6e:0d:f8:72:f3:ff:07:65:9f:e5: 15:a7:d7:e2 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMzA5MDEw OTQ0MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEExNjM4RkMzNEExMEFC MTY2OERDNUVGMzY3RTcwQTM4RDY1MzBGMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6p6B5aVMm9+W5GALIXFSoftPv7n/Tr4ePy1k8yym0sMOKCzBa ZZBtKIGakjnC+Ifh0AcQwYgqrHs9pHZwpVbyIp6HzyWv7QiIsNASw7UriTkjct/d Pa3N/YcgSD2muz7KzFZErln+IdRLa01PebMv+MWT82N+q7a201K1yn8GSWS1UYrx DjzRJVjlFaiJCWuUK6VZbC3RY9F2TUD7d1P6f6k/gJUNzVHSqK9pdvr9YX+S0e6U Z7PdHoibsDlWGeUEprMlI+67SeGKuLOHWdQNnfFQ4BFlTXX5tEUX/TctAUsNqQXi rSQxNlvB04vEAqgp/Jc3bFQUmxG4J7nECyD3AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUoWOPw0oQqxZo3F7zZ+cKONZTDwMwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL29XT1B3MG9RcXha bzNGN3paLWNLT05aVER3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnajcwDQYJKoZIhvcNAQELBQADggEBAHz9WD3t5/90o1Kqn6vIQIBc1aJ2 Tc6cujlT5m91A0sGjIj43rdxfBRS22tUYof4V1SNRpcgymLdKZmmeQ3TlM/zpCGy yt8MlKatTsV6H3qwqSX7kUBRao7SQdtvvDFAOzsw97xIlmalebJoVKdeYOxM/5Sb pgagwBKYouIRAzfh8csBoN0xJESKTkHwgUkqNIwamGLMsTB1yQrxcu4kbaFqsRQg U4YOTJnENi6j1Fz/2zn3qw+00KdRE3acPw1MCFTMno/Rh7OuXXL9sTX9A8am5VT3 wKz+Tdw60v5fsgYNwqVo1bosQO9PyjdhTEYkf33hbg34cvP/B2Wf5RWn1+I= -----END CERTIFICATE-----Generated at Sun Jun 23 13:19:18 2024 by rpki-client on console-fra.rpki-client.org