$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINENET/15ikr4dDCk61O7TGXa4MmrVxsjw.roa File: 15ikr4dDCk61O7TGXa4MmrVxsjw.roa (raw, json) Hash identifier: hT/wQjPfykSeHfDuvlsYbENUayHmLJC26TtqkSA6/mo= Subject key identifier: D7:98:A4:AF:87:43:0A:4E:B5:3B:B4:C6:5D:AE:0C:9A:B5:71:B2:3C Certificate issuer: /CN=45542320685E62421C114DBA65B8F5705A774845 Certificate serial: BC Authority key identifier: 45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/15ikr4dDCk61O7TGXa4MmrVxsjw.roa Signing time: Wed 06 Mar 2024 12:20:44 +0000 ROA not before: Wed 06 Mar 2024 12:20:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 150770 IP address blocks: 103.197.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45542320685E62421C114DBA65B8F5705A774845 Validity Not Before: Mar 6 12:20:44 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D798A4AF87430A4EB53BB4C65DAE0C9AB571B23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:7e:3c:eb:24:22:a4:eb:27:35:42:cb:62: 20:58:0d:57:ee:93:27:1e:33:a8:05:30:b7:12:8a: ef:ab:c5:9a:de:8b:1e:6d:58:65:44:87:77:de:48: c4:6b:66:71:6b:e3:16:3a:17:5f:0c:6f:3f:df:83: 62:a4:e4:64:4f:77:eb:ab:db:56:63:d0:f2:2a:58: 1a:10:6a:93:75:63:88:65:8d:91:c9:5a:31:30:ea: a1:1f:59:ee:54:54:3e:2c:c3:63:45:75:5c:48:f7: 7b:4a:d7:fe:df:20:7e:ad:60:c5:44:d6:14:0b:b5: 85:94:16:cc:63:70:17:3a:14:4a:b9:a8:64:18:47: 20:61:7f:fe:b2:ec:54:1b:40:c1:e3:23:af:74:87: aa:fc:30:64:76:bb:a0:6d:70:3e:e5:33:f6:7c:cf: a5:4b:78:60:db:bc:50:ac:8d:99:0f:0c:73:50:b9: 9f:22:9d:8c:82:37:87:d1:c4:9c:03:ae:53:24:39: 60:56:26:71:a9:7a:03:5e:e7:14:bb:b7:be:e9:bd: 58:6d:73:36:b8:8e:d4:18:09:44:58:45:7a:c0:bc: 8a:0d:5e:a0:39:fd:4a:29:be:30:73:d4:28:9f:b6: cb:b0:6d:20:ff:30:c5:53:7d:a7:63:60:2d:f9:39: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:A4:AF:87:43:0A:4E:B5:3B:B4:C6:5D:AE:0C:9A:B5:71:B2:3C X509v3 Authority Key Identifier: keyid:45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/15ikr4dDCk61O7TGXa4MmrVxsjw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.158.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:4d:4e:7f:8b:77:d4:4e:be:fe:fa:bf:37:a9:f2:92:c1:05: 5f:9d:09:a3:5e:36:d9:33:87:92:4c:35:5e:e7:19:24:25:d5: db:58:79:d9:27:d0:64:fd:f4:1c:44:90:99:d8:55:bc:3a:ee: 5b:47:01:66:7c:eb:fe:3b:2f:d3:9f:39:21:2c:3d:df:03:cb: d7:12:bf:13:82:2b:a9:47:35:7f:4a:66:b7:75:38:37:a2:d3: 85:73:49:75:67:9d:95:ec:2d:e4:dc:a7:51:44:aa:c2:6f:0c: 7f:e2:c5:15:43:3f:5e:f9:ef:a3:cb:3b:b5:67:25:c6:d1:77: 63:b8:c2:3d:2f:5e:90:f5:98:a5:20:50:cc:2c:8c:f7:f9:0b: d1:65:18:dc:ca:d5:e1:01:c9:4a:f0:d3:46:89:bf:bd:70:f8: 3b:23:d1:87:e9:cf:16:11:7a:14:3e:0d:42:df:38:ac:79:9e: 6b:ba:65:7b:cc:d5:79:54:5d:a3:d7:d8:f8:6b:2d:c5:b1:35: 04:ef:1f:70:9c:b2:e1:c9:9d:1e:dd:b2:00:90:64:85:f4:99: 1f:ec:41:5e:64:cf:b0:63:cb:3d:f1:8a:fe:14:d6:d6:31:71: 64:73:90:1c:e1:70:8c:de:65:57:f3:82:5a:8a:7b:01:1b:4f: 27:bd:92:54 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICALwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU1 NDIzMjA2ODVFNjI0MjFDMTE0REJBNjVCOEY1NzA1QTc3NDg0NTAeFw0yNDAzMDYx MjIwNDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ3OThBNEFGODc0MzBB NEVCNTNCQjRDNjVEQUUwQzlBQjU3MUIyM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0EX486yQipOsnNULLYiBYDVfukyceM6gFMLcSiu+rxZreix5t WGVEh3feSMRrZnFr4xY6F18Mbz/fg2Kk5GRPd+ur21Zj0PIqWBoQapN1Y4hljZHJ WjEw6qEfWe5UVD4sw2NFdVxI93tK1/7fIH6tYMVE1hQLtYWUFsxjcBc6FEq5qGQY RyBhf/6y7FQbQMHjI690h6r8MGR2u6BtcD7lM/Z8z6VLeGDbvFCsjZkPDHNQuZ8i nYyCN4fRxJwDrlMkOWBWJnGpegNe5xS7t77pvVhtcza4jtQYCURYRXrAvIoNXqA5 /UopvjBz1CiftsuwbSD/MMVTfadjYC35OYX/AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU15ikr4dDCk61O7TGXa4MmrVxsjwwHwYDVR0jBBgwFoAURVQjIGheYkIcEU26 Zbj1cFp3SEUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkVO RVQvUlZRaklHaGVZa0ljRVUyNlpiajFjRnAzU0VVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9SVlFqSUdoZVlrSWNFVTI2WmJqMWNGcDNTRVUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSElORU5FVC8xNWlrcjRkRENrNjFP N1RHWGE0TW1yVnhzancucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ8WeMA0GCSqGSIb3DQEBCwUAA4IBAQBtTU5/i3fUTr7++r83qfKSwQVfnQmj XjbZM4eSTDVe5xkkJdXbWHnZJ9Bk/fQcRJCZ2FW8Ou5bRwFmfOv+Oy/TnzkhLD3f A8vXEr8TgiupRzV/Sma3dTg3otOFc0l1Z52V7C3k3KdRRKrCbwx/4sUVQz9e+e+j yzu1ZyXG0XdjuMI9L16Q9ZilIFDMLIz3+QvRZRjcytXhAclK8NNGib+9cPg7I9GH 6c8WEXoUPg1C3ziseZ5rumV7zNV5VF2j19j4ay3FsTUE7x9wnLLhyZ0e3bIAkGSF 9Jkf7EFeZM+wY8s98Yr+FNbWMXFkc5Ac4XCM3mVX84JainsBG08nvZJU -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:43 2024 by rpki-client on console-fra.rpki-client.org