$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa File: z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa (raw, json) Hash identifier: q4V0oMpO/yBAQGUFUQzoK6e2dToxdrBV9P6NvQWOhrM= Subject key identifier: CF:A5:1C:DF:F1:C5:1B:AF:28:01:7B:02:1E:AF:9F:F0:B9:2C:D1:62 Certificate issuer: /CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B Certificate serial: EF Authority key identifier: 45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa Signing time: Thu 26 Oct 2023 15:29:45 +0000 ROA not before: Thu 26 Oct 2023 15:29:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9678 IP address blocks: 103.37.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 09:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B Validity Not Before: Oct 26 15:29:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CFA51CDFF1C51BAF28017B021EAF9FF0B92CD162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:4e:7e:2e:a6:0c:31:33:bf:6f:2d:92:14: cb:0b:51:f2:48:f7:2e:e5:a8:e7:bd:47:b1:e6:8a: ee:99:66:58:71:30:82:b3:66:aa:e1:6d:53:58:1c: f7:a8:a1:74:0b:cc:5e:d0:74:17:fe:97:e6:db:ad: cc:ce:0a:58:39:17:11:f1:d5:0e:39:a4:1e:0c:6a: d6:80:cd:52:6d:92:c2:4a:81:9a:c8:79:ef:a5:d2: 91:68:64:5f:7c:41:e6:eb:5e:8a:ee:34:4e:6e:c9: 1f:4c:36:84:d5:f0:d2:40:05:71:d4:07:3d:87:a5: 30:d7:82:8e:b5:6c:32:6e:8b:bc:b3:18:41:db:4f: f9:9b:cf:35:ef:57:47:c2:92:22:f5:fe:0d:2f:69: 0c:c5:17:ac:cc:e7:40:17:75:b6:5f:de:83:6f:09: 4c:6d:f3:f6:c4:08:8f:7e:3c:50:21:b9:87:47:1b: 60:78:71:37:3f:ec:81:6d:99:1c:70:e5:fc:7e:63: 49:1d:d9:3d:b3:53:89:c0:64:0f:e2:85:b5:fb:35: bc:2f:d1:a4:b9:6b:59:8a:06:21:9e:61:ac:cc:46: 36:c2:b4:b6:d1:51:cc:80:c5:24:4f:a2:d2:a2:17: 73:f0:ef:7e:7d:a2:60:ba:89:f0:90:18:3d:8c:f1: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:1C:DF:F1:C5:1B:AF:28:01:7B:02:1E:AF:9F:F0:B9:2C:D1:62 X509v3 Authority Key Identifier: keyid:45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.37.5.0/24 Signature Algorithm: sha256WithRSAEncryption 31:ec:7f:91:64:d8:82:a0:d3:ed:e0:0c:59:b5:6f:0b:a1:a6: a7:d8:0d:27:75:f0:c3:29:c5:89:8a:2c:77:1d:18:3a:e8:56: 5e:e2:cb:92:5c:d5:30:10:2e:2d:59:4f:a1:69:08:5d:09:73: 5d:ad:b3:e3:b0:22:c9:e4:c7:d2:7e:9a:bc:af:ae:ea:9a:8d: 7b:c5:3f:de:43:31:0d:c2:be:c2:c2:73:b5:b0:e8:4c:e8:33: 88:ae:59:4a:8b:5d:89:96:30:25:41:24:4f:dc:99:84:bd:ba: a0:9a:29:8f:7d:af:95:f1:b4:58:63:9b:90:f1:3d:ce:8e:10: 99:04:fe:06:ac:70:72:50:41:f1:85:8b:52:ff:4a:17:61:ed: e6:85:d2:1e:ab:bb:23:9a:3b:02:b8:1b:9c:f7:ab:0a:9a:3b: 74:26:1e:ea:0c:ec:c3:4e:1b:d9:b2:41:35:4a:75:49:a0:66: 86:37:9b:ab:35:38:89:43:70:eb:d2:d5:67:3f:12:39:3d:7d: f1:0a:ba:3b:35:4b:83:c9:74:65:5f:d4:a2:c8:a0:89:c2:2a: 01:1a:72:ff:e1:d7:a3:15:cc:cd:93:ff:bf:be:d6:40:28:11: 1a:33:63:6c:55:52:c2:22:ee:56:98:97:31:1f:b3:26:b9:d5: 0e:53:d8:9f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDVG MzBCNEM1RUNFNkUxMkU2RDkwODg5RDc5NDBEOEUxODcxMDcyQjAeFw0yMzEwMjYx NTI5NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENGQTUxQ0RGRjFDNTFC QUYyODAxN0IwMjFFQUY5RkYwQjkyQ0QxNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+k05+LqYMMTO/by2SFMsLUfJI9y7lqOe9R7Hmiu6ZZlhxMIKz ZqrhbVNYHPeooXQLzF7QdBf+l+bbrczOClg5FxHx1Q45pB4MataAzVJtksJKgZrI ee+l0pFoZF98QebrXoruNE5uyR9MNoTV8NJABXHUBz2HpTDXgo61bDJui7yzGEHb T/mbzzXvV0fCkiL1/g0vaQzFF6zM50AXdbZf3oNvCUxt8/bECI9+PFAhuYdHG2B4 cTc/7IFtmRxw5fx+Y0kd2T2zU4nAZA/ihbX7Nbwv0aS5a1mKBiGeYazMRjbCtLbR UcyAxSRPotKiF3Pw7359omC6ifCQGD2M8TYNAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUz6Uc3/HFG68oAXsCHq+f8Lks0WIwHwYDVR0jBBgwFoAURfMLTF7ObhLm2QiJ 15QNjhhxByswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU01UUlRD SC9SZk1MVEY3T2JoTG0yUWlKMTVRTmpoaHhCeXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1JmTUxURjdPYmhMbTJRaUoxNVFOamhoeEJ5cy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NNVFJUQ0gvejZVYzNfSEZHNjhvQVhz Q0hxLWY4TGtzMFdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGclBTANBgkqhkiG9w0BAQsFAAOCAQEAMex/kWTYgqDT7eAMWbVvC6Gmp9gNJ3Xw wynFiYosdx0YOuhWXuLLklzVMBAuLVlPoWkIXQlzXa2z47AiyeTH0n6avK+u6pqN e8U/3kMxDcK+wsJztbDoTOgziK5ZSotdiZYwJUEkT9yZhL26oJopj32vlfG0WGOb kPE9zo4QmQT+BqxwclBB8YWLUv9KF2Ht5oXSHqu7I5o7ArgbnPerCpo7dCYe6gzs w04b2bJBNUp1SaBmhjebqzU4iUNw69LVZz8SOT198Qq6OzVLg8l0ZV/UosigicIq ARpy/+HXoxXMzZP/v77WQCgRGjNjbFVSwiLuVpiXMR+zJrnVDlPYnw== -----END CERTIFICATE-----Generated at Wed Jun 19 00:29:54 2024 by rpki-client on console-ams.rpki-client.org