$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa File: A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa (raw, json) Hash identifier: S83iHrTt8IVEMVIya5LQY4h8TL0jizpTGCXOE4vGHHM= Subject key identifier: 03:CA:02:8D:D4:6B:22:82:7A:05:7A:BC:53:F3:E4:9B:0B:55:63:FF Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0B6D Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa Signing time: Fri 01 Sep 2023 09:45:58 +0000 ROA not before: Fri 01 Sep 2023 09:45:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18182 IP address blocks: 61.64.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 10:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Sep 1 09:45:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=03CA028DD46B22827A057ABC53F3E49B0B5563FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:ea:3c:f1:9c:26:3f:43:f6:4a:ef:0b:f0: 71:28:04:c7:15:e1:27:a8:a5:21:79:68:81:98:51: 9a:e8:e3:f9:25:60:76:a2:e4:92:9a:a4:0f:52:ec: 84:02:04:72:78:12:c8:ac:e3:23:88:8c:2c:12:ba: 9d:2b:ad:ce:59:a7:ac:ae:c0:10:e7:6d:3f:93:e9: 1b:df:ee:62:ed:b1:a2:43:c2:ee:1d:16:1d:f6:d0: d5:0a:6b:14:72:3f:ba:58:0b:1b:07:94:ce:25:5d: 72:53:68:76:38:b6:12:44:cb:7a:f7:9d:56:3e:21: cc:c4:f2:da:4c:47:8a:1f:c5:ba:1c:c2:fc:ad:97: 75:1b:cc:b4:42:e7:0c:1a:a8:e9:a0:55:31:41:b5: 6e:5c:6f:62:38:d2:bb:a4:9f:1c:58:dc:3e:4c:a8: ec:a3:83:88:1e:ca:28:3a:24:51:ef:fd:aa:f7:38: 48:ea:05:45:bc:2c:01:c3:5a:6b:54:ff:37:98:af: 6a:3c:9a:7e:f9:1e:5c:74:f9:b2:79:31:d1:7e:76: 24:b5:bd:6c:ed:44:ef:3d:9a:8e:e6:5d:c6:a6:48: 78:f0:38:5d:37:25:2c:f7:4a:d5:49:3f:a4:b2:e3: 77:80:30:aa:f3:8a:cb:00:68:b1:7a:91:68:46:a3: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CA:02:8D:D4:6B:22:82:7A:05:7A:BC:53:F3:E4:9B:0B:55:63:FF X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.64.0/18 Signature Algorithm: sha256WithRSAEncryption 9b:3c:aa:ae:8a:1a:79:bf:d6:a9:46:b2:a4:46:72:aa:4f:68: f5:20:e9:ba:97:1c:35:ab:03:d1:a7:7a:ca:78:cf:d1:84:72: 59:2c:54:f7:49:df:cb:d8:b4:46:46:bb:30:97:9d:87:c3:f5: a0:a9:1e:4e:5d:3a:6e:fa:0d:ff:34:37:c3:e5:a8:07:e7:e4: 3e:71:50:68:b3:c9:65:0b:35:35:90:d3:58:52:b7:01:80:b0: 5e:a0:ff:69:87:d2:3c:fc:1a:bc:10:9f:e8:69:d9:ef:09:01: 7f:75:65:b7:47:96:f3:5b:57:ef:3a:ad:f2:fb:da:88:e6:7f: d9:41:42:c3:ce:e4:b4:4b:88:4f:e1:ee:d6:64:57:85:15:09: f9:6c:44:bd:3f:0d:78:8f:d9:41:3a:68:b5:c5:32:3b:5b:3c: 9d:b3:16:c1:7b:58:65:2d:b8:04:7d:cd:ca:3a:83:ac:ba:89: 45:5b:09:31:69:72:1a:45:01:55:7a:94:10:b4:da:a0:15:be: e0:ca:5f:8a:42:e9:98:82:82:d4:93:90:ed:d7:9a:cf:12:92: 53:c9:af:1d:15:30:ed:80:dc:2c:37:fa:1b:12:0d:4f:51:6a: 6e:f7:84:6c:8f:cd:ad:3c:dc:8c:71:16:b2:ec:9b:69:d6:de: 87:08:d0:9c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yMzA5MDEw OTQ1NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAzQ0EwMjhERDQ2QjIy ODI3QTA1N0FCQzUzRjNFNDlCMEI1NTYzRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDYuo88ZwmP0P2Su8L8HEoBMcV4SeopSF5aIGYUZro4/klYHai 5JKapA9S7IQCBHJ4Esis4yOIjCwSup0rrc5Zp6yuwBDnbT+T6Rvf7mLtsaJDwu4d Fh320NUKaxRyP7pYCxsHlM4lXXJTaHY4thJEy3r3nVY+IczE8tpMR4ofxbocwvyt l3UbzLRC5wwaqOmgVTFBtW5cb2I40ruknxxY3D5MqOyjg4geyig6JFHv/ar3OEjq BUW8LAHDWmtU/zeYr2o8mn75Hlx0+bJ5MdF+diS1vWztRO89mo7mXcamSHjwOF03 JSz3StVJP6Sy43eAMKrzissAaLF6kWhGo9SnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUA8oCjdRrIoJ6BXq8U/PkmwtVY/8wHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9BOG9DamRScklvSjZCWHE4VV9Q a213dFZZXzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGPUBA MA0GCSqGSIb3DQEBCwUAA4IBAQCbPKquihp5v9apRrKkRnKqT2j1IOm6lxw1qwPR p3rKeM/RhHJZLFT3Sd/L2LRGRrswl52Hw/WgqR5OXTpu+g3/NDfD5agH5+Q+cVBo s8llCzU1kNNYUrcBgLBeoP9ph9I8/Bq8EJ/oadnvCQF/dWW3R5bzW1fvOq3y+9qI 5n/ZQULDzuS0S4hP4e7WZFeFFQn5bES9Pw14j9lBOmi1xTI7WzydsxbBe1hlLbgE fc3KOoOsuolFWwkxaXIaRQFVepQQtNqgFb7gyl+KQumYgoLUk5Dt15rPEpJTya8d FTDtgNwsN/obEg1PUWpu94Rsj82tPNyMcRay7Jtp1t6HCNCc -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:25 2024 by rpki-client on console-fra.rpki-client.org