$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa File: HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa (raw, json) Hash identifier: jp4CzdKAc9wTNZAWxR0pRmOWSKGhQikc2IlDKZQPg+Q= Subject key identifier: 1C:D3:87:C9:0E:AC:77:35:5C:A7:4B:C7:18:40:DD:B9:46:D9:88:6F Certificate issuer: /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94 Certificate serial: 0122 Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa Signing time: Fri 01 Sep 2023 10:04:05 +0000 ROA not before: Fri 01 Sep 2023 10:04:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 31972 IP address blocks: 103.159.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94 Validity Not Before: Sep 1 10:04:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1CD387C90EAC77355CA74BC71840DDB946D9886F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:b0:a7:c4:bf:d8:ba:9b:eb:6a:31:7b:9c: 9a:25:83:c8:3a:c2:f4:97:3c:df:6a:ba:a4:ab:11: e3:33:d8:11:09:ba:93:ff:c5:eb:a9:5b:35:3a:f6: 06:06:5a:cc:fd:8a:2f:2f:52:35:e0:2e:bd:4f:68: b7:85:e9:75:51:39:f9:48:eb:cb:71:b5:9d:67:ed: da:c3:2e:d8:e7:e1:40:c4:f3:f9:f5:0d:38:0d:43: 3a:d6:29:00:fd:fc:33:80:23:dd:8c:f8:03:1b:f3: 1a:1f:73:f0:93:5a:e3:b6:4a:fe:98:a9:35:50:e5: fe:97:a3:d7:ba:84:16:11:d2:12:1e:a2:4e:66:da: 16:b9:2b:4e:26:a5:4b:da:3d:8c:9e:11:9c:7c:22: 47:c2:bb:fa:75:a1:73:f4:fd:59:ff:7a:32:e3:6f: 00:a3:00:12:2e:d3:9d:25:dd:ff:08:78:09:c3:23: ba:53:ee:98:75:ca:72:9d:7e:17:4d:89:38:91:72: cc:d6:04:9e:c3:05:40:bd:57:6e:08:c0:37:f7:ca: 66:f4:71:cd:49:17:e4:c3:9a:b8:7d:ae:79:68:c0: d3:5a:18:22:43:28:34:fc:59:90:13:5e:5d:b4:f9: 3c:1c:af:39:f1:5a:bf:bc:37:d4:9a:5a:69:43:7a: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:87:C9:0E:AC:77:35:5C:A7:4B:C7:18:40:DD:B9:46:D9:88:6F X509v3 Authority Key Identifier: keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.206.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:f1:bf:41:c5:5f:08:dd:b7:78:83:90:c3:36:4e:45:f4:0f: b9:5b:9d:d2:39:ea:b8:6f:c9:f6:0e:a7:fb:c5:19:5b:a5:54: fa:e2:1b:40:d8:d9:02:dd:7f:79:91:ef:a9:9f:d0:bf:fb:89: a2:3d:a7:01:6b:79:08:6c:b3:79:ce:a5:9c:50:a6:b1:cc:54: f9:d5:9f:57:67:05:eb:5f:c4:c2:ae:2b:50:17:e9:73:dd:f5: 0f:53:7a:b5:e7:fb:5f:da:33:01:98:ef:2f:08:7a:de:2f:e8: 39:11:63:12:b2:ca:2a:eb:47:e2:15:8d:ae:e3:d2:b3:85:2d: c0:f0:8c:4a:17:12:80:20:8a:51:4f:ae:de:2a:29:19:4d:fc: 9c:9f:95:da:b8:a5:a1:0c:7b:73:61:60:b6:2e:9f:8c:bc:49: 73:8c:c8:9e:5e:98:19:63:e1:04:d2:a8:42:a2:61:de:dd:ae: c5:f7:11:fc:7e:3b:81:6b:d1:e1:c0:aa:da:c3:d0:78:9c:60: 24:d4:67:ba:2c:75:e5:7b:1f:db:33:18:3c:3a:bd:5b:d0:6f: db:75:db:3d:f1:23:d9:86:05:0d:72:d4:d8:36:06:b0:32:99: ec:ce:68:26:97:a0:f4:1f:c2:d9:90:22:80:53:7c:07:c2:0c: 49:22:c0:c7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICASIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 RUQyRkQ2QUQ1QzVCNTY4N0RGNjE0QTI3NUMyRkM4NDhENEU5NDAeFw0yMzA5MDEx MDA0MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFDRDM4N0M5MEVBQzc3 MzU1Q0E3NEJDNzE4NDBEREI5NDZEOTg4NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+uLCnxL/YupvrajF7nJolg8g6wvSXPN9quqSrEeMz2BEJupP/ xeupWzU69gYGWsz9ii8vUjXgLr1PaLeF6XVROflI68txtZ1n7drDLtjn4UDE8/n1 DTgNQzrWKQD9/DOAI92M+AMb8xofc/CTWuO2Sv6YqTVQ5f6Xo9e6hBYR0hIeok5m 2ha5K04mpUvaPYyeEZx8IkfCu/p1oXP0/Vn/ejLjbwCjABIu050l3f8IeAnDI7pT 7ph1ynKdfhdNiTiRcszWBJ7DBUC9V24IwDf3ymb0cc1JF+TDmrh9rnlowNNaGCJD KDT8WZATXl20+TwcrznxWr+8N9SaWmlDet73AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUHNOHyQ6sdzVcp0vHGEDduUbZiG8wHwYDVR0jBBgwFoAUKY7S/WrVxbVoffYU onXC/ISNTpQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFROUy9L WTdTX1dyVnhiVm9mZllVb25YQ19JU05UcFEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0tZN1NfV3JWeGJWb2ZmWVVvblhDX0lTTlRwUS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RUTlMvSE5PSHlRNnNkelZjcDB2SEdFRGR1 VWJaaUc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWefzjAN BgkqhkiG9w0BAQsFAAOCAQEATPG/QcVfCN23eIOQwzZORfQPuVud0jnquG/J9g6n +8UZW6VU+uIbQNjZAt1/eZHvqZ/Qv/uJoj2nAWt5CGyzec6lnFCmscxU+dWfV2cF 61/Ewq4rUBfpc931D1N6tef7X9ozAZjvLwh63i/oORFjErLKKutH4hWNruPSs4Ut wPCMShcSgCCKUU+u3iopGU38nJ+V2riloQx7c2Fgti6fjLxJc4zInl6YGWPhBNKo QqJh3t2uxfcR/H47gWvR4cCq2sPQeJxgJNRnuix15Xsf2zMYPDq9W9Bv23XbPfEj 2YYFDXLU2DYGsDKZ7M5oJpeg9B/C2ZAigFN8B8IMSSLAxw== -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:08 2024 by rpki-client on console-ams.rpki-client.org